Return-Path: <piotr.szymanski@pentacomp.com.pl>
Mailing-List: contact axis-user-help@xml.apache.org; run by ezmlm
Delivered-To: mailing list axis-user@xml.apache.org
Received: (qmail 8136 invoked from network); 3 Jul 2002 07:59:37 -0000
Received: from mail.pentacomp.com.pl (HELO iktorn.pentacomp.com.pl)
 (213.134.143.234)
  by daedalus.apache.org with SMTP; 3 Jul 2002 07:59:37 -0000
Received: (qmail 15117 invoked from network); 3 Jul 2002 08:00:44 -0000
Received: from unknown (HELO PUCHATEK) (psz@192.168.2.31)
  by 0 with SMTP; 3 Jul 2002 08:00:44 -0000
From: "Piotr Szymanski" <piotr.szymanski@pentacomp.com.pl>
To: <axis-user@xml.apache.org>,
	<john.gregg@techarch.com>
Subject: RE: Base security problem
Date: Wed, 3 Jul 2002 09:58:46 +0200
Message-ID: <BHEAKBFEPKKALIGJIHCFOEAACDAA.piotr.szymanski@pentacomp.com.pl>
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-2"
Content-Transfer-Encoding: 7bit
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2910.0)
X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4910.0300
Importance: Normal
In-Reply-To: <001c01c221cf$38840c00$75c8a8c0@ws03>
X-Spam-Rating: daedalus.apache.org 1.6.2 0/1000/N
Status: O
X-Status: 
X-Keywords: 
X-UID: 104

Thanks but I have still problem...
This is my webapps folder in Tomcat: (dots are inserted for properly layout
only)
1)  \webapps\axis\WEB-INF\web.xml
2)  ..............................\MyService.jws

In server.xml everything settings are after installation like (I mean
MemoryRealm authorisation mechanism).
In 1) path in web.xml file I added some lines for my web application:

<security-constraint>
  <web-resource-collection>
    <web-resource-name>Protected Area</web-resource-name>
    <url-pattern>/axis/Serwis.jws</url-pattern>
    <http-method>GET</http-method>
    <http-method>POST</http-method>
  </web-resource-collection>
  <auth-constraint>
    <role-name>User</role-name>
  </auth-constraint>
</security-constraint>
<login-config>
  <auth-method>BASIC</auth-method>
  <realm-name>Serwis Protected Area</realm-name>
</login-config>

Unfortunately my client program can access to my Serwis.jws without
password.
Hm...Is this correct web.xml file, maybye I should add these lines to
onother?

I tried to add additional lines in \axis\web.xml file for my web
applications:
  <servlet>
    <servlet-name>AxisServletProtected</servlet-name>
    <display-name>Apache-Axis Servlet</display-name>

<servlet-class>org.apache.axis.transport.http.AxisServlet</servlet-class>
 </servlet>

 <servlet-mapping>
    <servlet-name>AxisServletProtected</servlet-name>
    <url-pattern>services/protected</url-pattern>
  </servlet-mapping>

When I triedt to startup Tomcat I got a message:
PARSE error at line 88 column 11
org.xml.sax.SAXParseException: The content of element type "web-app" must
match
"(icon?,display-name?,description?,distributable?,context-param*,servlet*,se
rvle
t-mapping*,session-config?,mime-mapping*,welcome-file-list?,error-page*,tagl
ib*,
resource-ref*,security-constraint*,login-config?,security-role*,env-entry*,e
jb-r
ef*)".

-------
Line 88 is line consist of element: </web-app>


I don't understand what I do wrong or what is not properly configured? I
have no idea what I can change else...

Help.
Regards.
Peter