-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Daniel,
Daniel Curran wrote: > Is there a way to authenticate the user without requiring a specific role? As has been previously stated, the <role-name>*</role-name> in your <auth-constraint> deployment descriptor will work; you just have to make sure that you have define all possible roles in the deployment descriptor using <security-role> elements. Otherwise, Tomcat has no idea which ones should be okay. The '*' is just an alias for "any role defined in the deployment descriptor". I don't think you can accept any arbitrary role. It has to be pre-defined (though it does not matter which one it matches). I think that means that you can't administer this particular part of your application through JDAP exclusively. :( - -chris -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFGQ0zZ9CaO5/Lv0PARAjC2AKCi66x/MA+T6nJOgxwTMri2+u9DCACgvCu8 e81L+OkigQBqo89+3ZXfKys= =Y1ec -----END PGP SIGNATURE----- --------------------------------------------------------------------- To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]