> -----Original Message-----
> From: Mark Murphy [mailto:jmarkmur...@gmail.com]
> Sent: Thursday, April 17, 2014 9:01 AM
> To: Tomcat Users List
> Subject: Re: Configuration question
> 
> Here is the configuration, as you can see the default host is set and
> the IP is not aliased.
> 
> in server.xml
> ...
>     <Connector port="80" protocol="HTTP/1.1"
>                connectionTimeout="20000"
>                redirectPort="443" />
> ...
>     <Connector protocol="org.apache.coyote.http11.Http11NioProtocol"
>                port="443"
>                scheme="https" secure="true" SSLEnabled="true"
>                keystoreFile="xxxxxxx.keystore"
>                keystorePass="xxxxxxx" keyAlias="xxxxxxx"
>                clientAuth="false" sslProtocol="TLS" /> ...
>     <Engine name="Catalina"
> defaultHost="www.torquewrenchrecalibration.com">
> ...
>       <Host name="www.torquewrenchrecalibration.com"  appBase="webapps"
>             unpackWARs="true" autoDeploy="false"
>             xmlValidation="false" xmlNamespaceAware="false">
>         <Alias>www.torque-wrench-recalibration.com</Alias>
>         <Alias>www.myerstorquetracker.com</Alias>
>       </Host>
> ...
> 
> in web.xml
> ...
>     <security-constraint>
>       <web-resource-collection>
>         <web-resource-name>Entire App</web-resource-name>
>         <url-pattern>/*</url-pattern>
>       </web-resource-collection>
>       <user-data-constraint>
>         <transport-guarantee>CONFIDENTIAL</transport-guarantee>
>       </user-data-constraint>
>     </security-constraint>
> ...
> 
> 
> 
Well, with that configuration, any traffic sent to your IP address will be 
directed to your default host, i.e. your app, so that settles the question 
about the IP or DNS name generating the "error" on the WSS.  Both should return 
the same result.  So, either the WSS doesn't know what it's talking about, or 
you're not getting the message because of the connection to your login page. I 
don't see any reference to any Tomcat-initiated authentication defined here, so 
perhaps it’s a problem with the WSS, or as Terrence pointed out, do you have 
the "manager" app deployed?  By default, it uses Basic Auth and non-SSL.  You 
might need to spruce up the security on it a bit.
Jeff 

Reply via email to