It's solved. The problem is that the ldap group name is in uppercase while the security-role as well as the auth-constraint have the name in lowercase.
Thanks. Le 27/09/2010 à 13:24, "Caldarale, Charles R" <chuck.caldar...@unisys.com> a écrit : >> From: Julio César Chaves Fernández [mailto:hent...@gmail.com] >> Subject: Re: Tomcat ldap authentication with 403 Forbidden error > >> The security-role is right below the security-constraint >> closing tag and above the login-config opening tag. > > Sorry, I missed it. However, the <security-role> element normally comes > /after/ <login-config>; not sure if that's required by the DTD, by your > ordering is unusual. > > - Chuck > > > THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY > MATERIAL and is thus for use only by the intended recipient. If you received > this in error, please contact the sender and delete the e-mail and its > attachments from all computers. > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org > For additional commands, e-mail: users-h...@tomcat.apache.org > --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org