Authentication and Authorization implementation using DD Problem

[Mohit G Gupta]

I am trying to apply authentication and authorization on the Welcome.jsp(Its a simple login page) for GET and POST methods using web.xml
But upon entering the correct username and password ,I still get the error


HTTP Status 403 - Access to the requested resource has been denied

I used the following username and password

userrname:mahesh
password: mahesh
OR
username-max
password-max

Web.xml

<?xml version="1.0" encoding="UTF-8"?> <web-app id="WebApp_ID" version="2.4" xmlns="http://java.sun.com/xml/ns/j2ee" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://java.sun.com/xml/ns/j2ee http://java.sun.com/xml/ns/j2ee/web-app_2_4.xsd"> <display-name>Scwcd</display-name> <login-config> <auth-method>BASIC</auth-method> </login-config> <welcome-file-list> <welcome-file>index.html</welcome-file> <welcome-file>index.htm</welcome-file> <welcome-file>index.jsp</welcome-file> <welcome-file>default.html</welcome-file> <welcome-file>default.htm</welcome-file> <welcome-file>default.jsp</welcome-file> </welcome-file-list> <error-page> <error-code>405</error-code> <location>/Error.jsp</location> </error-page> <security-constraint> <web-resource-collection> <web-resource-name>constraint</web-resource-name> <url-pattern>/Welcom.jsp</url-pattern> <http-method>GET</http-method> <http-method>POST</http-method> </web-resource-collection> <auth-constraint> <role-name>max</role-name> </auth-constraint> <user-data-constraint> <transport-guarantee>NONE</transport-guarantee> </user-data-constraint> </security-constraint> <security-role> <role-name>max</role-name> </security-role> <context-param> <param-name>email</param-name> <param-value>[e-mail]</param-value> </context-param> <servlet> <init-param> <param-name>DatabaseName</param-name> <param-value>SCWCD</param-value> </init-param> <servlet-name>Welcome</servlet-name> <servlet-class>servlets.Sign</servlet-class> </servlet> <servlet> <servlet-name>EngineStatusCheck</servlet-name> <servlet-class>engine.HealthCheck</servlet-class> </servlet> <servlet-mapping> <servlet-name>Welcome</servlet-name> <url-pattern>/SignIn</url-pattern> </servlet-mapping> <servlet-mapping> <servlet-name>EngineStatusCheck</servlet-name> <url-pattern>/EngineStatusCheck</url-pattern> </servlet-mapping> <listener> <listener-class>listeners.ServletContexxt</listener-class> </listener> </web-app>
tomcat-users.xml
<?xml version="1.0" encoding="UTF-8"?> <tomcat-users> <role rolename="manager"/> <role rolename="tomcat"/> <role rolename="admin"/> <role rolename="role1"/> <role rolename="max"/> <user password="tomcat" roles="tomcat,role1" username="both"/> <user password="tomcat" roles="tomcat" username="tomcat"/> <user password="mahesh" roles="admin,manager" username="mahesh"/> <user password="tomcat" roles="role1" username="role1"/> <user password="max" roles="admin,manager,max" username="max"/> </tomcat-users>