Tomcat 4.0.6 web.xml

Hi,
I have a tomcat 4.0.6 server running on a production environment. My web.xml doesn't seem to be working fine with that. Can any one give me a sample web.xml thats accepted by 4.0.6 tomcat server? However my web.xml is as under.
<?xml version="1.0" encoding="ISO-8859-1"?>
<!DOCTYPE web-app
    PUBLIC "-//Sun Microsystems, Inc.//DTD Web Application 2.3//EN"
    "http://java.sun.com/dtd/web-app_2_3.dtd">
<web-app>
  <display-name>Web Project</display-name>
  <description>
     WebProject Description
  </description>
    <!-- Define servlet-mapped and path-mapped example filters -->
    <filter/>
    <filter-mapping/>
    <listener/>
    <servlet>
        <servlet-name>SendMailServlet</servlet-name>
        <servlet-class>SendMailServlet</servlet-class>
    </servlet>
    <servlet-mapping>
        <servlet-name>SendMailServlet</servlet-name>
        <url-pattern>/SendMailServlet</url-pattern>
    </servlet-mapping>
    <taglib>
        <taglib-uri/>
        <taglib-location/>
    </taglib>
    <resource-ref/>
    <security-constraint/>
    <!-- Default login configuration uses form-based authentication -->
    <login-config/>
    <env-entry>
      <env-entry-name/>
      <env-entry-value/>
      <env-entry-type/>
    </env-entry>
    <!-- EJB Reference -->
    <ejb-ref>
      <description/>
      <ejb-ref-name/>
      <ejb-ref-type/>
      <home/>
      <remote/>
    </ejb-ref>
    <!-- Local EJB Reference -->
    <ejb-local-ref>
      <description/>
      <ejb-ref-name/>
      <ejb-ref-type/>
      <local-home/>
      <local/>
    </ejb-local-ref>
</web-app>

in the conf directory of your Tomcat installation you will find the default web.xml file. You can copy this file to you web application and use as the basis of a new web.xml.

Similar Messages

  • Tomcat 3.2.3 web.xml doesnot work in Tomcat 4.0

    I have put a web.xml for my web app in wEB-INF directory. It works in Tomcat 3.2.3 but doesnot work in Tomcat 4.0. Tomcat is showing some ParsingException.
    Is this true & anyone of u r facing the same problem?
    Thanks in Advance
    [email protected]

    Hi
    If you see the Specification the order in which the tags appear is important. In Tomcat 3.2.3 the order is not stressed upon but in Tomcat 4.0 any discrepancy in the order of Tags is immediately noted. See specification for the order of Tags and change the web.xml . Your application should work fine then.
    Keep me posted on your progress.
    Good Luck!
    Eshwar Rao
    Developer Technical Support
    Sun mcirosystems inc
    http://www.sun.com/developers/support

