Resolving Tomcat GenericPrincipal roles to attributes?

[Cantor, Scott]

On 12/5/12 12:06 PM, "Nathan Mische" <nmische at gmail.com> wrote:
>Unfortunately there is no guarantee the usernames will be unique across
>all of the data stores.  Would a better approach in this situation be to
>create unique usernames via an external auth handler? Basically I'm
>thinking of concatenating the username with
> the realm identifier: user at directoryA?

Almost certainly, yes, that's better.

You don't need to use the ExternalAuth handler either, you could create a
copy of the UsernamePassword handler that does what you need. Much more
control that way.

-- Scott