The users of tomcat server The users of a specific web-app
The users of a virtual host The users of a specific web-app are also the users of the host. The users of the host might not be the users of a specific web-app. The users of this host might be shared with other virtual host. Furthermore, the users of tomcat server should be independent from the users of hosts. At present, they are all mixed up. I hope that we could implemented a UserManager/UserModule for tomcat. In the UserManager/UserModule, a subject doesn't have to have a username. When it uses a certificate, we could map the certificate to a role directly. We might have a specific map to map all certificate to a lowest level role. When a subject doesn't use a certificate, it will be assigned a username, a password, and the roles it can act as. At present, the context management in the admin tool includes Resources, Context Properties, Loader Properties, Session Manager Properties. It doesn't access web.xml at all. I hope it access web.xml, and it includes a more advanced UserManager too. [EMAIL PROTECTED] --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]