We have Tomcat downloaded from Apache and running for many years. Now I am trying to activate SAF security.
Tomcat release is 6.0.32, Java is 7.0, z/OS release is V1R13.
I have downloaded your T:Z Quickstart and copied the zos-tomcat.jar to the lib directory, also downloaded the SAF zip file and copied the saf_realm.jar to the lib directroy and created a saf-roles.xml
After these modifications to the server.xml:
<Listener className="com.dovetail.zos.tomcat.SafLifecycleListener" />
<Resource name="SafRoleDatabase" auth="Container"
type="org.apache.catalina.UserDatabase"
description="z/OS SAF Role Database"
factory="com.dovetail.zos.tomcat.SafRoleDatabaseFactory"
pathname="conf/saf-roles.xml"
readonly="true" />
<Realm className="com.dovetail.zos.tomcat.SafRealm"
resourceName="SafRoleDatabase"/>
I get the following message at Tomcat startup:
WARNING: ÝSetPropertiesRule¨{Server/Service/Engine/Realm} Setting property 'resourceName' to 'SafRoleDatabase' did not find a matching property.
I cannot figure out what's still wrong. Is there anything missing?
SAF Security with Tomcat 6 and Java 7.0
Re: SAF Security with Tomcat 6 and Java 7.0
I would suggest that you first try to get SAF security working in the distribution of Tomcat 6 that is included in T:Z, rather than trying to copy piecemeal into another distribution.
Re: SAF Security with Tomcat 6 and Java 7.0
Yes, your T:Z distribution is ok. You don't have the saf_realm.jar in your distribution.
After removing saf_realm.jar from our Tomcat installation, everything works. Looks like the zos-tomcat.jar is doing the job.
Thank you.
After removing saf_realm.jar from our Tomcat installation, everything works. Looks like the zos-tomcat.jar is doing the job.
Thank you.
Re: SAF Security with Tomcat 6 and Java 7.0
Yes, that is correct: zos-tomcat.jar includes the new SAF realm for Java 6 (package com.dovetail.zos.tomcat).