Return-Path: Mailing-List: contact tomcat-user-help@jakarta.apache.org; run by ezmlm Delivered-To: mailing list tomcat-user@jakarta.apache.org Received: (qmail 56140 invoked from network); 14 Apr 2000 08:54:04 -0000 Received: from corpus.caput.com (root@194.239.152.132) by locus.apache.org with SMTP; 14 Apr 2000 08:54:04 -0000 Received: from peder.caput.com (IDENT:peder@peder.caput.com [194.239.152.152]) by corpus.caput.com (8.9.3/8.9.3) with SMTP id KAA09202 for ; Fri, 14 Apr 2000 10:54:02 +0200 From: Peder Pedersen Date: Fri, 14 Apr 2000 09:54:58 GMT Message-ID: <20000414.9545800@peder.caput.com> Subject: Re: tomcat-users.xml To: tomcat-user@jakarta.apache.org In-Reply-To: References: X-Mailer: Mozilla/3.0 (compatible; StarOffice/5.1; Linux) X-Priority: 3 (Normal) MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable X-Spam-Rating: locus.apache.org 1.6.2 0/1000/N Hi Neil, My impression is that the tomcat-users.xml authorization mechanism is=20 in an "early stage" condition. Anyway, you set up the users with=20 password and roles, like: Then you set up your web application authorization constraints in the=20 web application deployment descriptor (webappl/WEB-INF/web.xml). Check=20 out the Servlet specification, and the web.xml DTD file in particular. For a very simple example, use something like: Admin Pages /admin/* GET POST admin =20 FORM login.html login.html admin The login page in this example should have the format as specified in=20 the specification; something like: Security crap.
Username
Password

Now, if you try to acccess a page in the admin folder, you are=20 automatically forwarded to the login page first. Btw, I seem to recall that someone had looked into LDAP integration... Best regards, - Peder >>>>>>>>>>>>>>>>>> Original Message <<<<<<<<<<<<<<<<<< On 4/14/00, 9:25:45 AM, Neil Davies wrote=20 regarding tomcat-users.xml: > Dear All, > Could anyone help please.How do i set up authorization using= > tomcat-users.xml? >=20 ----------------------------------------------------------------------- --- > To unsubscribe, email: tomcat-user-unsubscribe@jakarta.apache.org > For additional commmands, email: tomcat-user-help@jakarta.apache.org