Return-Path: 
 <tomcat-dev-return-20536-qmlist-jakarta-archive-tomcat-dev=jakarta.apache.org@jakarta.apache.org>
Delivered-To: apmail-jakarta-tomcat-dev-archive@apache.org
Received: (qmail 48752 invoked from network); 23 Oct 2002 00:30:31 -0000
Received: from unknown (HELO nagoya.betaversion.org) (192.18.49.131)
  by daedalus.apache.org with SMTP; 23 Oct 2002 00:30:31 -0000
Received: (qmail 20311 invoked by uid 97); 23 Oct 2002 00:30:15 -0000
Delivered-To: qmlist-jakarta-archive-tomcat-dev@jakarta.apache.org
Received: (qmail 20226 invoked by uid 97); 23 Oct 2002 00:30:13 -0000
Mailing-List: contact tomcat-dev-help@jakarta.apache.org; run by ezmlm
Precedence: bulk
List-Unsubscribe: <mailto:tomcat-dev-unsubscribe@jakarta.apache.org>
List-Subscribe: <mailto:tomcat-dev-subscribe@jakarta.apache.org>
List-Help: <mailto:tomcat-dev-help@jakarta.apache.org>
List-Post: <mailto:tomcat-dev@jakarta.apache.org>
List-Id: "Tomcat Developers List" <tomcat-dev.jakarta.apache.org>
Reply-To: "Tomcat Developers List" <tomcat-dev@jakarta.apache.org>
Delivered-To: mailing list tomcat-dev@jakarta.apache.org
Received: (qmail 20157 invoked by uid 50); 23 Oct 2002 00:30:12 -0000
Date: 23 Oct 2002 00:30:12 -0000
Message-ID: <20021023003012.20156.qmail@nagoya.betaversion.org>
From: bugzilla@apache.org
To: tomcat-dev@jakarta.apache.org
Cc: 
Subject: DO NOT REPLY [Bug 13861] New:  -
    Authentication / SSL conflict (web.xml security-constraint auth-constraint
 user-data-constraint)
X-Spam-Rating: daedalus.apache.org 1.6.2 0/1000/N

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://nagoya.apache.org/bugzilla/show_bug.cgi?id=13861>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=13861

Authentication / SSL conflict (web.xml security-constraint auth-constraint user-data-constraint)

           Summary: Authentication / SSL conflict (web.xml security-
                    constraint auth-constraint user-data-constraint)
           Product: Tomcat 4
           Version: 4.1.12
          Platform: PC
        OS/Version: Windows NT/2K
            Status: NEW
          Severity: Blocker
          Priority: Other
         Component: Catalina
        AssignedTo: tomcat-dev@jakarta.apache.org
        ReportedBy: ttps@pacbell.net


Into the original /examples/WEB-INF/web.xml file, I added the following
security constraint just before the Example Security Constraint.

    <security-constraint>
      <web-resource-collection>
         <web-resource-name>Protected by tomcat role and SSL</web-resource-name>
         <url-pattern>/jsp/snp/*</url-pattern>
      </web-resource-collection>
      <auth-constraint>
         <role-name>tomcat</role-name>
      </auth-constraint>
      <user-data-constraint>
         <transport-guarantee>CONFIDENTIAL</transport-guarantee>
      </user-data-constraint>
    </security-constraint>

No other changes to this web.xml file were made.

Now, my browser hangs when I try to access 
http://localhost:8080/examples/jsp/snp/snoop.jsp.
It appears that Catalina cannot redirect to login.jsp and
change to port 8443 at the same time.

If I remove the <auth-constraint> tag, SSL works fine.

If I remove the <user-data-constraint> tag, authentication works fine.

How can I get them to BOTH work at the same time?

--
To unsubscribe, e-mail:   <mailto:tomcat-dev-unsubscribe@jakarta.apache.org>
For additional commands, e-mail: <mailto:tomcat-dev-help@jakarta.apache.org>