problem in implementing form based authentication in tomcat,mysql

[Prasad Kharkar]

Hello everyone,
I am trying to implement form based authentication using JAAS in mysql and tomcat.
I followed the tutorial here

I have added roles in tomcat-users.xml and also security configuration in web.xml of the project.
the application runs but even if I enter correct user credentials, I am redirected to error page only.
Please help me regarding this, tomcat log doesn't show any error also.

this is the database realm configuration for mysql in server.xml in tomcat

 <Realm 
className="org.apache.catalina.realm.JDBCRealm" 
debug="99"
driverName="com.mysql.jdbc.Driver"
connectionURL="jdbc:mysql://localhost:3306/test"
         connectionName="root"
         connectionPassword="root"
         userTable="users" 
userNameCol="username" 
         userCredCol="password"
userRoleTable="user_roles" 
roleNameCol="roleName" 
/>

the web.xml security configuration is

<security-constraint>
		<display-name>Example Security Constraint</display-name>
		<web-resource-collection>
			<web-resource-name>Protected Area</web-resource-name>
			<url-pattern>/protected/*</url-pattern>
			<http-method>DELETE</http-method>
			<http-method>GET</http-method>
			<http-method>POST</http-method>
			<http-method>PUT</http-method>
		</web-resource-collection>
		<auth-constraint>
			<role-name>manager</role-name>
		</auth-constraint>
		<user-data-constraint>
			<transport-guarantee>NONE</transport-guarantee>
		</user-data-constraint>
	</security-constraint>


	<!-- Default login configuration uses form-based authentication -->
	<login-config>
		<auth-method>FORM</auth-method>
		<realm-name>Example Form-Based Authentication Area</realm-name>
		<form-login-config>
			<form-login-page>/login.jsp</form-login-page>
			<form-error-page>/error.jsp</form-error-page>
		</form-login-config>
	</login-config>
	<security-role>
		<description> An administrator </description>
		<role-name>
			manager
		</role-name>
	</security-role>

I have added the manager role in tomcat-users.xml is as follows

<role rolename="manager"/>

I start the application and visit http://localhost:8080/security-form-based/protected/index.jsp
it correctly redirects me to login page but when I enter username and password, it always redirects me to error page.

what could be the solution for this? I am stuck with this for 2 days now.


in the database,

the role allotted for user 'prasad' is 'manager' and the password is 'kharkar'

I have configured the manager role in tomcat-users.xml