File APIs for Java Developers
Manipulate DOC, XLS, PPT, PDF and many others from your application.
The moose likes Tomcat and the fly likes Container Managed Security Big Moose Saloon
  Search | Java FAQ | Recent Topics | Flagged Topics | Hot Topics | Zero Replies
Register / Login
JavaRanch » Java Forums » Products » Tomcat
Bookmark "Container Managed Security" Watch "Container Managed Security" New topic

Container Managed Security

Danish Shaukat
Ranch Hand

Joined: Nov 16, 1999
Posts: 340

Does tomcat provide container managed security?

I don�t think it does as it is not an application server. I was unable to find any links on this as well.

[ December 28, 2006: Message edited by: Danish Shaukat ]
Ben Souther

Joined: Dec 11, 2004
Posts: 13410

Tomcat is an application server and it does provide container managed security.

The best resource for this is the servlet spec.
You can find a link to it in my signature.

Java API J2EE API Servlet Spec JSP Spec How to ask a question... Simple Servlet Examples jsonf
William Brogden
Author and all-around good cowpoke

Joined: Mar 22, 2000
Posts: 13037
A normal Tomcat installation comes with a file named security-manager-howto.html in the tool-docs directory. You will also find a security related comment on user authentication in the server.xml file.

The /conf/catalina.policy file can be used to give minutely detailed security for selected web applications.

I agree. Here's the link:
subject: Container Managed Security
It's not a secret anymore!