Return-Path: <Sean.Batten@mercator.com>
Mailing-List: contact tomcat-user-help@jakarta.apache.org; run by ezmlm
Delivered-To: mailing list tomcat-user@jakarta.apache.org
Received: (qmail 21392 invoked from network); 16 Nov 2000 16:03:13 -0000
Received: from relay1.mail.uk.psi.net (154.32.105.6)
  by locus.apache.org with SMTP; 16 Nov 2000 16:03:13 -0000
Received: from mail.braid.co.uk ([194.223.57.3] helo=mail.uk.mercator.com)
	by relay1.mail.uk.psi.net with esmtp (Exim 2.12 #2)
	id 13wRVE-0005t6-00
	for tomcat-user@jakarta.apache.org; Thu, 16 Nov 2000 16:03:08 +0000
Received: from br_uk_major.uk.mercator.com (unverified) by
 mail.uk.mercator.com
 (Content Technologies SMTPRS 2.0.15) with ESMTP id
 <B0000812750@mail.uk.mercator.com> for <tomcat-user@jakarta.apache.org>;
 Thu, 16 Nov 2000 15:59:08 +0000
Received: by BR_UK_MAJOR with Internet Mail Service (5.5.2448.0)
	id <4S4N3NS0>; Thu, 16 Nov 2000 15:59:08 -0000
Message-Id: <7115817A3AD7D31187570008C71EB32B7F346E@BRUKVICTORIA>
From: Sean Batten <Sean.Batten@mercator.com>
To: 'Tomcat User Group' <tomcat-user@jakarta.apache.org>
Subject: Authentication with Tomcat (help!!)
Date: Thu, 16 Nov 2000 15:59:07 -0000
MIME-Version: 1.0
X-Mailer: Internet Mail Service (5.5.2448.0)
Content-Type: text/plain;
	charset="iso-8859-1"
X-Spam-Rating: locus.apache.org 1.6.2 0/1000/N

I have 2 servlets, SetValue (which stores a value in the session object) and
GetValue (which returns the value). I want the user to log in to access
them. My web.xml file looks like this:

<web-app>

	<security-constraint>
		<web-resource-collection>
			<web-resource-name>Protected
Area</web-resource-name>
			
			<url-pattern>/servlet/GetValue</url-pattern>
			<url-pattern>/servlet/SetValue</url-pattern>
		 
			<http-method>GET</http-method>
			<http-method>POST</http-method>
		</web-resource-collection>
      
		<auth-constraint>
			<role-name>tomcat</role-name>
			<role-name>role1</role-name>
		</auth-constraint>
	</security-constraint>
	
    <login-config>
      <auth-method>BASIC</auth-method>
      <realm-name>Example Basic Authentication Area</realm-name>
    </login-config>

</web-app>


When my SetValue servlet is called the parameter that I send (value) does
not appear. If I remove the security constraint everything works fine. Does
anybody know why this might be happening?

Sean Batten

********

TSI Software is now Mercator  -  find out more at http://www.mercator.com

The information in this email is confidential and is intended solely for the addressee(s). Access to this email by anyone else is unauthorised.  If you are not an  intended recipient, you must not read, use or disseminate the information contained in the email.  
Any views expressed in this message are those of the individual sender, except where the sender specifically states them to be the views of Mercator Software Ltd.

********