웹 어플리케이션 인증

todo=login.jsp 소스

- Securing a Web Application in NetBeans IDE 6.5
Tomcat, GlassFish(Sun Java System Application Server)에서 BASIC, FORM 인증걸기

위 튜터리얼을 따라 해도 안되는데 원인은 tomcat-users.xml의 위치가 문제였다.
CATALINA_HOME/conf/tomcat-users.xml이 아니라 C:\Documents and Settings\USER\.netbeans\6.5\apache-tomcat-6.0.18_base\conf\tomcat-users.xml을 수정해야 한다.
그리고 rolename은 대소문자를 구별한다.
<?xml version='1.0' encoding='utf-8'?> <tomcat-users> <role rolename="manager"/> <role rolename="admin"/> <role rolename="Admin"/> <role rolename="User"/> <user username="ide" password="1111" roles="manager,admin,Admin"/> <user username="user" password="1111" roles="User"/> </tomcat-users> <?xml version="1.0" encoding="UTF-8"?> <web-app version="2.5" xmlns="http://java.sun.com/xml/ns/javaee" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd"> <session-config> <session-timeout>30</session-timeout> </session-config> <welcome-file-list> <welcome-file>index.jsp</welcome-file> </welcome-file-list> <security-constraint> <display-name>AdminConstraint</display-name> <web-resource-collection> <web-resource-name>AdminResource</web-resource-name> <description/> <url-pattern>/secureAdmin/*</url-pattern> <http-method>GET</http-method> <http-method>POST</http-method> <http-method>HEAD</http-method> <http-method>PUT</http-method> <http-method>OPTIONS</http-method> <http-method>TRACE</http-method> <http-method>DELETE</http-method> </web-resource-collection> <auth-constraint> <description/> <role-name>Admin</role-name> </auth-constraint> </security-constraint> <login-config> <auth-method>FORM</auth-method> <!-- BASIC --> <realm-name>file</realm-name> <form-login-config> <form-login-page>/login.jsp</form-login-page> <form-error-page>/loginError.html</form-error-page> </form-login-config> </login-config> <security-role> <description/> <role-name>Admin</role-name> </security-role> <security-role> <description/> <role-name>User</role-name> </security-role> </web-app>