I solved my problem, I changed my web.xml to the following:

<security-constraint>
        <web-resource-collection>
            <web-resource-name>PartNos</web-resource-name>
            <url-pattern>/TNR/*</url-pattern>
            <http-method>GET</http-method>
            <http-method>POST</http-method>
        </web-resource-collection>
        <auth-constraint>
            <role-name>admin</role-name>
            <role-name>secureconn</role-name>
        </auth-constraint>
        <user-data-constraint>
            <transport-guarantee>CONFIDENTIAL</transport-guarantee>
        </user-data-constraint>
    </security-constraint>

    <security-role>
        <role-name>converter-api</role-name>
    </security-role>
    <security-role>
        <role-name>secureconn</role-name>
    </security-role>
    <security-role>
        <role-name>admin</role-name>
    </security-role>

    <security-constraint>
        <web-resource-collection>
            <web-resource-name>PartNoSecure</web-resource-name>
            <url-pattern>/TNR/*</url-pattern>
        </web-resource-collection>
        <auth-constraint>
            <role-name>secureconn</role-name>
            <role-name>admin</role-name>
        </auth-constraint>
    </security-constraint>

    <login-config>
        <auth-method>CLIENT-CERT</auth-method>
    </login-config>

Thank your all for your advice!

Best regards,
Maximilian Schmidt

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Reply via email to