tomcat-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Nacho <>
Subject RE: FORM-based authentication
Date Tue, 05 Sep 2000 15:23:38 GMT
Have you tried with the examples in 3.2 beta3, it has a working example
of form based login, when you try to access
http://localhost:8080/examples/jsp/protected ypu obtain a login page,
you can use "tomcat" , "tomcat" as login and password to get access to
the protected area, have a look over web.xml in examples to see a
working config, and adapt it to suit your needs in your context's
web.xml file...

> I experimented with (from web.xml)
>  <!-- Security configuration -->
>   <security-constraint>
>     <web-resource-collection>
>       <web-resource-name>Protected Area</web-resource-name>
>       <url-pattern>*</url-pattern>
>     </web-resource-collection>
>     <auth-constraint>
>        <role-name>operator</role-name>
>     </auth-constraint>
>   </security-constraint>
>   <!-- Login configuration uses FORM authentication -->
>  <login-config>
>     <auth-method>FORM</auth-method>
>     <form-login-config>
>       <form-login-page>/logon.jsp</form-login-page>
>        <form-error-page>/accessRefused.jsp</form-error-page>
>     </form-login-config>
>     <realm-name>Payment Server Management</realm-name>
>   </login-config>

The <realm-name> element goes *before* the <form-login-config> and after
<auth-method>, give a look over the DTD or the spec, to know which is
the web.xml format expected.

> with Tomcat 3.2b3. But, no dice - the logon page is not served. Do I
> take it that Form-based authentication has not been implemented yet? I
> gathered from a mail from Craig McClanahan in the Struts mailing list
> that Catalina had implemented it. What is the relationship between
> Catalina and Tomcat? When can an implementation of form-based
> authentication be expected in Tomcat?

First AFAIK the form login based security is working on Tomcat 3.2 b3 ..

Second Catalina it's the a candidate code base for Tomcat 4.0 based on
code developed mainly by Craig, it's very good code ( as Craig uses to
do ) and a very clean and easy to understand code, but for now it's only
a candidate code base... 

Saludos ,
Ignacio J. Ortega

View raw message