Re: problems with web.xml and security

2003-06-18 Thread Bill Barker
the order as it is in the tutorial. Even removing session-config, /secure/* is not authenticated and /* is. -- Rosaria -Original Message- From: news [mailto:[EMAIL PROTECTED] On Behalf Of Bill Barker Sent: Tuesday, June 17, 2003 8:16 PM To: [EMAIL PROTECTED] Subject: Re: problems

RE: problems with web.xml and security

2003-06-18 Thread Rosaria Silipo
PROTECTED] On Behalf Of Bill Barker Sent: Tuesday, June 17, 2003 11:46 PM To: [EMAIL PROTECTED] Subject: Re: problems with web.xml and security servlet-mapping and mime-mapping are optional elements. If you don't need them, then they don't have to be there. If you remove the session-config

Re: problems with web.xml and security

2003-06-18 Thread Bill Barker
: Tuesday, June 17, 2003 11:46 PM To: [EMAIL PROTECTED] Subject: Re: problems with web.xml and security servlet-mapping and mime-mapping are optional elements. If you don't need them, then they don't have to be there. If you remove the session-config, then the rest of what is posted of your

RE: problems with web.xml and security

2003-06-18 Thread Rosaria Silipo
Thanks! The SingleSignOn valve works like a charm! -Original Message- From: news [mailto:[EMAIL PROTECTED] On Behalf Of Bill Barker Sent: Wednesday, June 18, 2003 1:02 AM To: [EMAIL PROTECTED] Subject: Re: problems with web.xml and security Now we are getting somewhere ;-). If you

Re: problems with web.xml and security

2003-06-17 Thread Jon Eaves
Rosaria Silipo wrote: Thanks Carl, Yes, I tried to see /secure as first thing and I can see it without authentication. I tried to close browser and restart it and I still could see it. Maybe the problem is on the web.xml of /secure. Is it possible? -- Rosaria If I'm reading your sentence

RE: problems with web.xml and security

2003-06-17 Thread Rosaria Silipo
Unbelieveable to say. It works! Do you have an explanation for this? Thanks -- Rosaria -Original Message- From: Carl Walker [mailto:[EMAIL PROTECTED] Sent: Tuesday, June 17, 2003 1:25 PM To: Tomcat Users List Subject: Re: problems with web.xml and security What happens when you take

RE: problems with web.xml and security

2003-06-17 Thread Rosaria Silipo
I include /secure in the root web application? Thanks -- Rosaria -Original Message- From: Jon Eaves [mailto:[EMAIL PROTECTED] Sent: Tuesday, June 17, 2003 3:04 PM To: Tomcat Users List Subject: Re: problems with web.xml and security Rosaria Silipo wrote: Thanks Carl, Yes, I tried

Re: problems with web.xml and security

2003-06-17 Thread Jon Eaves
:[EMAIL PROTECTED] Sent: Tuesday, June 17, 2003 3:04 PM To: Tomcat Users List Subject: Re: problems with web.xml and security Rosaria Silipo wrote: Thanks Carl, Yes, I tried to see /secure as first thing and I can see it without authentication. I tried to close browser and restart it and I

RE: problems with web.xml and security

2003-06-17 Thread Rosaria Silipo
] Sent: Tuesday, June 17, 2003 3:52 PM To: Tomcat Users List Subject: Re: problems with web.xml and security You need 2 web.xml files. In / (or ROOT) for the context that maps to http://my.domain.com/ and in the web application defined by the context /secure which may be in the subdirectory

Re: problems with web.xml and security

2003-06-17 Thread Bill Barker
If you check your log files, you should see that it doesn't like your web.xml file because session-config comes after servlet-mapping and before mime-mapping (which both come before security-constraint). Tomcat 4.x is picky about enforcing the order of elements in your web.xml file (TC 3.3 is as

RE: problems with web.xml and security

2003-06-17 Thread Rosaria Silipo
] On Behalf Of Bill Barker Sent: Tuesday, June 17, 2003 8:16 PM To: [EMAIL PROTECTED] Subject: Re: problems with web.xml and security If you check your log files, you should see that it doesn't like your web.xml file because session-config comes after servlet-mapping and before mime-mapping (which both come

Re: problems with web.xml and security

2003-06-17 Thread Carl Walker
In which way doesn't it work? Are you prohibited from viewing the files after logging in or can you see the files even if you haven't authenticated? -Carl Rosaria Silipo wrote: Hi, I am trying to set up Tomcat as a secure web engine. From the tutorial I understood that you should insert

RE: problems with web.xml and security

2003-06-17 Thread Rosaria Silipo
To: Tomcat Users List Subject: Re: problems with web.xml and security In which way doesn't it work? Are you prohibited from viewing the files after logging in or can you see the files even if you haven't authenticated? -Carl Rosaria Silipo wrote: Hi, I am trying to set up Tomcat as a secure web

Re: problems with web.xml and security

2003-06-17 Thread Carl Walker
Subject: Re: problems with web.xml and security In which way doesn't it work? Are you prohibited from viewing the files after logging in or can you see the files even if you haven't authenticated? -Carl Rosaria Silipo wrote: Hi, I am trying to set up Tomcat as a secure web engine

RE: problems with web.xml and security

2003-06-17 Thread Rosaria Silipo
:[EMAIL PROTECTED] Sent: Tuesday, June 17, 2003 12:56 PM To: Tomcat Users List Subject: Re: problems with web.xml and security I just tested this and wasn't able to see /secadmin without logging-on. Are you closing the browser (possible including mail clients) between trials? If you go from hitting

Re: problems with web.xml and security

2003-06-17 Thread Carl Walker
. Is it possible? -- Rosaria -Original Message- From: Carl Walker [mailto:[EMAIL PROTECTED] Sent: Tuesday, June 17, 2003 12:56 PM To: Tomcat Users List Subject: Re: problems with web.xml and security I just tested this and wasn't able to see /secadmin without logging-on. Are you