Authentication

[MaheshS Kumbhar]

Is <auth-constraint>*<auth-constraint> same as <auth-constraint/>?

[Ulf Dittmer]

Probably not. From an XML point of view, "<auth-constraint/>" is the same as "<auth-constraint></auth-constraint>".
But that's easy to test, no?

[Ankit Garg]

<auth-constraint>*<auth-constraint>

This is not the right syntax to declare authentication constraint. The following is the syntax used to allow all users to access the resource on the server.

<auth-constraint>
      <role-name>*</role-name>
</auth-constraint>

<auth-constraint/> disallows all users to access the resource...