Configuring Tomcat and IIS for the Remote User Configuration

1. Install IIS.

2. Download the Apache Tomcat Connector (isapi_redirect-x.x.xx.dll) from http://www.apache.org/dist/tomcat/tomcat-connectors/jk/binaries/

3. Rename isapi_redirect-x.x.xx.dll to isapi_redirect.dll.

4. Install Tomcat (including examples).

5. Move isapi_redirect.dll to C:\Program Files\Apache Software Foundation\Tomcat 5.5\bin.

6. Create the workers.properties file in the tomcat\conf folder with the content from http://tomcat.apache.org/connectors-doc/generic_howto/quick.html. Below is sample content:

# Define 1 real worker using ajp13
worker.list=ajp13
# Set properties for ajp13 (ajp13)
worker.ajp13.type=ajp13
worker.ajp13.host=localhost
worker.ajp13.port=8009

7. Create the uriworkermap.properties file in the tomcat\conf folder. Below is sample content:

# uriworkermap.properties - IIS
#
# This file provides sample mappings for example ajp13
# worker defined in workerss.properties.
# The general sytax for this file is:
# [URL]=[Worker name]

/archibus/*=ajp13
/jsp-examples/*=ajp13

# Optionally filter out all .jpeg files inside that context
By setting the tomcatAuthentication="false" HttpServletRequest.getRemoteUser() returns the user authenticated through IIS! # For no mapping the url has to start with exclamation (!)

#!/archibus/*.jpeg=ajp13 

8. Update the connector configuration in the server.xmlfile by setting tomcatAuthentication="false". The HttpServletRequest.getRemoteUser()method returns the user authenticated through IIS.

<Connector port="8009" tomcatAuthentication="false"
enableLookups="false" redirectPort="8443 protocol="AJP/1.3" />

9. Configure the Apache Tomcat Connector (JK) according to http://tomcat.apache.org/connectors-doc/webserver_howto/iis.html

# Configuration file for the Jakarta ISAPI Redirector
# The path to the ISAPI Redirector Extension, relative to the website
# This must be in a virtual directory with execute privileges
extension_uri=/jakarta/isapi_redirect.dll
# Full path to the log file for the ISAPI Redirector
log_file=C:\Tomcat\logs\isapi.log
# Log level (debug, info, warn, error or trace)
log_level=info
# Full path to the workers.properties file
worker_file=C:\Tomcat\conf\workers.properties
# Full path to the uriworkermap.properties file
worker_mount_file=C:\Tomcat\conf\uriworkermap.properties

• Using the IIS management console, add a new virtual directory to your IIS web site.
  • The name of the virtual directory must be jakarta.
  • The virtual directory’s physical path must point to the directory where you placed isapi_redirect.dll (such as C:\Program Files\Apache Software Foundation\Tomcat 5.5\bin).
  • The virtual directory must be allowed execute access.
  • The virtual directory must have “Integrated Windows Authentication” checked, and “Anonymous Access” unchecked on the “Directory Security” tab.
• Using the IIS management console, add  isapi_redirect.dll as an ISAPI filter in your IIS web site.
  • The name of the filter is tomcat.
  • The executable is: C:\Program Files\Apache Software Foundation\Tomcat 5.5\bin\isapi_redirect.dll

10. Restart the IIS.
11. Load http://localhost/jsp-examples/index.html and run some of the Tomcat JSP examples.