Hello:
I am trying to use the Tomcat JSP and servlet engine with
Apache on Linux.
I am confused about how I can get users to authenticate
themselves before accessing a servlet in my web application.
I have been reading the servlet 2.3 specification and
added the following lines to my application's web.xml file:
<security-role>
<role-name>admin</role-name>
</security-role>
<security-constraint>
<web-resource-collection>
<web-resource-name>AdminServlet</web-resource-name>
<url-pattern>/videosearch/servlet/AdminServlet</url-pattern>
<http-method>GET</http-method>
<http-method>POST</http-method>
</web-resource-collection>
<auth-constraint>
<role-name>admin</role-name>
</auth-constraint>
</security-constraint>
But, when I visit /videosearch/servlet/AdminServlet, I get
the result from the servlet without it asking for a login.
Also, I dont understand how I can set-up the password.
Any guidance would really help.
Thanks,
Neil.
--
Neil Aggarwal
JAMM Consulting, Inc. -- (972) 612-6056, http://www.JAMMConsulting.com
Custom Internet Development -- Java, JSP, servlets, databases
___________________________________________________________________________
To unsubscribe, send email to [EMAIL PROTECTED] and include in the body
of the message "signoff SERVLET-INTEREST".
Archives: http://archives.java.sun.com/archives/servlet-interest.html
Resources: http://java.sun.com/products/servlet/external-resources.html
LISTSERV Help: http://www.lsoft.com/manuals/user/user.html