Hello
I'm trying to secure a service used with LCDS through a RemothObject  
but I always get an invalid login. Here is my config.

I'm using Tomcat 5.5.25 with a tomcat-users.xml like this :

<?xml version='1.0' encoding='utf-8'?>
<tomcat-users>
   <role rolename="manager"/>
   <role rolename="tomcat"/>
   <role rolename="admin"/>
   <role rolename="role1"/>
   <role rolename="sampleuser"/>
   <user username="tomcat" password="****" roles="tomcat"/>
   <user username="both" password="****" roles="tomcat,role1"/>
   <user username="admin" password="****t" roles="admin,manager"/>
   <user username="role1" password="****" roles="role1"/>
   <user username="toto" password="****" roles="sampleuser"/>
</tomcat-users>

In my remoting-config.xml :

<destination id="secureService">
        <properties>
                <source>services.SimpleService</source>
                <scope>application</scope>
        </properties>
        <security>
                <security-constraint>
                        <auth-method>Custom</auth-method>
                        <roles>
                                <role>sampleuser</role>
                        </roles>
                </security-constraint>
        </security>
</destination>

In my context.xml

<Context path="/myApp" docBase="${catalina.home}/webapps/myApp"  
debug="0" privileged="true" antiResourceLocking="false"  
antiJARLocking="false">
        <Transaction factory="org.objectweb.jotm.UserTransactionFactory"  
jotm.timeout="60"/>
        <Valve className="flex.messaging.security.TomcatValve"/>
</Context>

I've haded the flex-tomcat-common.jar in common/lib and flex-tomcat- 
server.jar in server/lib

Any idea ? Thanks

Reply via email to