Tomcat Security and Struts

[Mighty Tornado]

Tomcat 6Struts 1.3

Hi,

I am trying to make sure my app requires a login. So I configured the
following in my deployment descriptor:

 <security-constraint>

  <web-resource-collection>

  <web-resource-name>admin</web-resource-name>

  <url-pattern>*.do</url-pattern>

  <http-method>POST</http-method>

  </web-resource-collection>



  <auth-constraint>

  <role-name>member</role-name>

  </auth-constraint>



  <user-data-constraint>

  <transport-guarantee>CONFIDENTIAL</transport-guarantee>

  </user-data-constraint>

  </security-constraint>



  <login-config>

  <auth-method>FORM</auth-method>

  <form-login-config>

  <form-login-page>/WEB-INF/JSP/login.jsp</form-login-page>

  <form-error-page>/WEB-INF/JSP/loginError.jsp</form-error-page>

  </form-login-config>

  </login-config>


However, when I follow the links in my app the login page doesn't come in.


Any ideas as to what I am doing wrong?


Thanks.