  • Security in my web.xml in Tomcat 4

    Hello,
    I was using this application on Tomcat 3 and my web.xml worked perfectly well.
    However when I tried to start it on Tomcat 4 there is something wrong with the
    security part of my web.xml . If I leave out the security constraint for this application, it
    works. However if I make my application secure I am unable to view it in the browser.
    It does not try to connect to the login.jsp page for log in , but simply displays the message that the page is unavailable and that I have to refresh my browser. Please help me with that because I am stuck.
    Here is my web.xml :
    <?xml version="1.0" encoding="ISO-8859-1"?>
    <!DOCTYPE web-app
    PUBLIC "-//Sun Microsystems, Inc.//DTD Web Application 2.3//EN"
    "http://java.sun.com/dtd/web-app_2_3.dtd">
    <web-app>
    <servlet>
    <servlet-name>UploadServlet</servlet-name>
    <servlet-class>UploadServlet</servlet-class>
    <init-param>
    <param-name>SaveDirectory</param-name>
    <param-value>C:\Homeworks\</param-value>
    </init-param>
    <init-param>
    <param-name>Proffesors</param-name>
    <param-value>Clayton,Douglass,Guruvado</param-value>
    </init-param>
    </servlet>
    <security-constraint>
    <display-name>Protected Homework Upload</display-name>
    <web-resource-collection>
    <web-resource-name>Protected Area</web-resource-name>
         <!-- Define the context-relative URL(s) to be protected -->
    <!--<url-pattern>/servlet/Upload</url-pattern>-->
         <url-pattern>/servlet/UploadServlet</url-pattern>
         <!-- If you list http methods, only those methods are protected -->
         <http-method>DELETE</http-method>
    <http-method>GET</http-method>
    <http-method>POST</http-method>
         <http-method>PUT</http-method>
    </web-resource-collection>
    <auth-constraint>
    <!-- Anyone with one of the listed roles may access this area -->
    <role-name>student</role-name>
    <role-name>proffesor</role-name>
    </auth-constraint>
    </security-constraint>
    <login-config>
    <auth-method>FORM</auth-method>
    <realm-name>Example Form-Based Authentication Area</realm-name>
    <form-login-config>
    <form-login-page>/login.jsp</form-login-page>
    <form-error-page>/error.jsp</form-error-page>
    </form-login-config>
    </login-config>
    </web-app>
    Thank you very much for your time and advise. I appreciate it very much
    Martin

    hi,slice
    I donot really find exactly what is wrong in your config file. But I have some suggestions:
    1.Please use servlet URL mapping in "servlet" tag (for example: "/security/upload") instead of using default servlet URL(just like "/servlet/UploadServlet").
    2. In the "url-pattern" tag inside "web-resource-name" ,please using "/security/*", if you are using my suggestion above.
    3.Make sure that your "login.jsp" page is in the right place of the application's doc-root.
    Make a try and good luck!
    Wang Yu
    Developer Technical Support
    Sun Microsystems
    http://sun.com/developers/support

  • Web.xml file problem in tomcat

    Hi i need help in this... its urgent
    currently i just subscribe to a web hosting site and i need to start the private tomcat in the web server..
    The followings are the instructions and i have follow them but i do not know how to create a web.xml file to store in the folder indicated for example a HelloServlet that im testing :
    To setup servlet, you need to configure servlet into the file web.xml which needs to be placed in /var/www/html/WEB-INF directory.
    www root directory or webapps:/var/www/htm
    Classes directory located in: /var/www/html/WEB-INF/Classes/
    There you will need to upload your Java class file.
    Our default url-mapping for servlet is: /servlet/*
    To check servlet in your browser: www.mydomain.net/servlet/HelloWorld
    Jsp Files - Upload anywhere in /var/www/html
    all the above steps are follow except the web.xml file which i suppose to write and store in the folder... but i actually try to write one but i still cannot load my servlet on the webpage... test on standalone tomcat works.
    pls help its urgent!!!

