<html> <head> <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type"> </head> <body bgcolor="#FFFFFF" text="#000000"> On 03/09/2012 10:19 PM, John Magne wrote: <blockquote cite="mid:26ea132f-f7d7-4e84-83c8-55047cd2d1a9@zmail15.collab.prod.int.phx2.redhat.com" type="cite"> <pre wrap=""> Patch to provide a custom tomcat Realm to protect CS servlets with both client authentication protection and simple authorization protection. Testing instructions in the patch's checkin message.</pre> <fieldset class="mimeAttachmentHeader"></fieldset> <pre wrap="">_______________________________________________ Pki-devel mailing list <a class="moz-txt-link-abbreviated" href="mailto:Pki-devel@redhat.com">Pki-devel@redhat.com</a> <a class="moz-txt-link-freetext" href="https://www.redhat.com/mailman/listinfo/pki-devel">https://www.redhat.com/mailman/listinfo/pki-devel</a> </pre> </blockquote> Sorry I missed this. This is really cool. Would you say that this is a complete solution for the Authentication piece (Modulo maybe extending the ACIs) or is there more work to be done. Am I correct in understanding that this uses ACIs for Authorization? </body> </html>