  | Mailing List | | Home | | Forum Home | | JBoss - Java Application Server | | Struts - A MVC web framework | | Tomcat - JSP/Servlet container | | iText - An open source PDF Java Library | | JDOM - JDOM XML Parser | | J2EE - A mailing list for Java(tm) 2 Platform, Enterprise Edition | | J2EE Pattern - An interest list for Sun Java Center J2EE Pattern Catalog | | Servlet - A mailing list for discussion about Sun Microsystem's Java Servlet API Technology | | JSP - A mailing list about Java Server Pages specification and reference | |
Struts & Hibernate
|
|
|
  | | Re: help using JDBCRealm - how to relate a realm with a security
constraint | Re: help using JDBCRealm - how to relate a realm with a security
constraint 2003-12-15 - By Christopher Schultz
Back Pedro,
> What i have done: > 1. modify the server.xml file to add a Realm tag (<Realm > className="org.apache.catalina.realm.JDBCRealm " debug="99" > connectionName="root" connectionPassword="XXXX" > connectionURL="jdbc:mysql://myserver:3306/mydatabase" > driverName="org.gjt.mm.mysql.Driver " roleNameCol="role_name" > userCredCol="user_password" userNameCol="user_name" > userRoleTable="user_roles" userTable="users" />)
Where did you put this declaration? In the <Context> of your web application? I recall that Realm declarations can appear in multiple places. Make sure that it appears in the <Context> where you have:
> 2. modify the web.xml to add a security-constraint tag ( > <security-constraint> > <web-resource-collection> > <web-resource-name>Area de pruebas de > seguridad</web-resource-name> > <url-pattern>/cosa.jsp</url-pattern> > <url-pattern>/test.jsp</url-pattern> > <http-method>DELETE</http-method> > <http-method>GET</http-method> > <http-method>POST</http-method> > <http-method>PUT</http-method> > </web-resource-collection> > <auth-constraint> > <description>rol de administrador</description> > <role-name>YYY</role-name> > </auth-constraint> > </security-constraint> > )
This looks good. What is the URL that you expect to be protetced, and is not protected? Also, try removing the <http-method> settings, just in case that is complicating things.
-chris
-- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ------ To unsubscribe, e-mail: tomcat-user-unsubscribe@(protected) For additional commands, e-mail: tomcat-user-help@(protected)
|
|
 |