Grouper Users - Open Discussion List

[Scott Koranda <>]

Hi,

Right now authentication to grouper-ws is being done via
hand-editing of the file tomcat-users.xml with entries like
this:

<role rolename="grouper_user"/>
  <user username="jota" password="whatever" roles="grouper_user"/>
  <user username="jobr" password="whatever" roles="grouper_user"/>
  <user username="eldo" password="whatever" roles="grouper_user"/>

I would prefer to have grouper-ws "see" REMOTE_USER in the
same way that the Grouper UI "sees" REMOTE_USER. 

What changes do I need to make to my grouper-ws and Tomcat
configuration in order for REMOTE_USER to be used for
authentication (note that we are using Apache httpd to
front/proxy for Tomcat via AJP)?

I apologize if the the details are staring at me from

https://spaces.internet2.edu/display/GrouperWG/Authentication

but I have not been able to discern from that page precisely
what to do.

Thanks,

Scott