security problem about servlet

[kevin chang]

i have set tomcat with new user and password in the role of tomcat, and use basic login mechanisms , but there is no confim user name and password window popup when i can the servlet, should make some security change in IE? any suggestion?

[Andres Gonzalez]

I'm trying to imagine your web.xml but I find it difficult. Can you share with us your web.xml (the important things, or course)? that'd help

[kevin chang]

   <security-constraint>
    <display-name>chapter</display-name>
    <web-resource-collection>
      <web-resource-name>Collection1</web-resource-name>
      <url-pattern>/chapter/servlet/LoginServlet</url-pattern>
      <url-pattern>/helloservlet</url-pattern>
      <url-pattern>/Hello.jsp</url-pattern>
      <url-pattern>/chapter/Hello.jsp</url-pattern>
      <http-method>GET</http-method>
      <http-method>POST</http-method>
      <http-method>PUT</http-method>
      <http-method>DELETE</http-method>
      <http-method>HEAD</http-method>
      <http-method>OPTIONS</http-method>
      <http-method>TRACE</http-method>
    </web-resource-collection>
    <auth-constraint>
      <role-name>tomcat</role-name>
      <role-name>role1</role-name>
    </auth-constraint>
    <user-data-constraint>
      <transport-guarantee>NONE</transport-guarantee>
    </user-data-constraint>
  </security-constraint>
  <login-config>
    <auth-method>BASIC</auth-method>
    <realm-name>chapter</realm-name>
  </login-config>
  <security-role>
    <role-name>role1</role-name>
  </security-role>
  <security-role>
    <role-name>tomcat</role-name>
  </security-role> 

i 'm using jbuilder , so that's the key point about security , could u share yours web,xml and give me an easy example?