Return-Path: 
 <tomcat-user-return-121846-apmail-jakarta-tomcat-user-archive=jakarta.apache.org@jakarta.apache.org>
Delivered-To: apmail-jakarta-tomcat-user-archive@www.apache.org
Received: (qmail 98778 invoked from network); 21 Feb 2005 10:38:02 -0000
Received: from hermes.apache.org (HELO mail.apache.org) (209.237.227.199)
  by minotaur-2.apache.org with SMTP; 21 Feb 2005 10:38:02 -0000
Received: (qmail 94166 invoked by uid 500); 21 Feb 2005 10:37:51 -0000
Delivered-To: apmail-jakarta-tomcat-user-archive@jakarta.apache.org
Received: (qmail 94086 invoked by uid 500); 21 Feb 2005 10:37:48 -0000
Mailing-List: contact tomcat-user-help@jakarta.apache.org; run by ezmlm
Precedence: bulk
List-Unsubscribe: <mailto:tomcat-user-unsubscribe@jakarta.apache.org>
List-Subscribe: <mailto:tomcat-user-subscribe@jakarta.apache.org>
List-Help: <mailto:tomcat-user-help@jakarta.apache.org>
List-Post: <mailto:tomcat-user@jakarta.apache.org>
List-Id: "Tomcat Users List" <tomcat-user.jakarta.apache.org>
Reply-To: "Tomcat Users List" <tomcat-user@jakarta.apache.org>
Delivered-To: mailing list tomcat-user@jakarta.apache.org
Received: (qmail 94071 invoked by uid 99); 21 Feb 2005 10:37:48 -0000
X-ASF-Spam-Status: No, hits=0.0 required=10.0
	tests=
X-Spam-Check-By: apache.org
Received-SPF: neutral (hermes.apache.org: local policy)
Received: from mx66.mysite4now.com (HELO mx66.mysite4now.com) (66.102.135.66)
  by apache.org (qpsmtpd/0.28) with ESMTP; Mon, 21 Feb 2005 02:37:47 -0800
Received: from [213.22.170.59] by mx66.mysite4now.com [66.102.135.66] with
 SmartMax MailMax for tomcat-user@jakarta.apache.org;
 Mon, 21 Feb 2005 02:42:04 -0800
X-SmartMax-AuthUser: bruno.goncalves@vilt.com.pt
Message-ID: <4219B9F0.5050800@myrealbox.com>
Date: Mon, 21 Feb 2005 10:37:36 +0000
From: =?ISO-8859-1?Q?Bruno_Gon=E7alves?= <bvg@myrealbox.com>
User-Agent: Mozilla Thunderbird 1.0 (Windows/20041206)
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: Tomcat Users List <tomcat-user@jakarta.apache.org>
Subject: HTTP Status 403 (tomcat 5.0.28 & JAASRealm)
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
X-Virus-Checked: Checked
X-Spam-Rating: minotaur-2.apache.org 1.6.2 0/1000/N

When I login in my application with a username&password valid I get a 
HTTP Status 403!
I'm using Tomcat 5.0.28 and JAASRealm.
I already looked into in my web.xml, and I think is alright.
The valid username & password: admin / admin

Anyone knows what's the problem?
Thanks..

web.xml:

    <!-- login config -->
    <security-constraint>
        <web-resource-collection>
            <web-resource-name>Protected Area</web-resource-name>
            <!-- Define the context-relative URL(s) to be protected -->
            <url-pattern>/web/layouts/*</url-pattern>
            <url-pattern>/web/jsp/das/*</url-pattern>
            <!-- If you list http methods, only those methods are 
protected -->
            <http-method>DELETE</http-method>
            <http-method>GET</http-method>
            <http-method>POST</http-method>
            <http-method>PUT</http-method>
        </web-resource-collection>
        <auth-constraint>
            <!-- Anyone with one of the listed roles may access this 
area -->
            <role-name>admin</role-name>
        </auth-constraint>
        <user-data-constraint>
            <transport-guarantee>NONE</transport-guarantee>
        </user-data-constraint>
    </security-constraint>

    <!-- Default login configuration uses form-based authentication -->
    <login-config>
        <auth-method>FORM</auth-method>
        <realm-name>JAASRealm</realm-name>
        <form-login-config>
            <form-login-page>/security/login.jsp</form-login-page>
            <form-error-page>/security/login.jsp?error=1</form-error-page>
        </form-login-config>
    </login-config>

    <!-- Security roles referenced by this web application -->
    <security-role>
        <role-name>admin</role-name>
    </security-role>


---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-user-help@jakarta.apache.org