    first sorry about cross posting the subject. i didnt know i am not suppose to do that. i post in a few forums that are related to my topic. sorry
    The tomcat on the web server is of version Private J2EE / Tomcat 4.1.29 and the standalone tomcat i am using is also tomcat 4.1
    the web.xml in my standalone server in root/web-inf/ is as follows and it is configure for authentication purposes. It works together with the tomcat-users.xml located on conf directory
    <?xml version="1.0" encoding="ISO-8859-1"?>
    <!DOCTYPE web-app
    PUBLIC "-//Sun Microsystems, Inc.//DTD Web Application 2.3//EN"
    "http://java.sun.com/j2ee/dtds/web-app_2_3.dtd">
    <web-app>
    <security-constraint>
    <web-resource-collection>
    <web-resource-name>
    Restricted Area
    </web-resource-name>
    <url-pattern>/secure/*</url-pattern>
    </web-resource-collection>
    <auth-constraint>
    <role-name>manager</role-name>
    <role-name>tomcat</role-name>
    </auth-constraint>
    </security-constraint>
    <login-config>
    <auth-method>FORM</auth-method>
    <form-login-config>
    <form-login-page>/Login.html</form-login-page>
    <form-error-page>/Error.html</form-error-page>
    </form-login-config>
    </login-config>
         <security-role>
         <description>The Secure ROLE</description>
         <role-name>manager</role-name>
              <role-name>tomcat</role-name>
         </security-role>
    <security-constraint>
    <web-resource-collection>
    <web-resource-name>
    Restricted Area
    </web-resource-name>
    <url-pattern>/Customer/*</url-pattern>
    </web-resource-collection>
    <auth-constraint>
    <role-name>customer</role-name>
    <role-name>tomcat</role-name>
    </auth-constraint>
    </security-constraint>
    <login-config>
    <auth-method>FORM</auth-method>
    <form-login-config>
    <form-login-page>/Login.html</form-login-page>
    <form-error-page>/Error.html</form-error-page>
    </form-login-config>
    </login-config>
         <security-role>
         <description>The Secure ROLE</description>
         <role-name>customer</role-name>
              <role-name>tomcat</role-name>
         </security-role>
    </web-app>
    using this web.xml, my stanalone web pages works fine for all servlets and jsp. however if i copy this over to the web server, i still cannot load my servlets and jsp. moreover it doesnt work for authentication purpose anymore. i don't know why too
    i have try the codes you write before and it also doesnt work
    the problem is i cannot get the support form the web hosting site. This is the link that suppose to teach me but it doesn not tell me how to configure my web.xml
    https://www.eroute.net/JSPSupport.htm

  • Servlet Filters not following filter mapping in web.xml

    Hi Experts,
    I have two Servlet filters SetCharacterEncodingFilter and LASBackOfficeAuthFilter which are mapped in such a way that SetCharacterEncodingFilter gets called before LASBackOfficeAuthFilter(This is done in web.xml using filter mapping).
    I have code in SetCharacterEncodingFilter init() method to read and store the few parameters from a table , it also creates a new thread to montior db changes in these paremeters . LASBackOfficeAuthFilter reads a those parameters set after SetCharacterEncodingFilter initialization. This is failing in Weblogic Version: 10.3.2.0 because the LASBackOfficeAuthFilter init method gets called before SetCharacterEncodingFilter init method.
    This is filter mapping order is working fine In Web Sphere and Tomcat 6 .
    The web.xml filter mapping is given below .
         <filter>
              <filter-name>LASBackOfficeAuthFilter</filter-name>
              <display-name>Scheduler Authentication Filter</display-name>
              <filter-class>com.scheduler.servlet.backoffice.LASBackOfficeAuthFilter</filter-class>
              <!-- parameters specifying BackOffice servlet path translation -->
              <init-param>
                   <param-name>PathLogin</param-name>
                   <param-value>/login</param-value>
              </init-param>
              <init-param>
                   <param-name>PathLogout</param-name>
                   <param-value>/logout</param-value>
              </init-param>
              <init-param>
                   <param-name>PathNotifications</param-name>
                   <param-value>/secure/notifications</param-value>
              </init-param>
              <init-param>
                   <param-name>PathSchedulerActions</param-name>
                   <param-value>/secure/schedactions</param-value>
              </init-param>
              <init-param>
                   <param-name>PathPing</param-name>
                   <param-value>/secure/ping</param-value>
              </init-param>
         </filter>
         <!--
              this filter sets character encoding and mimetype for requests and
              responses
         -->
         <filter>
              <filter-name>SetCharacterEncodingFilter</filter-name>
              <display-name>Scheduler Character Encoding Filter</display-name>
              <filter-class>com.scheduler.servlet.backoffice.SetCharacterEncodingFilter</filter-class>
         </filter>
         <!-- correlate servlets and filters -->
         <filter-mapping>
              <filter-name>SetCharacterEncodingFilter</filter-name>
              <servlet-name>LASBackOfficeServlet</servlet-name>
         </filter-mapping>
         <filter-mapping>
              <filter-name>LASBackOfficeAuthFilter</filter-name>
              <servlet-name>LASBackOfficeServlet</servlet-name>
         </filter-mapping>
    Any help on this would be very much appreciated .
    Regards
    Dinesh

