Mailing-List: contact users-help@tomcat.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Tomcat Users List" <users@tomcat.apache.org>
Received-SPF: pass (nike.apache.org: domain of barry.l.propes@citi.com
 designates 67.231.153.94 as permitted sender)
From: "Propes, Barry L " <barry.l.propes@citi.com>
To: "'Tomcat Users List'" <users@tomcat.apache.org>
Subject: RE: security-role-ref doesn't work
Thread-Topic: security-role-ref doesn't work
Thread-Index: AQHOPKBr2EzbelEx202VnjtvXbaaBZjeAPng
Date: Fri, 19 Apr 2013 20:37:23 +0000
Message-ID: <C3CE3C9461724341BB14DD344A03003411CD11@exgtmb27.nam.nsroot.net>
References: 
 <CAJqdOe-365=53W93Ar1gPiD0HhSZaaZnCRqLMpVFUpTRpA98uA@mail.gmail.com>
In-Reply-To: 
 <CAJqdOe-365=53W93Ar1gPiD0HhSZaaZnCRqLMpVFUpTRpA98uA@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0

What version are you using?

 Mine doesn't contain this attribute pair at all...

<security-role-ref>=20
</security-role-ref>

-----Original Message-----
From: Jakub 1983 [mailto:jjakub83@gmail.com]=20
Sent: Thursday, April 18, 2013 8:51 PM
To: Tomcat Users List
Subject: security-role-ref doesn't work

my tomcat users:
  <role rolename=3D"tomcat"/>
  <role rolename=3D"role1"/>
   <role rolename=3D"manager-gui"/>
   <role rolename=3D"admin"/>
  <user username=3D"tomcat" password=3D"tomcat"
roles=3D"tomcat,manager-gui,admin"/>
  <user username=3D"both" password=3D"tomcat" roles=3D"tomcat,role1"/>
  <user username=3D"role1" password=3D"tomcat" roles=3D"role1"/>

following code fails:
<security-constraint>
    <web-resource-collection>
        <web-resource-name>Sample Application</web-resource-name>
        <description>Require users to authenticate</description>
        <url-pattern>*.jsp</url-pattern>
        <http-method>POST</http-method>
        <http-method>GET</http-method>
    </web-resource-collection>
    <auth-constraint>
        <role-name>adminLocal</role-name>
    </auth-constraint>
    <user-data-constraint>
        <transport-guarantee>NONE</transport-guarantee>
    </user-data-constraint>
</security-constraint>
<security-role>
    <role-name>adminLocal</role-name>
</security-role>
<security-role-ref>
    <role-name>admin</role-name>
    <role-link>adminLocal</role-link>
</security-role-ref>

if I change security-role.role-name to admin, and in auth-constraint.role-n=
ame also to admin, than I can login,

but why doesnt' it work with <security-role-ref>  ?

regards
Jakub

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org