RE: authenticated but not authorized -- blank page

2008-05-05 Thread Caldarale, Charles R
> From: DIGLLOYD INC [mailto:[EMAIL PROTECTED] > Subject: Re: authenticated but not authorized -- blank page > > Is it because there is more than one name> specified eg it needs to be: > > > guest1 > > > guest2 > Yes, the javaee schema allows

Re: authenticated but not authorized -- blank page

2008-05-05 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Lloyd, DIGLLOYD INC wrote: | I don't read schemas well. Perhaps if you would be so kind as to | explain why it's wrong? Is it because there is more than one | specified eg it needs to be: | | |guest1 | | | guest2 | That's exactly righ

Re: authenticated but not authorized -- blank page

2008-05-04 Thread DIGLLOYD INC
I'm using: http://java.sun.com/xml/ns/javaee"; xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"; xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd " version="2.5"> I don't read schemas well. Perhaps if you would be so kind as

Re: authenticated but not authorized -- blank page

2008-05-04 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Lloyd, DIGLLOYD INC wrote: | | guest1 | guest2 | Not sure if Tomcat actually cares, but this is an invalid configuration. Look at the DTD or Schema (whichever one you are using) again. - -chris -BEGIN PGP SIGNATURE- Version:

Re: authenticated but not authorized -- blank page

2008-05-02 Thread DIGLLOYD INC
I found the problem. In fact, an error 401 is sent, which caused the browser to retry somehow, but that resulted in a 404. My 404 page, while specified, did not exist. So then a blank page results. Or at least it seems that this is what is going on. On May 2, 2008, at 2:38 PM, DIGLLOYD I

Re: authenticated but not authorized -- blank page

2008-05-02 Thread DIGLLOYD INC
I was trying to simplify the discussion. The folders are actually _guest1_ and _guest2_ and the security constraints match. Login and the mappings work correctly. I just was trying to phrase the discussion generally. On May 2, 2008, at 10:14 AM, Caldarale, Charles R wrote: From: DIGLLOY

RE: authenticated but not authorized -- blank page

2008-05-02 Thread Caldarale, Charles R
> From: Propes, Barry L [mailto:[EMAIL PROTECTED] > Subject: RE: authenticated but not authorized -- blank page > > oh okthat's about the only difference I saw between mine > and his...I've had no difficulty getting the appropriate > errors I should but I thoug

RE: authenticated but not authorized -- blank page

2008-05-02 Thread Propes, Barry L
lto:[EMAIL PROTECTED] Sent: Friday, May 02, 2008 12:33 PM To: Tomcat Users List Subject: RE: authenticated but not authorized -- blank page > From: Propes, Barry L [mailto:[EMAIL PROTECTED] > Subject: RE: authenticated but not authorized -- blank page > > I'm on an older version

RE: authenticated but not authorized -- blank page

2008-05-02 Thread Caldarale, Charles R
> From: Propes, Barry L [mailto:[EMAIL PROTECTED] > Subject: RE: authenticated but not authorized -- blank page > > I'm on an older version of Tomcat, but I don't have a > separate security-role atttribute tag like his: > > > > guest1 >

RE: authenticated but not authorized -- blank page

2008-05-02 Thread Propes, Barry L
ubject: RE: authenticated but not authorized -- blank page > From: Propes, Barry L [mailto:[EMAIL PROTECTED] > Subject: RE: authenticated but not authorized -- blank page > > I actually have my role names defined within EACH constraint. So does Lloyd: > > >

RE: authenticated but not authorized -- blank page

2008-05-02 Thread Caldarale, Charles R
> From: Propes, Barry L [mailto:[EMAIL PROTECTED] > Subject: RE: authenticated but not authorized -- blank page > > I actually have my role names defined within EACH constraint. So does Lloyd: > > > ... >

RE: authenticated but not authorized -- blank page

2008-05-02 Thread Caldarale, Charles R
> From: DIGLLOYD INC [mailto:[EMAIL PROTECTED] > Subject: authenticated but not authorized -- blank page > > I have a webapp 'guest', with two subfolders 'guest1' and > 'guest2'. Really? Because that's not what's in your security constraints: >/_guest1_/* >/_guest2_/* Which i

RE: authenticated but not authorized -- blank page

2008-05-02 Thread Propes, Barry L
I actually have my role names defined within EACH constraint. -Original Message- From: DIGLLOYD INC [mailto:[EMAIL PROTECTED] Sent: Friday, May 02, 2008 10:56 AM To: Tomcat List Users Subject: authenticated but not authorized -- blank page I have a webapp 'guest', with two subfolders 'gu