    No, regular expressions are not supported. You can specify the mapping with extensions, or with paths, not at the same time in the same mapping specification. However, you can specify two servlet mappings, one with extension, and one with path.
    The exact wording from the spec (2.4) is as follows:
    In the Web application deployment descriptor, the following syntax is used to define
    mappings:
    • A string beginning with a ‘/’ character and ending with a ‘/*’ suffix is used
    for path mapping.
    • A string beginning with a ‘*.’ prefix is used as an extension mapping.
    • A string containing only the ’/’ character indicates the "default" servlet of
    the application. In this case the servlet path is the request URI minus the context
    path and the path info is null.
    • All other strings are used for exact matches only.

  • How to run java servlet without using Web.xml?

    How to run servlet without using Web.xml? From a book, I know that web.xml descriptor is optional, but the book doesn't tell us how to run java servelet without web.xm descriptor. So how to do that? Thanks a lot.

    How to run servlet without using Web.xml?But Tomcat now uses a web.xml for its global server-wide configuration.
    If you'd like to invoke a servlet with:
    http://host/servlet/ServletName
    you have to enable the invoker servlet.
    [from an HTML]
      <FORM METHOD="POST" ACTION="/servlet/HGrepSearchSJ">
    [from resin.conf of Resin Web Server 2.1.12]
      <!--
         - The "invoker" servlet invokes servlet classes from the URL.
         - /examples/basic/servlet/HelloServlet will start the HelloServlet
         - class.  In general, the invoker should only be used
         - for development, not on a deployment server, because it might
         - leave open security holes.
        -->
      <servlet-mapping url-pattern='/servlet/*' servlet-name='invoker'/>
    [from TOMCAT5.0.19/conf/web.xml, a global server-wide web.xml file]
      <!-- The "invoker" servlet, which executes anonymous servlet classes      -->
      <!-- that have not been defined in a web.xml file.  Traditionally, this   -->
      <!-- servlet is mapped to URL pattern "/servlet/*", but you can map it    -->
      <!-- to other patterns as well.  The extra path info portion of such a    -->
      <!-- request must be the fully qualified class name of a Java class that  -->
      <!-- implements Servlet (or extends HttpServlet), or the servlet name     -->
      <!-- of an existing servlet definition.     This servlet supports the     -->
      <!-- following initialization parameters (default values are in square    -->
      <!-- brackets):                                                           -->
      <!--                                                                      -->
      <!--   debug               Debugging detail level for messages logged     -->
      <!--                       by this servlet.  [0]                          -->
        <servlet>
            <servlet-name>invoker</servlet-name>
            <servlet-class>
              org.apache.catalina.servlets.InvokerServlet
            </servlet-class>
            <init-param>
                <param-name>debug</param-name>
                <param-value>0</param-value>
            </init-param>
            <load-on-startup>2</load-on-startup>
        </servlet>
    ---comment out below----------------------------------------------------------
        <!-- The mapping for the invoker servlet -->
    <!--
        <servlet-mapping>
            <servlet-name>invoker</servlet-name>
            <url-pattern>/servlet/*</url-pattern>
        </servlet-mapping>
    -->

