A realm, in this case the UserDatabase realm is simply a collection of users,
passwords, and roles. You could also think of a role as a group. It identifies
valid users of a web application (or set of web applications), plus an
enumeration of the list of roles associated with each valid user.
You should be able to assign user names and passwords ok. Then you assign users
to responsibilities i.e. roles such as manager.
Realms may be defined at the Engine, Host, or Context level. The UserDataBase
realm is at the engine level i..e the top level. Host and context are
subordinate levels and their scope is limited to the host or web application
(context) level and are defined there (with the web app or host).
listed below is an example:
<tomcat-users>
<role rolename="tomcat"/>
<role rolename="role1"/>
<role rolename="manager"/>
<role rolename="admin"/>
<user username="singleton" password="paul" roles="admin,manager"/>
<user username="tomcat" password="tomcat" roles="tomcat"/>
<user username="both" password="tomcat" roles="tomcat,role1"/>
<user username="role1" password="tomcat" roles="role1"/>
<user username="admin" password="admin" roles="admin,manager"/>
</tomcat-users>
notice that userid singleton has a password of paul and has the role of admin
and manager meaning that singleton can access applications that require admin
or manager privileges in order to be used.
hope this helps.
- andy
Paul Singleton <[EMAIL PROTECTED]> wrote:
What is the correct syntax (for 5.5.9 and later) of
conf/tomcat-users.xml, and what do the entries mean?
(I've read the docs, but still don't really get it)
Should I put
or
Are these entries
purely illustrative and can they be deleted? (I prefer to keep
documentation elsewhere)
Is 'standard' a built-in role, and if so what is it for?
Finally (for now) I don't understand why my tomcat-users.xml
gets touched (at least) at each restart, and has its permissions
reset (from -rw------- to -rw-rw-r--)
Paul Singleton
--
No virus found in this outgoing message.
Checked by AVG Anti-Virus.
Version: 7.0.344 / Virus Database: 267.11.3/107 - Release Date: 20/Sep/2005
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
---------------------------------
Yahoo! for Good
Click here to donate to the Hurricane Katrina relief effort.
