security constraints - login doesnt work

Ranch Hand

Posts: 1183

posted 10 years ago

hey,

i am new to the whole servlets & jsp story and i'm playing around a little with security constraints ...

i chose FORM as the auth type, created users in the tomcat-users.xml file, but when i try to log on, it will always forward me to the error page.

here is my code

login.html

web.xml

<servlet>
	 <servlet-name>Test</servlet-name>
	 <servlet-class>com.test.Servlet</servlet-class>
	</servlet>
	
	<servlet>
	 <servlet-name>Secure</servlet-name>
	  <servlet-class>com.test.SecureServlet</servlet-class>
	</servlet>
	
	<servlet-mapping>
	 <servlet-name>Test</servlet-name>
	 <url-pattern>/T.do</url-pattern>
	</servlet-mapping>
	
	<servlet-mapping>
	 <servlet-name>Secure</servlet-name>
	 <url-pattern>/T.secure</url-pattern>
	</servlet-mapping>
	
	
	
	
	
	<security-constraint>
	 <web-resource-collection>
	  <web-resource-name>Test</web-resource-name>
	  <url-pattern>*.secure</url-pattern>
	 </web-resource-collection>
	 <auth-constraint>
      <role-name>admin</role-name>
      <role-name>sous</role-name>
     </auth-constraint>
	</security-constraint>
	
	<login-config>
	 <auth-method>FORM</auth-method>
	 <form-login-config>
	  <form-login-page>/static/login.html</form-login-page>
	  <form-error-page>/static/error.html</form-error-page>
	 </form-login-config>
	 
	</login-config>
	
	<security-role>
	 <role-name>admin</role-name>
	</security-role>
	<security-role>
	 <role-name>sous</role-name>
	</security-role>

tomcat-users.xml

does anybody know what the problem is ??

also, how would i retrieve the role and user information from a database, rather than using and xml file?

thank you

JDBCSupport - An easy to use, light-weight JDBC framework -

Dave Wingate

Ranch Hand

Posts: 262

posted 10 years ago

re:

how would i retrieve the role and user information from a database, rather than using and xml file?

... you might find the "Defining a JDBCRealm" section of this article useful:

http://www.big-oh.net/content/tutorials/containerManagedAuthentication.jsp

Fun programming etcetera!

Sebastian Janisch

Ranch Hand

Posts: 1183

posted 10 years ago

thank you :-)

i have solved the tomcat-users.xml problem.

i was editing the xml file under tomcat/conf. eclipse however has it's own copy somewhere deep in the dir structure.

JDBCSupport - An easy to use, light-weight JDBC framework -

Hey cool! They got a blimp! But I have a tiny ad:

Java file APIs (DOC, XLS, PDF, and many more)

https://products.aspose.com/total/java