Hi all!
The USER-DATA-CONSTRAINT
doesn't seem to work with orion. I tried to set up registration in PetStore Demo
to work over SSL by putting CONFIDENTIAL in the given tag. Now when I access
../signin IE5.0 prompts me to download 0-length file "signin". SSL is working ok
on my different web-site.
Any ideas?
web.xml looks like:
..
<security-constraint>
<web-resource-collection> <web-resource-name>Authentication zone</web-resource-name> <description>no description</description> <url-pattern>/control/signin</url-pattern> <http-method>GET</http-method> <http-method>POST</http-method> </web-resource-collection> <auth-constraint> <description>no description</description> <role-name>customer</role-name> <role-name>subscriber</role-name> </auth-constraint> <user-data-constraint> <description>no description</description> <transport-guarantee>CONFIDENTIAL</transport-guarantee> </user-data-constraint> </security-constraint> .. |