memoryRealm.xmlFeatureEncoding=Exception configuring digester to permit java encoding names in XML files. Only IANA encoding names will be supported.
realmBase.algorithm=Invalid message digest algorithm {0} specified
realmBase.alreadyStarted=This Realm has already been started
-realmBase.delegatedCredentialFail=Unable to obtain delegated credentials for user [{0}
+realmBase.delegatedCredentialFail=Unable to obtain delegated credentials for user [{0}]
realmBase.digest=Error digesting user credentials
realmBase.forbidden=Access to the requested resource has been denied
realmBase.hasRoleFailure=Username {0} does NOT have role {1}
try {
gssCredential = gssContext.getDelegCred();
} catch (GSSException e) {
- e.printStackTrace();
if (log.isDebugEnabled()) {
log.debug(sm.getString(
"realmBase.delegatedCredentialFail", name),
if (roles.length == 0 && !constraint.getAllRoles()) {
if(constraint.getAuthConstraint()) {
if( log.isDebugEnabled() )
- log.debug("No role)s ");
+ log.debug("No roles");
status = false; // No listed roles means no access at all
denyfromall = true;
break;
the user Principal. If available, the delegated credential will be
available to applications (e.g. for onward authentication to external
services) via the <code>org.apache.catalina.realm.GSS_CREDENTIAL</code>
- request attribute.If not set, the default value of <code>true</code>
+ request attribute. If not set, the default value of <code>true</code>
will be used.</p>
</attribute>