通过AJP将远程用户传递给tomcat

Question

I'm using Kerberos + LDAP for authentication on Apache. I've then created an AJP from Apache to Tomcat.

Since Apache handles the authentication, is there a way to securely pass the remote user to tomcat?

Specifically, the first thing I want to achieve is using Kerberos + LDAP from Apache over AJP to Tomcat Manager.

I'd like Tomcat to allow any user that is passed into it from Apache.

Answer 1

It already happens. Just call HttpServletRequest.getRemoteUser() in your code.