Hi,

I am using Apache ODE 1.3.6 which is configured to use PostgreSQL as database 
in external mode. It is deployed on Tomcat 7.0.47. For security purposes, I 
have made the following configuration in web.xml :

<security-constraint>
                                <web-resource-collection>
                                                
<web-resource-name>Processes</web-resource-name>
                                                <url-pattern>/*</url-pattern>
                                                
<http-method-omission>GET</http-method-omission>
                                </web-resource-collection>
                                <auth-constraint>
                                <role-name> security-role</role-name>
                                </auth-constraint>
                                <user-data-constraint>
                                                
<transport-guarantee>CONFIDENTIAL</transport-guarantee>
                                </user-data-constraint>
                </security-constraint>

                <security-role>
                                <description>Secured Processes</description>
                                <role-name>security-role</role-name>
                </security-role>

                <login-config>
                                <auth-method>BASIC</auth-method>
                </login-config>

The following configuration is done in tomcat-users.xml :

  <role rolename="security-role"/>
  <user username="username" password="password" roles="security-role"/>

Because of this configuration, the web pages processes.html, instances.html, 
etc. doesn't work even though the processes are working fine.

The following messages are displayed for various pages :

"Currently no processes are available." - processes.html
"Currently no instances are available." - instances.html

Is there any way to configure ode 1.3.6 so that the processes and the processes 
instances can be administered using the mentioned pages over HTTPs using basic 
authentication?

Regards,
Rohit

Reply via email to