You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@tomcat.apache.org by "Skladovs, Victor" <Sk...@his.de> on 2003/05/05 12:26:56 UTC

JDBCRealm: Protecting all tomcat webapps?

Dear Friends!

I'm using JDBCRealm of Tomcat4.1. I have two web applications (say:
myproject1 and myproject2) and cocoon.
Each webapp has its own WEB-INF directory in which web.xml file are
defined all security constraints like this:
	<security-constraint>
		<web-resource-collection>
	
<web-resource-name>MySecretResource</web-resource-name>
			<url-pattern>/*</url-pattern>
		</web-resource-collection>
		<auth-constraint>
			<role-name>*</role-name>
		</auth-constraint>
	</security-constraint>
	<login-config>
		<auth-method>BASIC</auth-method>
		<realm-name>WebApp Login</realm-name>
	</login-config>

All is working fine, but I must authentificate myself 3 TIMES at worst
depending with which webapp I am working: I must login when I call
/myproject1 and I must login again when I call cocoon from /myproject1.

QUESTION: is it possible to protect my ALL web applications at a time,
so that I need to login only 1 time?

Thanking in advance

Regards,
Viktor




---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-user-help@jakarta.apache.org