webapp deployment using single sign on

[siddharth <si...@fastmail.fm>]

1) 
Considering security and reliability, how good is 'Single sign on'
support provided by tomcat ?
can a project rely on what is provided by tomcat ?
any other/better solutions suggested ?


2) I am tring to use 'single sign on' provided by tomcat. Everything
works fine.
* But <error-page> configuration does't work. *

Here is web.xml of what i am trying ...

<web-app>
  <error-page>
    <error-code>500</error-code>
    <location>/error.jsp</location>
  </error-page>
  <error-page>
    <error-code>404</error-code>
    <location>/error.jsp</location>
  </error-page>
  <error-page>
    <error-code>403</error-code>
    <location>/error.jsp</location>
  </error-page>
  <security-constraint>
    <web-resource-collection>
      <web-resource-name>
            Domain admin
         </web-resource-name>
      <url-pattern>/domain/*</url-pattern>
    </web-resource-collection>
    <auth-constraint>
      <role-name>domainadmin</role-name>
    </auth-constraint>
  </security-constraint>
  <security-constraint>
    <web-resource-collection>
      <web-resource-name>
            Sys admin
         </web-resource-name>
      <url-pattern>/sys/*</url-pattern>
    </web-resource-collection>
    <auth-constraint>
      <role-name>sysadmin</role-name>
    </auth-constraint>
  </security-constraint>
  <login-config>
    <auth-method>FORM</auth-method>
    <form-login-config>
      <form-login-page>
            /login.jsp
         </form-login-page>
      <form-error-page>
            /error.jsp
         </form-error-page>
    </form-login-config>
  </login-config>
</web-app>

-- 
  siddharth
  siddharth@fastmail.fm

-- 
http://www.fastmail.fm - Email service worth paying for. Try it for free

---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-user-help@jakarta.apache.org