he doesn't ask for authenticate

[anarkali perera]

this is my tomcat user.xml

<?xml version='1.0' encoding='utf-8'?>
<tomcat-users>
  <role rolename="manager"/>
  <role rolename="admin"/>
  <user username="tomcat" password="s3cret" roles="manager"/>
  <user username="root" password="admin" roles="manager,admin"/>
  <user username="aruna" password="aruna" roles="manager,admin"/>
</tomcat-users>

this is a part of my web.xml

<security-constraint>
		<web-resource-collection>
			<web-resource-name>UpdateRecipes</web-resource-name>
			<url-pattern>/New/ShowHeadersServlet/*</url-pattern>			
			<http-method>GET</http-method>
			<http-method>POST</http-method>
		</web-resource-collection>
		
		<auth-constraint>
		<role-name>Admin</role-name>
		<role-name>Member</role-name>
	</auth-constraint>
	</security-constraint>

this is my servlet

package com;

import java.io.*;  
import java.net.URL;
import java.util.*;  
import javax.servlet.*;  
import javax.servlet.http.*;  
  
public class ShowHeadersServlet extends HttpServlet {  
  
    public void doGet(HttpServletRequest req, HttpServletResponse res)  
            throws ServletException, IOException {  
  		this.doPost(req,res);
    
    }  

	public void doPost(HttpServletRequest req, HttpServletResponse res){
		System.out.println("doPost");
		try {
			PrintWriter p=res.getWriter();
			p.println("hiiiiiiiiii");
		} catch (IOException e) {
			// TODO Auto-generated catch block
			e.printStackTrace();
		}
		
		
		}
}   

i am using eclips IDE
when i am right click and run servlet runs and print hiiiii.
but why doesn't he ask for authenticate?

[Teena George]

specify login-config also.

[anarkali perera]

i add this to my web.xml

<login-config>
		<auth-method>BASIC</auth-method>
	</login-config>
	
	<security-role><role-name>Admin</role-name></security-role>
	<security-role><role-name>manager</role-name></security-role>

but still no change

[Chinmaya Chowdary]

Hi, Anarkali.

Use the following code in web.xml and redeploy.

<security-role><role-name>admin</role-name></security-role>  

I think rolenames are case sesitive.

[anarkali perera]

this is my web.xml now

<?xml version="1.0" encoding="UTF-8"?>
<web-app xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
	xmlns="http://java.sun.com/xml/ns/javaee" xmlns:web="http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd"
	xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd"
	id="WebApp_ID" version="2.5">
	<display-name>New</display-name>
	<welcome-file-list>
		<welcome-file>index.html</welcome-file>
		<welcome-file>index.htm</welcome-file>
		<welcome-file>index.jsp</welcome-file>
		<welcome-file>default.html</welcome-file>
		<welcome-file>default.htm</welcome-file>
		<welcome-file>default.jsp</welcome-file>
	</welcome-file-list>
	<error-page>
		<error-code>404</error-code>
		<location>/notFoundError.jsp</location>
	</error-page>
	<servlet>
		<description></description>
		<display-name>userRegister</display-name>
		<servlet-name>userRegister</servlet-name>
		<servlet-class>com.userRegister</servlet-class>
	</servlet>
	<servlet-mapping>
		<servlet-name>userRegister</servlet-name>
		<url-pattern>/userRegister</url-pattern>
	</servlet-mapping>
	<servlet>
		<description></description>
		<display-name>ShowHeadersServlet</display-name>
		<servlet-name>ShowHeadersServlet</servlet-name>
		<servlet-class>com.ShowHeadersServlet</servlet-class>
	</servlet>
	<servlet-mapping>
		<servlet-name>ShowHeadersServlet</servlet-name>
		<url-pattern>/ShowHeadersServlet</url-pattern>
	</servlet-mapping>


	<security-constraint>
		<web-resource-collection>
			<web-resource-name>UpdateRecipes</web-resource-name>
			<url-pattern>/New/ShowHeadersServlet/*</url-pattern>
			<http-method>GET</http-method>
			<http-method>POST</http-method>
		</web-resource-collection>

		<auth-constraint>
			<role-name>admin</role-name>
			<role-name>manager</role-name>
		</auth-constraint>
	</security-constraint>

	<login-config>
		<auth-method>BASIC</auth-method>
	</login-config>
	
	<security-role><role-name>admin</role-name></security-role>
	<security-role><role-name>manager</role-name></security-role>
	
	
</web-app>

it is not working still?

[Chinmaya Chowdary]

I think first time you have logged in. Delete active logins, cookies at the browser side and send request.

[anarkali perera]

actually there is no logging page in my application.is it required?

[anarkali perera]

ok.i delete the cookies.still same.anyway there is no login page is it required?

[Chinmaya Chowdary]

Hi, Anarkali.
No need to use login page since, authentication method is BASIC. Browser's login window will ask for username and password.

[Ankit Garg]

What is the URL that you are entering in the browser?? You've configured the URL as

<url-pattern>/New/ShowHeadersServlet/*</url-pattern>

which means that you'll have to enter this URL in your browser http://localhost:8080/contextPath/New/ShowHeadersServlet/ , then the browser should ask for username and password...

[anarkali perera]

i change the web.xml as follows

<security-constraint>
		<web-resource-collection>
			<web-resource-name>UpdateRecipes</web-resource-name>
			<url-pattern>/HelloWorldServlet/*</url-pattern>
			<http-method>GET</http-method>
			<http-method>POST</http-method>
		</web-resource-collection>

		<auth-constraint>
			<role-name>admin</role-name>
			<role-name>manager</role-name>
		</auth-constraint>
	</security-constraint>

	<login-config>
		<auth-method>BASIC</auth-method>
	</login-config>
	
	<security-role><role-name>admin</role-name></security-role>
	<security-role><role-name>manager</role-name></security-role>

and then i use this url
http://localhost:8080/chapter1/HelloWorldServlet
then it is working?