Re: why is my security not working?

2005-04-22 Thread Mark Thomas
try:
 web-resource-collection
   web-resource-nameAdmin/web-resource-name
   url-pattern/*/url-pattern
  /web-resource-collection
You don't need to include the context in your url patterns.
Mark
teknokrat wrote:
I have placed the following context file
Context path=/myAdmin
cachingAllowed=false
cacheTTL=0
cacheMaxSize=0
swallowOutput=false


Realm className=org.apache.catalina.realm.UserDatabaseRealm 
debug=5/

/Context

and i have added to web.xml
 security-constraint
web-resource-collection
  web-resource-nameAdmin/web-resource-name
  url-pattern/myAdmin/*/url-pattern
 /web-resource-collection
auth-constraint
role-nameme/role-name
/auth-constraint
  /security-constraint

login-config
auth-methodBASIC/auth-method
realm-nameAdmin/realm-name
/login-config

 security-role
descriptionThe role/description
role-nameme/role-name
  /security-role

Yet, I can still access the webapp without tomcat asking for a username 
and password. I have added the role and users to tomcat-users.xml too.

thanks
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


Re: why is my security not working?

2005-04-22 Thread teknokrat
Whew, that worked. Thanks!
Do I still need the realm setting in my context file or not? and should 
it refer to UserDatabaseRealm or MemoryRealm?

Mark Thomas wrote:
try:
 web-resource-collection
   web-resource-nameAdmin/web-resource-name
   url-pattern/*/url-pattern
  /web-resource-collection
You don't need to include the context in your url patterns.
Mark
teknokrat wrote:
I have placed the following context file
Context path=/myAdmin
cachingAllowed=false
cacheTTL=0
cacheMaxSize=0
swallowOutput=false

Realm className=org.apache.catalina.realm.UserDatabaseRealm 
debug=5/
/Context

and i have added to web.xml
 security-constraint
web-resource-collection
  web-resource-nameAdmin/web-resource-name
  url-pattern/myAdmin/*/url-pattern
 /web-resource-collection
auth-constraint
role-nameme/role-name
/auth-constraint
  /security-constraint
login-config
auth-methodBASIC/auth-method
realm-nameAdmin/realm-name
/login-config
 security-role
descriptionThe role/description
role-nameme/role-name
  /security-role
Yet, I can still access the webapp without tomcat asking for a 
username and password. I have added the role and users to 
tomcat-users.xml too.

thanks
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


why is my security not working?

2005-04-22 Thread teknokrat
I have placed the following context file
Context path=/myAdmin
cachingAllowed=false
cacheTTL=0
cacheMaxSize=0
swallowOutput=false


Realm className=org.apache.catalina.realm.UserDatabaseRealm 
debug=5/

/Context
and i have added to web.xml
 security-constraint
web-resource-collection
web-resource-nameAdmin/web-resource-name
url-pattern/myAdmin/*/url-pattern
/web-resource-collection
auth-constraint
role-nameme/role-name
/auth-constraint
 /security-constraint

login-config
auth-methodBASIC/auth-method
realm-nameAdmin/realm-name
/login-config

 security-role
descriptionThe role/description
role-nameme/role-name
/security-role
Yet, I can still access the webapp without tomcat asking for a username 
and password. I have added the role and users to tomcat-users.xml too.

thanks
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


Re: why is my security not working?

2005-04-22 Thread teknokrat
I should mention I am on tomcat 5.0.28
teknokrat wrote:
I have placed the following context file
Context path=/myAdmin
cachingAllowed=false
cacheTTL=0
cacheMaxSize=0
swallowOutput=false


Realm className=org.apache.catalina.realm.UserDatabaseRealm 
debug=5/

/Context

and i have added to web.xml
 security-constraint
web-resource-collection
  web-resource-nameAdmin/web-resource-name
  url-pattern/myAdmin/*/url-pattern
 /web-resource-collection
auth-constraint
role-nameme/role-name
/auth-constraint
  /security-constraint

login-config
auth-methodBASIC/auth-method
realm-nameAdmin/realm-name
/login-config

 security-role
descriptionThe role/description
role-nameme/role-name
  /security-role

Yet, I can still access the webapp without tomcat asking for a username 
and password. I have added the role and users to tomcat-users.xml too.

thanks

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]