I am having a devil of a time getting some of my directories properly
password protected.

In my jrun-users.xml file, I've defined the following user and role:

<user>
<user-name>thisuser</user-name>
<password>password</password>
</user>

<role>
<role-name>users</role-name>
<description>User area only.</description>
<user-name>thisuser</user-name>
</role>

...and in web.xml, I've defined the following:

<login-config>
   <auth-method>BASIC</auth-method>
   <realm-name>Administrative Tools</realm-name>
</login-config>

<security-constraint>
   <web-resource-collection>
     <web-resource-name>protected</web-resource-name>
     <url-pattern>/files/protected/*</url-pattern>
     <description>Restricted Access</description>
   </web-resource-collection>
   <auth-constraint>
     <role-name>users</role-name>
     <description>Restricted access</description>
   </auth-constraint>
</security-constraint>

So, if I've done this right, when I try to browse to
http://mysite.com/files/protected/, I should get a popup box asking for
user name and password, right?  Unfortunately, I do not.

What am I missing?

--
Richard S. Crawford
Programmer III: Oracle/Solaris Wrangler
UC Davis Extension Distance Education Group (http://unexdlc.ucdavis.edu)
2901 K Street, Suite 200C
Sacramento, CA  95816
(916)327-7793
[Todays Threads] [This Message] [Subscription] [Fast Unsubscribe] [User Settings] [Donations and Support]

Reply via email to