JDBCRealm and the security-constraint Element in the web.xml File

[JiaPei Jen]

My applications behave wierd after I configured the JDBCRealm. After experimenting in many different ways, I found that as long as I have the JDBCRealm in the server.xml, the Tomcat does not accept <security-constraint> specified in the application's web.xml file. Please help me.
My configuration in the $TOMCAT_HOME/conf/sever.xml is shown below:

<Engine>
<Host>
<Context>
<Realm className="org.apache.catalina.realm.JDBCRealm" debug="99"
 driverName="com.mysql.jdbc.Driver"
 connectionURL="jdbc:mysql://localhost:3306/artimus 
                 user=javauser&password=javadude"
 userTable="members" userNameCol="user_name" 
                 userCredCol="user_password"
 userRoleTable="user_roles" roleNameCol="user_role"/>
</Context>
</Host>
</Engine>

What happened is:
First, I have an application artimus_1_1 that had worked well before JDBCRealm was inserted in the server.xml. Now, whenever I run the same application, I get:

HTTP Status 404 -/artimus_1_1
description: The requested resource(/artimus_1_1) is not availabe.

The web.xml of the application artimus_1_1 has <security-constraint> element in it and uses BASIC to authenticate users (i.e. the roles of the users are stored in the $TOMCAT_HOME/conf/tomcat-users.xml.)
Second, I am working on another application. And I want to user FORM-based container-managed authentication for this application. I had

<login-config>
 <auth-method>FORM</auth-method>
  <form-login-config>
   <form-login-page>/signin/logon.jsp</form-login-page>
   <form-error-page>/signin/logon.jsp?error=true</form-error-page>
  </form-login-config>
</login-config> 

in the web.xml file and I had JDBCRealm in the $TOMCAT_HOME/conf/server.xml. I was able to display the welcome page. Thereafter, I inserted <security-constraint> preceding the <login-config>
element, and inserted <security-role> following the <login-config> element. The application stops functioning. I get:

HTTP Status 404 -/PracticeVersion
description: The requested resource(/PracticeVersion) is not availabe.

in the browser, and I have this message in the Tomcat log file:

LifecycleException: Container
StandardContext[/PracticeVersion] has not been started

This is what my PracticeVersion/WEB-INF/web.xml looks like when the problem
happened (Nothing is wrong with the specification and order of the tags):

  <security-constraint>
    <web-resource-collection>
      <web-resource-name>Administrative</web-resource-name>
        <!-- The URLs to protect -->
        <url-pattern>/do/admin/*</url-pattern>
      </web-resource-collection>
      <auth-constraint>
        <!-- The authorized users -->
        <role-name>administrator</role-name>
        <role-name>editor</role-name>
        <role-name>contributor</role-name>
        <role-name>advisor</role-name>
      </auth-constraint>
  </security-constraint>
  <login-config>
    <auth-method>FORM</auth-method> 
    <form-login-config> 
      <form-login-page>/signin/logon.jsp</form-login-page>  
      <form-error-page>/signin/error.jsp</form-error-page>
    </form-login-config>                  
  </login-config> 
  <security-role>
    <role-name>administrator</role-name>
  </security-role>
  <security-role>
    <role-name>advisor</role-name>
  </security-role>
  <security-role>
    <role-name>editor</role-name>
  </security-role>
  <security-role>
    <role-name>contributor</role-name>
  </security-role>