  • Tomcat web.xml "display-name" using flex.messaging.MessageBrokerServlet

           Hello,
    When my web application starts with the BlazeDS servlet flex.messaging.MessageBrokerServlet defined in the web.xml we have an error because in the display-name defined at top level in web.xml we have some text containing character ':'. The error is traced to inside the function
             flex.management.BaseControl.getObjectName()
    Which gets the object name, and this function calls
       BaseControl.getApplicationId()
    which finally calls
    ServletConfig.getServletContext().getServletContextName()
    This will return or display-name from the web.xml with all  it's text. This text contains among other characters the character ':'.  We use this tag for the display in the Tomcat Manager to see version  number and other of deployed project.
    After retrieving this name it is appended in the getObjectName() function to a buffer, this StringBuffer that already contains flex.runtime. and  now this name is appended (still with all that we are using for Tomcat  Manager with ':' character and other). After the name, other things are  appended. Our problem is that, after constructing this StringBuffer an instance of javax.management.ObjectName is created. In it's constructor it takes a String name  as input. This String is parsed in base of characters ':', '*', '?',  '\n' and so on, and since we have some of these characters in our  display-name it all goes wrong.
       My question is, if this is a bug, a limitation or if it is documented that using flex.messaging.MessageBrokerServlet we can not use certain characters in the display-name of the web.xml?
       Greetings, Tim
       We are using
    Tomcat 5.5.23
    Jdk 1.5.0_14
    blazeds-src-4.0.1.17657
    part of web.xml
         <display-name>
             Version: 1.10.0.3 (01/02/2011), Environment development, AGP:  10.220.6.8:1557/AGPSVI, AGP_STAGE: host 10.220.6.8:1557/AGPSVI
         </display-name>
         <description>IMPRESA progetto con undergroung</description>
         <listener>
             <listener-class>flex.messaging.HttpFlexSession</listener-class>
         </listener>
         <servlet>
             <servlet-name>MessageBrokerServlet</servlet-name>
             <display-name>MessageBrokerServlet</display-name>
             <servlet-class>flex.messaging.MessageBrokerServlet</servlet-class>
             <init-param>
                 <param-name>services.configuration.file</param-name>
                 <param-value>/WEB-INF/flex/services-config.xml</param-value>
            </init-param>
             <load-on-startup>1</load-on-startup>
         </servlet>

    I have found that this is a bug and there is an issue open at the "Adobe Bug and Issue Management System", BLZ-617. I don't know if work is in progress, but when that issue is closed the problem will be solved.
      Greetings, Tim

  • Init-params in web.xml are not loaded (Tomcat 4)

    Hello all...
    I register a servlet in webapps/<my-servlet>/WEB-INF/web.xml file, and pass 1 <init-param> tag. The file gets parsed (I know because when I made errors tomcat complained during initialization). However, when in the init method of the servlet I try to access this parameter, its not there. In fact, the servlet has NO init params at all.
    =================================================
    I have the following web.xml file
    <?xml version="1.0" encoding="ISO-8859-1"?>
    <!DOCTYPE web-app
    PUBLIC "-//Sun Microsystems, Inc.//DTD Web Application 2.3//EN"
    "http://java.sun.com/dtd/web-app_2_3.dtd">
    <web-app>
    <servlet>
    <servlet-name>XServlet</servlet-name>
    <servlet-class>com.fxcm.xml.xengine.xdas.XServlet</servlet-class>
    <init-param>
    <param-name>xengine.configFile</param-name>
    <param-value>c:/projects/re/das.config/config.xng</param-value>
    </init-param>
    </servlet>
    <servlet-mapping>
         <servlet-name>XServlet</servlet-name>
         <url-pattern>/xservlet</url-pattern>
    </servlet-mapping>
    </web-app>
    =======================================================
    I have the following servlet
    * XServlet.java
    * Created on May 6, 2002, 1:17 PM
    package com.fxcm.xml.xengine.xdas;
    import javax.servlet.*;
    import javax.servlet.http.HttpServlet;
    import java.io.IOException;
    import java.io.PrintWriter;
    import javax.servlet.ServletException;
    import javax.servlet.http.HttpServletRequest;
    import javax.servlet.http.HttpServletResponse;
    import javax.servlet.ServletConfig;
    import java.util.Enumeration;
    import com.fxcm.xml.xengine.XEngine;
    public class XServlet extends HttpServlet{
    /** Initiates new XServlet */
    public void init(ServletConfig config)
    throws ServletException
              for (Enumeration e = config.getInitParameterNames(); e.hasMoreElements();){
    //This statement never gets printed because the loop never enters here since there are no init parameters
                   System.out.println(e.nextElement());
    super.init(config);
    String str = config.getInitParameter("xengine.configFile");
    System.out.println(str);
    XEngine.init(str.trim()); //This line throws NullPointer, because str is null since there are no initParameters.
    public void doPost(HttpServletRequest req, HttpServletResponse res)
    throws ServletException, IOException{
    // res.setContentType( );
              System.out.println("Got post request in XServlet");
    PrintWriter out = res.getWriter();
    out.println(XEngine.process(req.getInputStream()));
    out.flush();
    out.close();
    ================================================================
    I get the follwoing error in the browser:
    type Exception report
    message Internal Server Error
    description The server encountered an internal error (Internal Server Error) that prevented it from fulfilling this request.
    exception
    java.lang.NullPointerException
         at com.fxcm.xml.xengine.xdas.XServlet.init(Unknown Source)
         at org.apache.catalina.core.StandardWrapper.loadServlet(StandardWrapper.java:918)
         at org.apache.catalina.core.StandardWrapper.allocate(StandardWrapper.java:655)
         at org.apache.catalina.servlets.InvokerServlet.serveRequest(InvokerServlet.java:400)
    Please help.
    Thank you,
    Elana

