Hi Mark,

   What kind of error do you get? 404? Is there any exception on catalina.out?

   Try this:

    <security-constraint>
        <web-resource-collection>
            <web-resource-name>Secure Area</web-resource-name>
            <url-pattern>/secure/*</url-pattern>
            <http-method>GET</http-method>
            <http-method>POST</http-method>
        </web-resource-collection>
        <user-data-constraint>
            <transport-guarantee>CONFIDENTIAL</transport-guarantee>
        </user-data-constraint>
    </security-constraint>


Regards,
D

--- Mark Whitby <[EMAIL PROTECTED]> wrote:

> Just to update you on this problem, I've now got the error page working (I 
> needed /error.jsp and not just error.jsp) but I am still having problems 
> with the <security-constraint> tag.  When I try to use this I end up with 
> the generic Tomcat 404 error page and can't load up a single page.  Once I 
> comment this out everything works fine.  Any ideas why?
> 
> Mark
> 
> 
> ----- Original Message ----- 
> From: "Mark Whitby" <[EMAIL PROTECTED]>
> To: "Tomcat Users List" <users@tomcat.apache.org>
> Sent: Friday, February 17, 2006 3:55 PM
> Subject: Problems with web.xml file
> 
> 
> Hi there,
> 
> I've set up a basic web.xml file to test that my ssl connection is working 
> fine for the specified pages to be protected in this way and to test to see 
> if my custom 404 error page works fine.
> 
> I've got the certificate for my SSL page working fine and I've tested it 
> before, but since I've customised the web.xml file I just keep getting the 
> generic error page.  I don't even get the error page I've set in my web.xml 
> file.
> 
> I'm using Tomcat 5.5.15 and jdk 1.5.0_05 so it's all the latest 
> installations.  My web.xml fille and the relevant part from my server.xml 
> file are attached.  If anyone can tell me why the error-page and 
> security-constraint tags aren't working I'd be very grateful.
> 
> Many thanks
> 
> Mark Whitby
> 
> 
> Web.xml file:
> 
> <?xml version="1.0" encoding="ISO-8859-1"?>
> 
> <!DOCTYPE web-app PUBLIC
> "-//Sun Microsystems, Inc.//DTD Web Application 2.2//EN"
> "http://java.sun.com/j2ee/dtds/web-app_2_2.dtd";>
> 
> <web-app>
> 
> <!--
> Specifies the first page that users will come to in the system
> -->
>   <welcome-file-list>
>     <welcome-file>index.jsp</welcome-file>
>   </welcome-file-list>
> 
> <!--
> Specifies the error page that will occur for 404 errors
> -->
> 
>   <error-page>
>     <error-code>404</error-code>
>     <location>error.jsp</location>
>   </error-page>
> 
> 
> <!--
> Specifies the security area within the system
> -->
> 
>   <security-constraint>
>     <web-resource-collection>
>       <web-resource-name>Secure</web-resource-name>
>       <url-pattern>/secure/*</url-pattern>
>     </web-resource-collection>
>     <user-data-contraint>
>       <transport-guarantee>CONFIDENTIAL</transport-guarantee>
>     <user-data-contraint>
>   </security-constraint>
> 
> 
> </web-app>
> 
> server.xml file
> 
>     <!-- Define a non-SSL HTTP/1.1 Connector on port 8080 -->
>     <Connector
> port="8080"               maxHttpHeaderSize="8192"
>                maxThreads="150" minSpareThreads="25" maxSpareThreads="75"
>                enableLookups="false" redirectPort="8443" acceptCount="100"
>                connectionTimeout="20000" disableUploadTimeout="true" />
>     <!-- Note : To disable connection timeouts, set connectionTimeout value
>      to 0 -->
> 
>     <!-- Define a SSL HTTP/1.1 Connector on port 8443 -->
> 
>     <Connector port="8443" maxHttpHeaderSize="8192"
>                maxThreads="150" minSpareThreads="25" maxSpareThreads="75"
>                enableLookups="false" disableUploadTimeout="true"
>                acceptCount="100" scheme="https" secure="true"
>                clientAuth="false" sslProtocol="TLS" 
> keystoreFile="D:\FYPCode\keystore" keystorePass="......." />
> 
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
> 
> 


__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to