Problem While Enabling Authentication

[Gowher Naik]

The Authentication window doesnot appear when i access following url
http://localhost:8080/app3/welcome.jsp
When i use above url it directly shows welcome.jsp page without going on
Authentication window.
My webApplication app3 is stored under
C:\Tomcat 5.0\webapps\
My web.xml file is as follows

<web-app ...>
<!--*************************Security Roles***************************-->
<security-role> 
<role-name>admin</role-name>
<role-name>member</role-name>
</security-role>
<!--*************************Enablling Authentication*****************-->
<login-config>
<auth-method>BASIC</auth-method>
</login-config>
<!--*************************Security constraint*****************-->
<security-constraint>
<web-resource-collection>
<web-resource-name>MyWebApp</web-resource-name>
<url-pattern>/app3/welcome.jsp</url-pattern>
<http-method>GET</http-method>
<http-method>POST</http-method>
</web-resource-collection>
<auth-constraint>
<role-name>admin</role-name>
<role-name>member</role-name>
</auth-constraint>
</security-constraint>
</web-app>
 

My tomcat-users.xml file is as follows

<?xml version='1.0' encoding='utf-8'?>
<tomcat-users>
  <role rolename="tomcat"/>
  <role rolename="role1"/>
  <role rolename="manager"/>
  <role rolename="admin"/>
  <user username="gowher" password="gowher" roles="admin,manager"/>
  <user username="tomcat" password="tomcat" roles="tomcat"/>
  <user username="both" password="tomcat" roles="tomcat,role1"/>
  <user username="role1" password="tomcat" roles="role1"/>
  <user username="admin" password="admin" roles="admin,manager"/>
</tomcat-users>

Please Help me.
Thanks

[Senthil Kumar]

Did you get any warning/errors in the console log

[Gowher Naik]

no There is no warning/errors in the console log

[Alexey Korneychuk]

I think you should try

<security-role>
<role-name>admin</role-name>
</security-role>
<security-role>
<role-name>admin</role-name>
</security-role>

[Gowher Naik]

i tried
<security-role>
<role-name>admin</role-name>
</security-role>
<security-role>
<role-name>member</role-name>
</security-role>

but it does not work

[Alexey Korneychuk]

<role-name>member</role-name>
May be you want tell manager?

[Edisandro Bessa]

Hi gowher,

Your DD is almost correct. Let's check it out :

You must replace the line <url-pattern>/app3/welcome.jsp</url-pattern>
with <url-pattern>/welcome.jsp</url-pattern>. For sure it will work.

The <url-pattern> must be relative to the root of the application, so if you use the url pattern /app3/welcome.jsp you are saying to container you want to constraint the resource at <a href="http://localhost:8080/app3/<b rel="nofollow">app3/welcome.jsp</b>" target="_blank">http://localhost:8080/app3/app3/welcome.jsp and not at <a href="http://localhost:8080/app3<b rel="nofollow">/welcome.jsp</b>" target="_blank">http://localhost:8080/app3/welcome.jsp as you would expected.

Did you get the point ?

Oh ! Don't forget to restart your web application in order to changes in DD have effect.
[ October 26, 2006: Message edited by: Edisandro Bessa ]

[Gowher Naik]

Thanks Edisandro Bessa
I got window

[Gowher Naik]

Now there is another problem
when i run above url on window the authentication window appears
but when i run above url on Mozilla browser the authentication window doesnot appears and welcome.jsp page is displayed directly.