Re: Tomcat cannot access the resources in an HTTPS webapp

2007-07-16 Thread Dimitris Mouchritsas
Mark Thomas wrote: Dimitris Mouchritsas wrote: login-config auth-methodHTTPS/auth-method realm-nameORA Examples/realm-name /login-config There is no such authentication method defined in the spec. If you want client certificate authentication then the correct value is

Re: Tomcat cannot access the resources in an HTTPS webapp

2007-07-16 Thread Lyallex
Hi There seems to be an awful lot of confusion on this list about container managed security and https ... I know I was confused when I started with it. As I see it the two are not really connected. I think what you want to do is to force an https request for certain resources in your

RE: Tomcat cannot access the resources in an HTTPS webapp

2007-07-16 Thread Caldarale, Charles R
From: Dimitris Mouchritsas [mailto:[EMAIL PROTECTED] Subject: Re: Tomcat cannot access the resources in an HTTPS webapp So if I want a subdirectory (e.g. admin) of my webapp, or my entire webapp to be accessible _only_ under https what should I do? Read section 12 of the servlet spec: http

Re: Tomcat cannot access the resources in an HTTPS webapp

2007-07-16 Thread Dimitris Mouchritsas
] Subject: Re: Tomcat cannot access the resources in an HTTPS webapp So if I want a subdirectory (e.g. admin) of my webapp, or my entire webapp to be accessible _only_ under https what should I do? Read section 12 of the servlet spec: http://jcp.org/aboutJava/communityprocess/mrel/jsr154

RE: Tomcat cannot access the resources in an HTTPS webapp

2007-07-16 Thread Caldarale, Charles R
From: Dimitris Mouchritsas [mailto:[EMAIL PROTECTED] Subject: Re: Tomcat cannot access the resources in an HTTPS webapp Out of curiosity though what should I do to add tomcat user authentication? Container-managed authentication is unique to the container, so refer to the appropriate

Re: Tomcat cannot access the resources in an HTTPS webapp

2007-07-13 Thread Mark Thomas
Dimitris Mouchritsas wrote: login-config auth-methodHTTPS/auth-method realm-nameORA Examples/realm-name /login-config There is no such authentication method defined in the spec. If you want client certificate authentication then the correct value is CLIENT-CERT. Mark

Tomcat cannot access the resources in an HTTPS webapp

2007-07-13 Thread Dimitris Mouchritsas
Hi, I'm running Tomcat 6.0.13 in Windows XP SP2. I've configured Tomcat to use SSL through the documentation instructions and it works, since I can access the ROOT webapp from https. The problem is a book example I'm trying. I've set up web.xml like this: security-constraint