my dog learned polymorphism
The moose likes Tomcat and the fly likes Container Managed Security Big Moose Saloon
  Search | Java FAQ | Recent Topics | Flagged Topics | Hot Topics | Zero Replies
Register / Login
JavaRanch » Java Forums » Products » Tomcat
Bookmark "Container Managed Security" Watch "Container Managed Security" New topic

Container Managed Security

Danish Shaukat
Ranch Hand

Joined: Nov 16, 1999
Posts: 340

Does tomcat provide container managed security?

I don�t think it does as it is not an application server. I was unable to find any links on this as well.

[ December 28, 2006: Message edited by: Danish Shaukat ]
Ben Souther

Joined: Dec 11, 2004
Posts: 13410

Tomcat is an application server and it does provide container managed security.

The best resource for this is the servlet spec.
You can find a link to it in my signature.

Java API J2EE API Servlet Spec JSP Spec How to ask a question... Simple Servlet Examples jsonf
William Brogden
Author and all-around good cowpoke

Joined: Mar 22, 2000
Posts: 13018
A normal Tomcat installation comes with a file named security-manager-howto.html in the tool-docs directory. You will also find a security related comment on user authentication in the server.xml file.

The /conf/catalina.policy file can be used to give minutely detailed security for selected web applications.

I agree. Here's the link:
subject: Container Managed Security
It's not a secret anymore!