Return-Path: Delivered-To: apmail-tomcat-users-archive@www.apache.org Received: (qmail 72604 invoked from network); 7 Feb 2008 15:40:31 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.2) by minotaur.apache.org with SMTP; 7 Feb 2008 15:40:31 -0000 Received: (qmail 98364 invoked by uid 500); 7 Feb 2008 15:40:14 -0000 Delivered-To: apmail-tomcat-users-archive@tomcat.apache.org Received: (qmail 98027 invoked by uid 500); 7 Feb 2008 15:40:13 -0000 Mailing-List: contact users-help@tomcat.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: "Tomcat Users List" Delivered-To: mailing list users@tomcat.apache.org Received: (qmail 98016 invoked by uid 99); 7 Feb 2008 15:40:13 -0000 Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 07 Feb 2008 07:40:13 -0800 X-ASF-Spam-Status: No, hits=2.0 required=10.0 tests=HTML_MESSAGE,SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (athena.apache.org: domain of mailing.list.mail.id@gmail.com designates 72.14.252.152 as permitted sender) Received: from [72.14.252.152] (HELO po-out-1718.google.com) (72.14.252.152) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 07 Feb 2008 15:39:41 +0000 Received: by po-out-1718.google.com with SMTP id c31so39407poi.4 for ; Thu, 07 Feb 2008 07:39:47 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:references; bh=Ip6fMzcdwwEIRB3QQYwdQ8GOYCAY0BO+NDBvdOnL32k=; b=ZmgFPIFRItXn/RoVLw6YZWkow+XsBnYcLiBu4rnnMmXv25UZbdBYHpmvp1YIwPJC3/cThXqfUERdi77Rs3LR+1zI5pKy5pLbijl++0Ks9gUF3nE6On/6Q8LY5GZpC4n+9ytNqOb8UtzoZAOlFjIe4QIl676h8PugIs+0SI367rY= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:to:subject:in-reply-to:mime-version:content-type:references; b=WDHgoT3OxPXtRTgPFsBcyMtaHLELNf0Om4CeXr5v7INnopPNL0vNWWKshFJUPVIucvB5X8ZYjRBm3bud7BtN3OtBWWko8lVmNZMK94Os2uMtj/sNJk9SS4tl3+oGAu1oWYCwmgrrtVtSjQs/RWHX+KLSeMm6vFB+hBdiUme/3Pk= Received: by 10.141.68.12 with SMTP id v12mr7683203rvk.111.1202398786258; Thu, 07 Feb 2008 07:39:46 -0800 (PST) Received: by 10.141.133.16 with HTTP; Thu, 7 Feb 2008 07:39:46 -0800 (PST) Message-ID: <848a55560802070739t2309ef2r110ba837392fcfb3@mail.gmail.com> Date: Thu, 7 Feb 2008 20:39:46 +0500 From: "alee amin" To: "Tomcat Users List" Subject: Re: Tomcat Security Problem In-Reply-To: <2828B04F0113CD468E6D1D51DF4362A404CF6E9D@USEA-EXCH2.na.uis.unisys.com> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_Part_21849_5657438.1202398786244" References: <848a55560802070439g142e9e8bgfb4117140ffb52a@mail.gmail.com> <2828B04F0113CD468E6D1D51DF4362A404CF6E9D@USEA-EXCH2.na.uis.unisys.com> X-Virus-Checked: Checked by ClamAV on apache.org ------=_Part_21849_5657438.1202398786244 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Content-Disposition: inline Yeah i guess so. I want realm thing only for application 2. How can i make it available for it and at the same time i want application 1 BASIC AUTHENTICATION based on tomcat-users.xml file. I am going throgh the page u sent but still not able to get some working solution. Need it urgent. On Feb 7, 2008 8:08 PM, Caldarale, Charles R wrote: > > From: alee amin [mailto:mailing.list.mail.id@gmail.com] > > Subject: Tomcat Security Problem > > > > Application 2 has form based security and for some > > enhanced security i have added the "realm" for the > > database in conf/server.xml file. > > Where in server.xml? A element may be nested inside of an > , , or , depending on the desired scope of the > realm. Sounds like you need to put it inside the of your > application 2, not inside the or where you now have it. > > Doc reference: > http://tomcat.apache.org/tomcat-6.0-doc/config/realm.html > > - Chuck > > > THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY > MATERIAL and is thus for use only by the intended recipient. If you > received this in error, please contact the sender and delete the e-mail > and its attachments from all computers. > > --------------------------------------------------------------------- > To start a new topic, e-mail: users@tomcat.apache.org > To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org > For additional commands, e-mail: users-help@tomcat.apache.org > > -- Muhammad Ali http://techboard.wordpress.com Software Engineer - E2ESP muhammadaliamin(at)gmail(dot)com ------=_Part_21849_5657438.1202398786244--