According to the DTD login-config goes after security-constraint
John de la Garza wrote:
>
> I added my web app in the webapps dir and now I get this message...
> ---------------------------------------------------------
>
> Starting service Tomcat-Standalone
> Apache Tomcat/4.0-b1
> PARSE error at line 13 column -1
> org.xml.sax.SAXParseException: Element "web-app" does not allow
> "security-constraint" here.
> ---------------------------------------------------------
>
> my web.xml is like this:
>
> ---------------------------------------------------------
> <?xml version="1.0" encoding="Cp1252"?>
>
> <!DOCTYPE web-app PUBLIC '-//Sun Microsystems, Inc.//DTD Web Application
> 2.2//EN' 'http://java.sun.com/j2ee/dtds/web-app_2_2.dtd'>
> <web-app>
> <login-config>
> <auth-method>FORM</auth-method>
> <realm-name>Example Form-Based Authentication Area</realm-name>
> <form-login-config>
> <form-login-page>/login/login.jsp</form-login-page>
> <form-error-page>/servlet/BadLoginServlet</form-error-page>
> </form-login-config>
> </login-config>
> <security-constraint>
> <web-resource-collection>
> <web-resource-name>Protected Area</web-resource-name>
> <url-pattern>/servlet/LoginServlet</url-pattern>
> </web-resource-collection>
> <auth-constraint>
> <role-name>A</role-name>
> <role-name>E</role-name>
> <role-name>C</role-name>
> </auth-constraint>
> </security-constraint>
> </web-app>
> ---------------------------------------------------------
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, email: [EMAIL PROTECTED]
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, email: [EMAIL PROTECTED]
