RE: auth-constraint

2011-08-12 Thread markt
"Caldarale, Charles R" wrote: >> From: Bijesh Vijayan [mailto:bijes v...@gmail.com] >> Subject: Re: auth-constraint > >> Is there a way in tomcat 7 to mention the roles outside of web.xml. > >Read section 8 of the servlet 3.0 spec; you might be able to use

RE: auth-constraint

2011-08-12 Thread Caldarale, Charles R
> From: Bijesh Vijayan [mailto:bije...@gmail.com] > Subject: Re: auth-constraint > Is there a way in tomcat 7 to mention the roles outside of web.xml. Read section 8 of the servlet 3.0 spec; you might be able to use a web-fragment.xml to list the roles. - Chuck THIS COMMUNIC

Re: auth-constraint

2011-08-12 Thread Bijesh Vijayan
> Probably a bug in the version of Tomcat 5.?.? that you were using. See this > bugzilla entry: 5.26 Is there a way in tomcat 7 to mention the roles outside of web.xml. Bijesh. On Fri, Aug 12, 2011 at 4:14 PM, Caldarale, Charles R wrote: >> From: Bijesh Vijayan [mailto:bije...@gmail.com] >> S

RE: auth-constraint

2011-08-12 Thread Caldarale, Charles R
> From: Bijesh Vijayan [mailto:bije...@gmail.com] > Subject: auth-constraint > I was having the following entry in my application web.xml in tomcat 5. You need to be precise when stating Tomcat versions; Tomcat 5.what.what? > > * > Let's look at section 12.7 of the servlet spec: "The spec

Re: Auth-constraint with Tomcat 6

2009-06-24 Thread Mark Thomas
Christopher Schultz wrote: >> Would it also be possible to change the behavior of the >> combinedRealm/LockoutRealm such that if username is found in prior >> realm and password is incorrect, then it skips the other realms? It >> only look into the other realms if username is not found in prior >>

Re: Auth-constraint with Tomcat 6

2009-06-24 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Clement, On 6/24/2009 2:57 AM, Clement Chong wrote: > > > * > > > User is now authenticated via JDBCRealm followed by JNDIRealm and > would be able to access protected pages with any role. > > The question I have is how can I deny a g

Re: auth-constraint in web.xml in tomcat 5.5.15

2006-02-17 Thread David Delbecq
I was hoping to get something else. Sure our sysadmin will enjoy to put 600 usernames in one line of /etc/groups (assuming HP-UX and NFS allows it)... Mark Thomas a écrit : >David Delbecq wrote: > > >>*outch* This mean i will have to change my web.xml with future tomcat >>version. >>How do I al

Re: auth-constraint in web.xml in tomcat 5.5.15

2006-02-06 Thread Mark Thomas
David Delbecq wrote: > *outch* This mean i will have to change my web.xml with future tomcat > version. > How do I allow access to a ressource to all authenticated users now? Create a global role. Assign all users to that role. Use the global role rather than "*". Mark -

Re: auth-constraint in web.xml in tomcat 5.5.15

2006-02-06 Thread David Delbecq
*outch* This mean i will have to change my web.xml with future tomcat version. How do I allow access to a ressource to all authenticated users now? Mark Thomas a écrit : >Oliver Kohll wrote: > > >>Hi, >> >>I have security for a web application managed by a DataSource database >>realm. Using to

Re: auth-constraint in web.xml in tomcat 5.5.15

2006-02-06 Thread Oliver Kohll
Thanks. Commenting out the got the result I want. Oliver On 3 Feb 2006, at 17:54, Mark Thomas wrote: Oliver Kohll wrote: Hi, I have security for a web application managed by a DataSource database realm. Using tomcat 5.5.14 this works fine but in 5.5.15 there seems to be a problem.

Re: auth-constraint in web.xml in tomcat 5.5.15

2006-02-03 Thread Mark Thomas
Oliver Kohll wrote: > Hi, > > I have security for a web application managed by a DataSource database > realm. Using tomcat 5.5.14 this works fine but in 5.5.15 there seems to > be a problem. > The problem seems to be the * line. If I put a > specific role in, users in that role can log in but