File APIs for Java Developers
Manipulate DOC, XLS, PPT, PDF and many others from your application.
The moose likes Web Component Certification (SCWCD/OCPJWCD) and the fly likes how many auth-constraint's per security-constraint Big Moose Saloon
  Search | Java FAQ | Recent Topics | Flagged Topics | Hot Topics | Zero Replies
Register / Login
JavaRanch » Java Forums » Certification » Web Component Certification (SCWCD/OCPJWCD)
Bookmark "how many auth-constraint Watch "how many auth-constraint New topic

how many auth-constraint's per security-constraint

JohnWilliam Fitz
Ranch Hand

Joined: Oct 13, 2008
Posts: 80

Question 11 on p797 of HFJS has an error I believe.

I can't type the whole question here, so I will summarize. In choice B of the question it states: "It is valid for more instances of auth-constraint to exist within the single tag described above." By "single tag described above" they are referring to the security-constraint tag.

Then in their answer section they mark this answer as true. But I believe it is false.

My question: Am I correct that only one auth-constraint can exist per security-constraint?

Christian Nicoll
Ranch Hand

Joined: Mar 09, 2008
Posts: 106
Hello JohnWilliam,

your are right. Check this link Under "Changes made in the 07/08 printing" you 'll find there the following sentence:

[833] Question 11;
Answers given are A,B,D,E,F
But, options B and F should not be correct.
- Only one instance of <auth-constraint> will exist within one <security-constraint> tag. The deployment descriptor DTD has the following definition for <security-constraint> as per servlet spec is <!ELEMENT security-constraint (web-resource-collection+, auth-constraint?, user-data-constraint?)> - This tag implies that authorization, data integrity and confidentiality security features are all declared for the wen application. And not authentication. Authentication is declared using the <login-config> tag. As per the servlet spec - The login-config element is used to configure the authentication method that should be used, the realm name that should be used for this application, and the attributes that are needed by the form login mechanism. <!ELEMENT login-config (auth-method?, realm-name?, form-loginconfig?)>

Removed the checkmark from options B and F

[ December 09, 2008: Message edited by: Christian Nicoll ]

My SCBCD-Notes - My Hello World Webservice
JohnWilliam Fitz
Ranch Hand

Joined: Oct 13, 2008
Posts: 80
Thanks so much! Looks like I should download and read the errata!
I agree. Here's the link:
subject: how many auth-constraint's per security-constraint
jQuery in Action, 3rd edition