Hi all,

I am trying to use JDBCRealm with Digest combination in a SSL based web
page. But it doesn't seem to work!


My server.xml is

<Context path="/misc" docBase="d:/eclipse/workspace/MiscTests/deploy"
debug="99" reloadable="true" crossContext="true">
<Realm className="org.apache.catalina.realm.JDBCRealm"
        driverName="com.mysql.jdbc.Driver"

connectionURL="jdbc:mysql://localhost:3306/privlgs?user=daniel;password=
daniel"
userTable="users" userNameCol="x_user_name" userCredCol="x_password"
userRoleTable="user_roles" roleNameCol="x_role"/> </Context>

My web.xml is
<security-constraint>
        <web-resource-collection>
          <web-resource-name>Secure Directories</web-resource-name>
          <url-pattern>/subtest/*</url-pattern>
          <http-method>GET</http-method>
      <http-method>POST</http-method>
        </web-resource-collection>

        <auth-constraint>
          <role-name>admin</role-name>
        </auth-constraint>

        <user-data-constraint>
          <transport-guarantee>CONFIDENTIAL</transport-guarantee>
        </user-data-constraint>
</security-constraint>


<login-config>
  <auth-method>DIGEST</auth-method>
  <realm-name>jdbcRealm</realm-name>
</login-config>


I created the password as suggested in Tomcat Docs
java org.apache.catalina.realm.RealmBase -a MD5 tom

tom:aa47f8215c6f30a0dcdb2a36a9f4168e

Database

privlgs

After this, I have these values in the database:
(in table users)

x_user_name               x_password
tom            aa47f8215c6f30a0dcdb2a36a9f4168e

(in table user_roles)
x_user_name           x_role
 tom               admin


When I browse that page I am prompted with the dialog box but if type
the user name as tom and password as aa47f8215c6f30a0dcdb2a36a9f4168e I
am unable to login.

Any advice on this is appreciated..

Thanks in advance,
Daniel.E

===========================================================================
To unsubscribe: mailto [EMAIL PROTECTED] with body: "signoff JSP-INTEREST".
For digest: mailto [EMAIL PROTECTED] with body: "set JSP-INTEREST DIGEST".
Some relevant FAQs on JSP/Servlets can be found at:

 http://archives.java.sun.com/jsp-interest.html
 http://java.sun.com/products/jsp/faq.html
 http://www.esperanto.org.nz/jsp/jspfaq.jsp
 http://www.jguru.com/faq/index.jsp
 http://www.jspinsider.com

Reply via email to