I just looked at web.xml inside the example directory.
there is a block defined like this, but i am not sure
if you are ask this.
<security-constraint>
<web-resource-collection>
<web-resource-name>Protected
Area</web-resource-name>
<url-pattern>/jsp/security/protected/*</url-pattern>
<http-method>DELETE</http-method>
<http-method>GET</http-method>
<http-method>POST</http-method>
<http-method>PUT</http-method>
</web-resource-collection>
<auth-constraint>
<role-name>tomcat</role-name>
<role-name>role1</role-name>
</auth-constraint>
</security-constraint>
<login-config>
<auth-method>FORM</auth-method>
<realm-name>Example Form-Based Authentication
Area</realm-name>
<form-login-config>
<form-login-page>/jsp/security/login/login.jsp</form-login-page>
<form-error-page>/jsp/security/login/error.jsp</form-error-page>
</form-login-config>
</login-config>
--- Ian Kallen <[EMAIL PROTECTED]> wrote:
>
> I haven't seen any real useful answers in the
> archive about the
> form based auth jsp security example 404'ing on
> /examples/jsp/security/login/j_security_check
>
> Does something need to be in server.xml to enable
> this? I'm including
> mod_jk-auto that tomcat generates in my httpd.conf
> and other examples seem
> to be fine but this example is missing any
> explanation of its usage. Any
> pointer to how this is supposed to be configured
> would be appreciated!
>
> The setup is:
> Apache 1.3.19
> Tomcat 3.2.1
> JDK 1.2.2
> FreeBSD 4.2
>
> thanks,
> -Ian
>
> --
> Ian Kallen <[EMAIL PROTECTED]> | AIM: iankallen |
> efax: (415) 354-3326
>
__________________________________________________
Do You Yahoo!?
Get email at your own domain with Yahoo! Mail.
http://personal.mail.yahoo.com/