Return-Path: 
 <users-return-162246-apmail-tomcat-users-archive=tomcat.apache.org@tomcat.apache.org>
Delivered-To: apmail-tomcat-users-archive@www.apache.org
Received: (qmail 81151 invoked from network); 1 May 2007 17:39:50 -0000
Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.2)
  by minotaur.apache.org with SMTP; 1 May 2007 17:39:50 -0000
Received: (qmail 3016 invoked by uid 500); 1 May 2007 17:39:32 -0000
Delivered-To: apmail-tomcat-users-archive@tomcat.apache.org
Received: (qmail 2984 invoked by uid 500); 1 May 2007 17:39:32 -0000
Mailing-List: contact users-help@tomcat.apache.org; run by ezmlm
Precedence: bulk
List-Help: <mailto:users-help@tomcat.apache.org>
List-Unsubscribe: <mailto:users-unsubscribe@tomcat.apache.org>
List-Post: <mailto:users@tomcat.apache.org>
List-Id: <users.tomcat.apache.org>
Reply-To: "Tomcat Users List" <users@tomcat.apache.org>
Delivered-To: mailing list users@tomcat.apache.org
Received: (qmail 2960 invoked by uid 99); 1 May 2007 17:39:32 -0000
Received: from herse.apache.org (HELO herse.apache.org) (140.211.11.133)
    by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 01 May 2007 10:39:32 -0700
X-ASF-Spam-Status: No, hits=-0.0 required=10.0
	tests=SPF_HELO_PASS,SPF_PASS
X-Spam-Check-By: apache.org
Received-SPF: pass (herse.apache.org: domain of fmccown@cs.odu.edu designates
 128.82.4.9 as permitted sender)
Received: from [128.82.4.9] (HELO cartero.cs.odu.edu) (128.82.4.9)
    by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 01 May 2007 10:39:23 -0700
Received: from [128.82.7.106] (bang.seven.research.odu.edu [128.82.7.106])
	by cartero.cs.odu.edu (8.13.6/8.13.6) with ESMTP id l41Hcx3o007720
	for <users@tomcat.apache.org>; Tue, 1 May 2007 13:38:59 -0400 (EDT)
Message-ID: <463788F1.90000@cs.odu.edu>
Date: Tue, 01 May 2007 13:37:37 -0500
From: Frank McCown <fmccown@cs.odu.edu>
User-Agent: Thunderbird 1.5.0.10 (Windows/20070221)
MIME-Version: 1.0
To: users@tomcat.apache.org
Subject: Help getting form-based authentication example working
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
X-Virus-Checked: Checked by ClamAV on apache.org

Hello,

I'm having problems getting the form-based authentication example that 
ships with Tomcat 6 to work properly.

I have followed all the instructions at

http://tomcat.apache.org/tomcat-6.0-doc/realm-howto.html

to make the form authentication example using MemoryRealm to work for

http://myserver:9090/examples/jsp/security/protected/

but when I access this URL, I get the protected page that says:

You are logged in as remote user null in session BLAH...
No user principal could be identified.

I understand that this page should redirect me to the login.jsp page 
instead where I can enter user1/test.


Here's what I did:

$CATALINA_HOME/conf/server.xml:

<Realm className="org.apache.catalina.realm.MemoryRealm" />


$CATALINA_HOME/conf/tomcat-users.xml:

<tomcat-users>
   <role rolename="tomcat"/>
   <role rolename="role1"/>
   <user username="user2" password="test" roles="role1"/>
   <user username="user1" password="test" roles="tomcat"/>
</tomcat-users>


$CATALINA_HOME/webapps/examples/WEB-INF/web.xml:

<security-constraint>
       <display-name>Example Security Constraint</display-name>
       <web-resource-collection>
          <web-resource-name>Protected Area</web-resource-name>
	 <!-- Define the context-relative URL(s) to be protected -->
          <url-pattern>/security/protected/*</url-pattern>
	 <!-- If you list http methods, only those methods are protected -->
	 <http-method>DELETE</http-method>
          <http-method>GET</http-method>
          <http-method>POST</http-method>
	 <http-method>PUT</http-method>
       </web-resource-collection>
       <auth-constraint>
          <!-- Anyone with one of the listed roles may access this area -->
          <role-name>tomcat</role-name>
	 <role-name>role1</role-name>
       </auth-constraint>
     </security-constraint>

     <!-- Default login configuration uses form-based authentication -->
     <login-config>
       <auth-method>FORM</auth-method>
       <realm-name>Example Form-Based Authentication Area</realm-name>
       <form-login-config>
 
<form-login-page>/jsp/security/protected/login.jsp</form-login-page> 
   <form-error-page>/jsp/security/protected/error.jsp</form-error-page>
       </form-login-config>
     </login-config>


Any help would be much appreciated.  I'm running Tomcat on a Solaris 
workstation and accessing it from my Windows client with Firefox.

Regards,
Frank

-- 
Frank McCown
Old Dominion University
http://www.cs.odu.edu/~fmccown/

---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org