change password JDBCRealm (again)

[Huaxin <hx...@cs.ualberta.ca>]

I am using JDBC Realm. I found I could only use

username: "tomcat" password:"tomcat" to login.
although I have two other users associated with the
role of "tomcat".

the error log is:
2001-11-08 09:38:33 - ContextManager: AccessInterceptor: checking
/login.jsp
2001-11-08 09:38:37 - ContextManager: AccessInterceptor: checking
/j_security_check
2001-11-08 09:38:37 - ContextManager: AccessInterceptor: checking
/protected/form1.jsp
2001-11-08 09:38:37 - ContextManager: AccessInterceptor: matched
/protected/* DELETE GET POST PUT null tomcat
2001-11-08 09:38:37 - ContextManager: JDBCRealm: The database connection
is null or was found to be closed. Trying to re-open it.
2001-11-08 09:38:37 - ContextManager: JDBCRealm: Authentication successful
for user hxzhang
2001-11-08 09:38:37 - ContextManager: JDBCRealm: Auth ok, user=hxzhang
2001-11-08 09:38:37 - ContextManager: AccessInterceptor: checking
/error.jsp


When I am using "tomcat"+"tomcat" pair, it is fine, and the error log is:
2001-11-08 09:42:10 - ContextManager: JDBCRealm: The database connection
is null or was found to be closed. Trying to re-open it.
2001-11-08 09:42:10 - ContextManager: JDBCRealm: Authentication
unsuccessful for user tomcat
2001-11-08 09:42:10 - ContextManager: JDBCRealm: Controled access for
tomcat R(/sharp + /protected/form1.jsp + null) Ct (jsp(org.apache.jasper.servlet.JspServlet/null) )
2001-11-08 09:42:10 - ContextManager: JDBCRealm: The database connection
is null or was found to be closed. Trying to re-open it.
2001-11-08 09:42:10 - ContextManager: JDBCRealm: Auth ok, first
role=tomcat

Here I intentionally changed tomcat's password to another, and it
still let me in.

what is wrong with all these?


--
To unsubscribe:   <ma...@jakarta.apache.org>
For additional commands: <ma...@jakarta.apache.org>
Troubles with the list: <ma...@jakarta.apache.org>