It could be that the <secuirity-constraint> element is in the wrong place in the web.xml file.
Elements need to be listed in a particular order. They can't just be placed anywhere. The parser error tells you the order in which elements are allowed. Does your web.xml comply with this ? Check out the servlet specification from Sun for the full DTD -----Original Message----- From: tito santini [mailto:[EMAIL PROTECTED] Sent: 28 August 2003 15:24 To: Tomcat Users List Subject: Tomcat 4.0.3: security-constraint error in web.xml Dear all, we actually have this very "boring" problem on Tomcat 4.0.3 (why not yet upgraded? customer requirements): We want to restrict the access at our application on HTTPS port only. after many unsuccesful tests, we added, for testing purpose, these following lines (which we believe to be the minimal configuration for achieving security) to our web.xml file: <security-constraint> <web-resource-collection> <web-resource-name> Tutta IPMS </web-resource-name> </web-resource-collection> </security-constraint> Unfortunately, at startup Tomcat refuses the above lines saying, in its log file catalina.out : org.xml.sax.SAXParseException: The content of element type "web-app" must match "(icon?,display-name?,description?,distributable?,context-param*,servlet *,se rvlet-mapping*,session-config?,mime-mapping*,welcome-file-list?,error-pa ge*, taglib*,resource-ref*,security-constraint*,login-config?,security-role*, env- entry*,ejb-ref*)" What's wrong? Any hint? Very Thanks in advance for your help. Tito Santini --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] ________________________________________________________________________ This email has been scanned for all viruses by the MessageLabs Email Security System. For more information on a proactive email security service working around the clock, around the globe, visit http://www.messagelabs.com ________________________________________________________________________ --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
