2 Replies Latest reply on May 7, 2002 1:33 PM by aradka

    Apache/Tomcat JBossSX

    rollatwork

      Currently using JBoss 2.4.4/Tomcat 4.0.1 w/ Apache 1.3.24 on Windows.

      Prior to integrating w/ Apache BASIC authentication worked fine, however, I am experiencing problems logging into my secured pages now, without any modifications.

      Are there any additional considerations when integrating w/ Apache? Are my configurations working against one other?

      My Apache httpd.conf:


      Order Deny,Allow
      Deny from all
      Options FollowSymLinks
      AllowOverride None
      AuthUserFile "C:/Program Files/Apache Group/Apache/passwd/password"
      AuthName "Client Access"
      AuthType Basic
      require valid-user


      My web.xml:

      <security-constraint>
      <web-resource-collection>
      <web-resource-name>Restricted Access</web-resource-name>
      Declarative security
      <url-pattern>/*</url-pattern>
      <http-method>HEAD</http-method>
      <http-method>GET</http-method>
      <http-method>POST</http-method>
      <http-method>PUT</http-method>
      <http-method>DELETE</http-method>
      </web-resource-collection>
      <auth-constraint>
      <role-name>Admin</role-name>
      </auth-constraint>
      <user-data-constraint>
      No Transport guarantee
      <transport-guarantee>NONE</transport-guarantee>
      </user-data-constraint>
      </security-constraint>
      <login-config>
      <auth-method>BASIC</auth-method>
      <realm-name>Blah realm</realm-name>
      </login-config>
      <security-role>
      Administrator
      <role-name>Admin</role-name>
      </security-role>

      Thanks,
      Roll

        • 1. Re: Apache/Tomcat JBossSX
          rollatwork

          Please note I've also tried modifying my httpd.conf to specify only specific directories for authentication without any success.

          I think there may be a general misunderstanding as to how to configure w/ Apache for authentication. Evidence of this can be seen on the first page of this forum alone. Can anyone provide any insight?

          • 2. Re: Apache/Tomcat JBossSX
            aradka

            Hi,

            I posted a similar question below. I think the problem is actually w/ Catalina and Apache. I rolled back to JBoss_2.4.4-Tomcat_3.2.3 and everything works fine (as did JBoss-2.2.1_Tomcat-3.2.1).

            I've been searching the tomcat lists for info but other than a similar problem last Nov., that I couldn't find a resolution to, nada.

            I'll post something over there.

            Alex