In tomcat 6 I am bringing down the container when asking for confidential
RESOURCE. iS THERE A REASON FOR THIS?
CONTAINER AND RESOURCE WORK FINE LIKE THIS...
<security-constraint>
<web-resource-collection>
<web-resource-name>loggedInUser</web-resource-name>
<url-pattern>/pages/user/secure/*</url-pattern>
<http-method>GET</http-method>
<http-method>POST</http-method>
</web-resource-collection>
<auth-constraint>
<role-name>RegisteredUser</role-name>
</auth-constraint>
</security-constraint>
But fail when configured like this...
</security-constraint>
<security-constraint>
<web-resource-collection>
<web-resource-name>AdminArea</web-resource-name>
<url-pattern>/pages/admin/*</url-pattern>
<http-method>GET</http-method>
<http-method>POST</http-method>
</web-resource-collection>
<auth-constraint>
<role-name>Admin</role-name>
</auth-constraint>
<user-data-constraint>
<transport-guarantee>CONFIDENTIAL</transport-guarantee>
</user-data-constraint>
</security-constraint>