Heres my tomcat-users.xml
<tomcat-users>
<role rolename="supervisor" />
<role rolename="tomcat" />
<role rolename="role1" />
<role rolename="manager" />
<user name="tomcat" password="tomcat" roles="tomcat,supervisor" />
<user name="role1" password="tomcat" roles="role1" />
<user name="both" password="tomcat" roles="tomcat,role1" />
<user name="test" password="test" roles="supervisor,manager" />
</tomcat-users>
and a part of my web.xml
<security-constraint>
<web-resource-collection>
<web-resource-name>Security test</web-resource-name>
<url-pattern>/afile.jsp</url-pattern>
<http-method>POST</http-method>
<http-method>GET</http-method>
</web-resource-collection>
<auth-constraint>
<role-name>supervisor</role-name>
</auth-constraint>
<user-data-constraint>
<transport-guarantee>NONE</transport-guarantee>
</user-data-constraint>
</security-constraint>
<login-config>
<auth-method>FORM</auth-method>
<form-login-config>
<form-login-page>/login.html</form-login-page>
<form-error-page>/error.html</form-error-page>
</form-login-config>
</login-config>
<security-role>
<role-name>supervisor</role-name>
</security-role>
Regards
Roland
----- Original Message -----
From: "Abid Ali Teepo" <[EMAIL PROTECTED]>
To: "Tomcat Users List" <[EMAIL PROTECTED]>
Sent: Friday, July 18, 2003 12:59 PM
Subject: RE: MemoryRealm and tomcat-users.xml
Hi
Don't you have to add the roles in your web.xml under the tag
security-constraint. And there has to be matching roles in auth-constraint
and security-role.... if you haven't done this...it could be the problem ...
Abid
-----Original Message-----
From: Roland Carlsson [mailto:[EMAIL PROTECTED]
Sent: 18. juli 2003 12:52
To: Tomcat Users List
Subject: MemoryRealm and tomcat-users.xml
Hi!
I have created a simple form-based authentication.
It works well with the predefined users (tomcat, role1) but it doesn't work
at all if I try to add users and roles in the
/%tomcat-root%/conf/tomcat-users.xml.
My server.xml is not changed from install so it defines a realm in the
Engine-element that according to the comments should be used for all webapps
in the server.
What have I missed?
Thanks in advance
Roland Carlsson
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
