I solved my problem, I changed my web.xml to the following: <security-constraint> <web-resource-collection> <web-resource-name>PartNos</web-resource-name> <url-pattern>/TNR/*</url-pattern> <http-method>GET</http-method> <http-method>POST</http-method> </web-resource-collection> <auth-constraint> <role-name>admin</role-name> <role-name>secureconn</role-name> </auth-constraint> <user-data-constraint> <transport-guarantee>CONFIDENTIAL</transport-guarantee> </user-data-constraint> </security-constraint>
<security-role> <role-name>converter-api</role-name> </security-role> <security-role> <role-name>secureconn</role-name> </security-role> <security-role> <role-name>admin</role-name> </security-role> <security-constraint> <web-resource-collection> <web-resource-name>PartNoSecure</web-resource-name> <url-pattern>/TNR/*</url-pattern> </web-resource-collection> <auth-constraint> <role-name>secureconn</role-name> <role-name>admin</role-name> </auth-constraint> </security-constraint> <login-config> <auth-method>CLIENT-CERT</auth-method> </login-config> Thank your all for your advice! Best regards, Maximilian Schmidt --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org