Hi,

I'm trying to set up authentication in tomcat for the application solr. But 
when doing this, I'm not asked for a username and password, but i get a 403.

This is the configuration I'm using:

tomcat-users.xml

<?xml version='1.0' encoding='utf-8'?>
<tomcat-users>
...
  <role rolename="ezkimjohanrole"/>
  <user username="ezkimjohan" password="<password>" roles="ezkimjohanrole"/>
</tomcat-users>

web.xml

...
    <security-constraint>
      <web-resource-collection>
       <web-resource-name>Default</web-resource-name>
        <url-pattern>/*</url-pattern>
      </web-resource-collection>
      <auth-constraint/>
    </security-constraint>
  <security-constraint>
    <web-resource-collection>
      <web-resource-name>
        Solr authenticated application
      </web-resource-name>
      <url-pattern>/solr/ezkimjohan/*</url-pattern>
      <url-pattern>/solr/ezkimjohan/admin/*</url-pattern>
      <http-method>GET</http-method>
      <http-method>POST</http-method>
    </web-resource-collection>
    <auth-constraint>
      <role-name>ezkimjohanrole</role-name>
    </auth-constraint>
  </security-constraint>
   <login-config>
    <auth-method>BASIC</auth-method>
    <realm-name>Basic Authentication</realm-name>
  </login-config>
  <security-role>
    <description>ezkimjohan</description>
    <role-name>ezkimjohanrole</role-name>
  </security-role>
</web-app>

Copy of access log:

<ip> - - [08/Jun/2010:10:16:22 +0200] "GET /solr/ezkimjohan/admin/ HTTP/1.1" 
403 1108
<ip> - - [08/Jun/2010:10:37:16 +0200] "GET /solr/ezkimjohan/admin/ HTTP/1.1" 
403 1108
<ip> - - [08/Jun/2010:10:37:16 +0200] "GET /solr/ezkimjohan/admin/ HTTP/1.1" 
403 1108

Strace:

http://pastebin.org/317854

If i remove the default block, i get a 200 respons, and no questions about 
username and password.

Any help is appreciated.

Thanks.


--
Best regards / Med vennlig hilsen

Kim Johansen - WebDeal AS
Linux Systems Administrator

E-mail: kim.johan...@webdealhosting.com
Web: http://www.webdealhosting.com







---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Reply via email to