How to unprotect a registration page/action

[Mike Mattox <mi...@verideon.com>]

I'm using Struts & Tiles, and so far the security constraint is working.
But I can't figure out how to unprotect the registration action.  So far I
have:

  <security-constraint>
    <web-resource-collection>
      <web-resource-name>All DO</web-resource-name>
      <url-pattern>something.exe</url-pattern>
      <http-method>GET</http-method>
      <http-method>POST</http-method>
    </web-resource-collection>
    <auth-constraint>
      <role-name>*</role-name>
    </auth-constraint>
  </security-constraint>
  <security-constraint>
    <web-resource-collection>
      <web-resource-name>All DO</web-resource-name>
      <url-pattern>*.do</url-pattern>
      <http-method>GET</http-method>
      <http-method>POST</http-method>
    </web-resource-collection>
    <auth-constraint>
      <role-name>*</role-name>
    </auth-constraint>
  </security-constraint>

Which gives me an exception:

Caused by: java.lang.IllegalArgumentException: <url-pattern> something.exe
invalide d'après les contraintes de sécurité (security constraint)
	at
org.apache.catalina.core.StandardContext.addConstraint(StandardContext.java:
1356)

Which in english says "invalid according to security constraints".  Any
ideas what I am doing wrong?

Thanks,
Michael




---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-user-help@jakarta.apache.org