将 tomcat 集成到 siteminder
是否有使用 Siteminder 与 Tomcat 的详细指南。我在 Google 上进行了搜索，所以大多数问题都没有得到解答。
Is there a detailed guide for using Siteminder with Tomcat .I searched over Google and SO most of the questions were unanswered for this.
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（2）
以下是 Tomcat 和 JBoss 应用程序服务器代理下载的直接链接（pdf）。
https://support.ca。 com/irj/portal/phpdocs?filePath=7/5262/Integration_for_CA_Single_Sign-On_with_Tomcat_2.7.zip
或者您可以在其支持站点上搜索“CA SiteMinder Application Server Agent for Tomcat”。
-还有-
这是一个开源实现，尽管它似乎基于过滤器而不是阀门（它可能应该是）。
https://web.archive.org/ web/20150405034132/http://www.tony007.com/netegrity.htm
您可以编写自己的 JAAS 提供程序。我以前做过这个，而且不太难。
（参见http://www.kopz.org/public/documents/tomcat/ jaasintomcat.html ）
我还编写了一个自定义 Valve 实现，用于与不同的 SSO 系统集成。这并不那么简单，我在 geronimo 中遇到了类加载问题。
Here's the direct link to the Tomcat and JBoss application server agent download with pdf.
https://support.ca.com/irj/portal/phpdocs?filePath=7/5262/Integration_for_CA_Single_Sign-On_with_Tomcat_2.7.zip
or you can search on "CA SiteMinder Application Server Agent for Tomcat" on their support site.
-also-
Here's an open source implementation, although it appears to be based on filters and not Valves which it probably should be.
https://web.archive.org/web/20150405034132/http://www.tony007.com/netegrity.htm
You could write your own JAAS provider. I've done this before and it's not too hard.
( see http://www.kopz.org/public/documents/tomcat/jaasintomcat.html )
I've also written a custom Valve implementation as well for integrating with a different SSO system. It's not as straightforward and i had issues in geronimo with class loading.
最简单的解决方案是将 Apache Web 服务器放在 Tomcat 前面，并将 apache 设置为反向代理以将流量传递到 Tomcat。您需要安装适用于 Apache 的 CA SiteMinder Web 代理，但不需要 Tomcat 代理，因为您将通过 Apache 传递所有流量。
The easiest solution would be to put an Apache Web Server in front of Tomcat and setup apache as a reverse proxy to pass traffic to Tomcat. You would need to install the CA SiteMinder Web Agent for Apache, but a Tomcat agent would not be needed since you would be passing all the traffic through Apache.