Return-Path: <kotsiras@mediaondemand.com>
Mailing-List: contact tomcat-user-help@jakarta.apache.org; run by ezmlm
Delivered-To: mailing list tomcat-user@jakarta.apache.org
Received: (qmail 17624 invoked from network); 21 Jul 2000 17:00:27 -0000
Received: from wodc7-1.relay.mail.uu.net (199.171.54.114)
  by locus.apache.org with SMTP; 21 Jul 2000 17:00:27 -0000
Received: from kotsiras by wodc7mr0.ffx.ops.us.uu.net with SMTP
	(peer crosschecked as: [208.243.129.86])
	id QQiyvc20994
	for <tomcat-user@jakarta.apache.org>; Fri, 21 Jul 2000 17:00:26 GMT
From: "Alexandros Kotsiras" <kotsiras@mediaondemand.com>
To: <tomcat-user@jakarta.apache.org>
Subject: RE: JDBCRealm question
Date: Fri, 21 Jul 2000 13:00:24 -0400
Message-ID: <BCAD6DE3E75AD311827D00C04F609B9C06F875@MOD_EXCHANGE>
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook CWS, Build 9.0.2416 (9.0.2910.0)
X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2314.1300
Importance: Normal
In-Reply-To: <BCAD6DE3E75AD311827D00C04F609B9C78AA5E@MOD_EXCHANGE>
X-Spam-Rating: locus.apache.org 1.6.2 0/1000/N

I don't think i modified the web.xml of my context.
Anyway,  i appreciate you interest


<security-constraint>
      <web-resource-collection>
         <web-resource-name>Protected Area</web-resource-name>
	 <!-- Define the context-relative URL(s) to be protected -->
         <url-pattern>/jsp/protected/*</url-pattern>
	 <!-- If you list http methods, only those methods are protected -->
	 <http-method>DELETE</http-method>
         <http-method>GET</http-method>
         <http-method>POST</http-method>
	 <http-method>PUT</http-method>
      </web-resource-collection>
      <auth-constraint>
         <!-- Anyone with one of the listed roles may access this area -->
         <role-name>tomcat</role-name>
	 <role-name>role1</role-name>
      </auth-constraint>
    </security-constraint>

    <!-- Default login configuration uses BASIC authentication -->
    <login-config>
      <auth-method>BASIC</auth-method>
      <realm-name>Example Basic Authentication Area</realm-name>
    </login-config>

    <!-- If you want to experiment with form-based logins, comment
         out the <login-config> element above and replace it with
         this one.  Note that we are currently using a nonstandard
         authentication method, because the code to support form
         based login is incomplete and only lightly tested.  -->
    <!--
    <login-config>
      <auth-method>EXPERIMENTAL_FORM</auth-method>
      <realm-name>Example Form-Based Authentication Area</realm-name>
      <form-login-config>
        <form-login-page>/jsp/security/login/login.jsp</form-login-page>
        <form-error-page>/jsp/security/login/error.jsp</form-error-page>
      </form-login-config>
    </login-config>

-----Original Message-----
From: Nacho [mailto:nacho@siapi.es]
Sent: Friday, July 21, 2000 11:45 AM
To: 'tomcat-user@jakarta.apache.org'
Subject: RE: JDBCRealm question


> Maybe it's something silly i am missing.....

For now your context's web.xml to have a look over your protection
config. :-))

Saludos ,
Ignacio J. Ortega