    I know what the problem is. If you call servlet with the default URL (http://host/app/servlet/package.Servlet) than Servlet DOES NOT read init parameters. I don't know why it was designed this way.
    To make servlet read init parameters, you have to assign it a name and then call it with that name, like this:
    <servlet>
    <servlet-name>ServletName</servlet-name>
    <servlet-class>package.ServletClass</servlet-class>
    </servlet>
    <servlet-mapping>
    <servlet-name>ServletName</servlet-name>
    <url-pattern>/app/path/ServletName</url-pattern>
    </servlet-mapping>
    You can then call servlet using path specified in url-pattern and read init parameters in the normal way.

  • Configure web.xml in tomcat for sub class folders

    Hi Guys,
    I am using a tomcat server. I have a package file and have created a dir in webapps called "testApp". In the classes folder, I have another folder called "CheckServlets" and within this I have 2 servlets. How can I configure my web.xml properties to get the servlets to load in a browser. I have tried the following but it doesnt work:
    <servlet>
    <servlet-name>test</servlet-name>
    <servlet-class>/CheckServlets/HelloServlet/</servlet-class>
    </servlet>
    <servlet-mapping>
    <servlet-name>test</servlet-name>
    <url-pattern>/hello/test/</url-pattern>
    </servlet-mapping>
    So I try http://localhost:8080/testApp/hello/test but that doesnt work.

    I presume your servlet is in a package called CheckServlets?
    ie it starts something like
    package CheckServlets
    public class HelloServlet extends HttpServlet {
    }Remove the / signs from the servlet-class. This attribute should be a fully qualified class name. Like java.lang.String, or com.mypackage.servlet.MyServlet
    Given the above servlet in a package, it should be
    <servlet>
      <servlet-name>test</servlet-name>
      <servlet-class>CheckServlets.HelloServlet</servlet-class>
    </servlet>Cheers,
    evnafets

  • Tomcat 404 error until I apply this change to my web.xml mapping

    What is the purpose of the /servlet/ portion of the url-pattern in the servlet mapping element below.
    If I use the first few lines I get a 404 class not found error
    If I include /servlet/ in the url-pattern element then my app works fine ?????
    //Does not work
    <servlet-mapping>
    <servlet-name>login</servlet-name>
    <url-pattern>com.onjava.login</url-pattern>
    </servlet-mapping>
    //works !!
    <servlet-mapping>
    <servlet-name>login</servlet-name>
    <url-pattern>/servlet/com.onjava.login</url-pattern>
    </servlet-mapping>

