Question

I have a Tomcat 5.5 server and i deploy a application on it. I have something like this http://tocatServer:8088/MyApp I want to limit the acces of users at this address by putting an username and password, but i need help. I know that i must add roles on web.xml, i try it but without success. If possible i want to send the URL like this http://username:password@tocatServer:8088/MyApp This url is sent from a java swing application for getting license from the serlet Thanks

Answer 1

• 限制使用Tomcat的网络应用程序(或链接器):

http://www.oapps/MyApp/WEB-INF/web.xml。

<security-constraint>
    <web-resource-collection>
        <web-resource-name>
            Entire webapp
        </web-resource-name>
        <url-pattern>/*</url-pattern>
    </web-resource-collection>
    <auth-constraint>
        <role-name>member</role-name>
    </auth-constraint>
</security-constraint>
<login-config>
    <!-- pay attention: BASIC in insecure, use it only for test, search for a more secure method -->
    <auth-method>BASIC</auth-method>
    <realm-name>Text reported when prompting the user for un and pw</realm-name>
</login-config>

和conf/tomcat-users.xml

<role rolename="member"/>
<user username="bubi" password="bubi" roles="member"/>

然后重载网络,并可能重新启用Tomcat。

资料来源: rel=“nofollow>。 O Reilly s Top Ten Tomcat Configuration Tips - 5. 基本要素组合:

关于第二个问题,我不知道如何实现这一目标。

友情链接