It's solved. The problem is that the ldap group name is in uppercase while the 
security-role as well as the auth-constraint have the name in lowercase.

Thanks.

Le 27/09/2010 à 13:24, "Caldarale, Charles R" <chuck.caldar...@unisys.com> a 
écrit :

>> From: Julio César Chaves Fernández [mailto:hent...@gmail.com] 
>> Subject: Re: Tomcat ldap authentication with 403 Forbidden error
> 
>> The security-role is right below the security-constraint 
>> closing tag and above the login-config opening tag.
> 
> Sorry, I missed it.  However, the <security-role> element normally comes 
> /after/ <login-config>; not sure if that's required by the DTD, by your 
> ordering is unusual.
> 
> - Chuck
> 
> 
> THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY 
> MATERIAL and is thus for use only by the intended recipient. If you received 
> this in error, please contact the sender and delete the e-mail and its 
> attachments from all computers.
> 
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org
> 

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Reply via email to