    If the first mapping doesn't work and the second mapping works then my guess is that neither mapping is working. What may be happening is the invoker servlet may be enabled and that would explain why the /servlet url works.
    The invoker servlet is set up in the conf/web.xml file. This servlet will invoke a particular servlet using the class name and the /servlet url. In newer versions of tomcat the invoker servlet id disabled by default.
    Now the question is why does the servlet mapping not work? What version of tomcat are you running? Can you post the entire web.xml?

  • Automate creation of web.xml file for tomcat 4.1.29

    hi , this is with ref to Tomcat 4.1.29, if i am correct, each Servlet in the application has to be mentioned in the web.xml file for the Tomcat to know about it. Is there any way to automate the creation of web.xml file , depending on the contents of the Servlet folder of the application. Any way to escape from writing each Servlet name in web.xml file.
    rc

    Hello,
    Maybe you should check if you can use Ant tool to do
    that. I am not sure if it can help u.
    Zeph.
    http://ant.apache.org/
    It will, specially if used in conjunction with XDoclets :
    http://xdoclet.sourceforge.net/
    XDoclet has Ant tasks to generate web.xml files.

  • Reload web-inf/web.xml file without restarting tomcat

    Please help me if any one have a solution .
    I am doing development in jsp, servlet. I am using tomcat5 as a webserver.
    i want to reload web-inf/web.xml file without restarting tomcat.

    From the tomcat admin page you can stop/start and refresh individual applications. See the tomcat documentation. Which, when you have a question about tomcat, you should always do first.

  • Running servlets not described in web.xml (tomcat-4.1.24)

    Is it compulsory to have a entry in the web.xml to run a servlet in tomcat-4.x. In tomcat 3.x it was not required. If it is not a must how to enable that??
    thanx in advance
    Binny

    i had completly forgotten i could just place a servlet in the web-inf/classes. after using jsp for so long, some things just get lost.
    what im wondering now is if i can have other directories inside the classes directory and still be called while not being registered in the deployment descriptor ? in otherwords, lets say i have several servlets organized into packages. can i call a servlet thats in a particular package if i fully qualify the class ? guess ill have to try

  • Security constraint in Web.xml of tomcat

    Hi
    I have a web-application running on tomcat . Inside the context folder i have several directories having some pre-defined configuration files . But the user is able to directly access them by typing the path including the fileName in the URL ( I have disabled the listings property however)
    How can i prevent accessing the specific files .... I tried using
    <security-constraint>
    <display-name>Security constarint</display-name>
    <web-resource-collection>
    <web-resource-name>Java Application</web-resource-name>
    <url-pattern>/folder/*</url-pattern>
    <auth-constraint>
    <role-name>tomcat</role-name>
    </auth-constraint>
    </web-resource-collection>
    <auth-constraint>
    <role-name>tomcat</role-name>
    </auth-constraint>
    </security-constraint>
    <login-config>
    <auth-method>BASIC</auth-method>
    <realm-name>OnJava Application</realm-name>
    </login-config>
    This seems to be working fine , but when the user enters the wrong security info thrice , 401 error page is coming instead i want my custom page . Hence i configured an error page for 401 code which overwrited the earlier behavaiour ie.. that BASIC authentication popup is not coming
    Can any one let me know how to go about this

