1)
Considering security and reliability, how good is 'Single sign on'
support provided by tomcat ?
can a project rely on what is provided by tomcat ?
any other/better solutions suggested ?


2) I am tring to use 'single sign on' provided by tomcat. Everything
works fine.
* But <error-page> configuration does't work. *

Here is web.xml of what i am trying ...

<web-app>
<error-page>
  <error-code>500</error-code>
  <location>/error.jsp</location>
</error-page>
<error-page>
  <error-code>404</error-code>
  <location>/error.jsp</location>
</error-page>
<error-page>
  <error-code>403</error-code>
  <location>/error.jsp</location>
</error-page>
<security-constraint>
  <web-resource-collection>
   <web-resource-name>
       Domain admin
     </web-resource-name>
   <url-pattern>/domain/*</url-pattern>
  </web-resource-collection>
  <auth-constraint>
   <role-name>domainadmin</role-name>
  </auth-constraint>
</security-constraint>
<security-constraint>
  <web-resource-collection>
   <web-resource-name>
       Sys admin
     </web-resource-name>
   <url-pattern>/sys/*</url-pattern>
  </web-resource-collection>
  <auth-constraint>
   <role-name>sysadmin</role-name>
  </auth-constraint>
</security-constraint>
<login-config>
  <auth-method>FORM</auth-method>
  <form-login-config>
   <form-login-page>
       /login.jsp
     </form-login-page>
   <form-error-page>
       /error.jsp
     </form-error-page>
  </form-login-config>
</login-config>
</web-app>

--
siddharth
siddharth@(protected)

--
http://www.fastmail.fm - Email service worth paying for. Try it for free

---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@(protected)
For additional commands, e-mail: tomcat-user-help@(protected)