SAF Security with Tomcat 6 and Java 7.0
Posted: Fri Mar 09, 2012 5:43 am
We have Tomcat downloaded from Apache and running for many years. Now I am trying to activate SAF security.
Tomcat release is 6.0.32, Java is 7.0, z/OS release is V1R13.
I have downloaded your T:Z Quickstart and copied the zos-tomcat.jar to the lib directory, also downloaded the SAF zip file and copied the saf_realm.jar to the lib directroy and created a saf-roles.xml
After these modifications to the server.xml:
<Listener className="com.dovetail.zos.tomcat.SafLifecycleListener" />
<Resource name="SafRoleDatabase" auth="Container"
type="org.apache.catalina.UserDatabase"
description="z/OS SAF Role Database"
factory="com.dovetail.zos.tomcat.SafRoleDatabaseFactory"
pathname="conf/saf-roles.xml"
readonly="true" />
<Realm className="com.dovetail.zos.tomcat.SafRealm"
resourceName="SafRoleDatabase"/>
I get the following message at Tomcat startup:
WARNING: ÝSetPropertiesRule¨{Server/Service/Engine/Realm} Setting property 'resourceName' to 'SafRoleDatabase' did not find a matching property.
I cannot figure out what's still wrong. Is there anything missing?
Tomcat release is 6.0.32, Java is 7.0, z/OS release is V1R13.
I have downloaded your T:Z Quickstart and copied the zos-tomcat.jar to the lib directory, also downloaded the SAF zip file and copied the saf_realm.jar to the lib directroy and created a saf-roles.xml
After these modifications to the server.xml:
<Listener className="com.dovetail.zos.tomcat.SafLifecycleListener" />
<Resource name="SafRoleDatabase" auth="Container"
type="org.apache.catalina.UserDatabase"
description="z/OS SAF Role Database"
factory="com.dovetail.zos.tomcat.SafRoleDatabaseFactory"
pathname="conf/saf-roles.xml"
readonly="true" />
<Realm className="com.dovetail.zos.tomcat.SafRealm"
resourceName="SafRoleDatabase"/>
I get the following message at Tomcat startup:
WARNING: ÝSetPropertiesRule¨{Server/Service/Engine/Realm} Setting property 'resourceName' to 'SafRoleDatabase' did not find a matching property.
I cannot figure out what's still wrong. Is there anything missing?