    Hi ,
    I have tried adding the following into web.xml but the security feature just doesnt work and the user can go to any page without any restriction.
    <security-constraint>
    <web-resource-collection>
    <web-resource-name>Declarative Security Test</web-resource-name>
    <url-pattern>/SuperServlet</url-pattern>
    <url-pattern>/*</url-pattern>
    <http-method>post</http-method>
    <http-method>get</http-method>
    </web-resource-collection>
    <user-data-constraint>
         <transport-guarantee>CONFIDENTIAL</transport-guarantee>
         </user-data-constraint>
    <auth-constraint>
    <role-name>guest</role-name>
    <role-name>member</role-name>
    </auth-constraint>
    </security-constraint>
    <login-config>
    <auth-method>BASIC</auth-method>
    </login-config>
    <security-role>
    <role-name>guest</role-name>
    <role-name>member</role-name>
    </security-role>
    The roles mentioned above have been added correctly into tomcat-users.xml..The version of tomcat I am using is tomcat5.0.28.Please help.

  • About setting the web.xml for Tomcat

    for a project, I use more than one servlet. So i set the
    <servlet>
    <servlet-name>servlet1</servlet-name>
    <servlet-class>servlet1</servlet-class>
    <servlet-name>servlet2</servlet-name>
    <servlet-class>servlet2</servlet-class>
    </servlet>
    <servlet-mapping>
    <servlet-name>servlet1</servlet-name>
    <url-pattern>/servlet1</url-pattern>
    <servlet-name>servlet2</servlet-name>
    <url-pattern>/servlet2</url-pattern>
    <servlet-mapping>
    but only the last servlet is there for the web server to find and call. I don't know what's the problem. Maybe I don't set other parameters in some files of Tomcat?
    Thanks for your reply.

    <?xml version="1.0" encoding="ISO-8859-1"?>
    <!--
    This is the web-app configurations that allow w3prj to work under
    Apache Tomcat.
    -->
    <!DOCTYPE web-app
    PUBLIC "-//Sun Microsystems, Inc.//DTD Web Application 2.2//EN"
    "http://java.sun.com/j2ee/dtds/web-app_2.2.dtd">
    <web-app>
    <servlet>
    <servlet-name>JDBC</servlet-name>
    <servlet-class>TestServlet</servlet-class>
    </servlet>
    <servlet>
    <servlet-name>login</servlet-name>
    <servlet-class>LoginServlet</servlet-class>
    </servlet>
    <servlet>
    <servlet-name>worker</servlet-name>
    <servlet-class>workerServlet</servlet-class>
    </servlet>
    <servlet-mapping>
    <servlet-name>JDBC</servlet-name>
    <url-pattern>/TestServlet</url-pattern>
    <servlet-name>login</servlet-name>
    <url-pattern>/LoginServlet</url-pattern>
    <servlet-name>worker</servlet-name>
    <url-pattern>/worker</url-pattern>
    </servlet-mapping>
    </web-app>

Maybe you are looking for

  • GL Master

    Hello Gurus, I have created one GL master under non current assets group. when i created this gl I have chosen profit&loss statement a/c. System saved this account without any warning message. I think system should have display an error message. Plea

  • Scan a positive transparency with an Epson Perfection 1200 scanner?

    I cannot get Image Capture to scan a positive transparency.  The overview scan keeps cancelling. I'm using an Epson Perfection 1200 scanner.   It works in the flatbed mode, e.g. scanning a photo. What can I do to scan a transparency?

  • APPLE Macbook error 2869 ¿error with new MAC OS X Leopard?

    ENGLISH In the new aluminium Mackbook, when installing the drivers from disk MAC OS X for windows XP SP2, it always appears error 2869. This error is unknown at Support service of APPLE 900 150 503 and also in every cities in Spain, and England, they

  • Jeode 255 char. limit

    I have the Jeode EVM on my PDA. I have to execute a code for which I have to list 9 jar files. The entire .ink file is around 400 characters. Could someone please tell me if there is a way to increase the 255 character limit or if I could change the

  • Inconsistent IO Wait Time

    I'm trying to comprehend why oracle seems to more efficiently table scan a table when it has more rows than when it has less. I have run a bunch of queries against the database, and I have tracked their wait events stats. And it seems that this ratio