> From: Keith Masten [mailto:spmdt...@gmail.com] > Subject: Re: Securing A Directory Listing
> The realm definition for this tomcat instance is in > the server.xml. That partially answers the question. As the doc says: "You may nest a Realm inside any Catalina container Engine, Host, or Context." Where's yours? > Should the realm defined in the web.xml be > defined/referenced somewhere? Probably not, as long as you're comfortable with using the same <Realm> for all webapps that require authentication. > Just tried the basic setup again and no luck. What is meant by "no luck"? I don't recall any Tomcat error message with that phrasing... > When prompted, I should enter id - bob, pw - bob according > to my tomcat-users.xml, correct??? Correct, as long as the <auth-method> is BASIC. Might want to post your current WEB-INF/web.xml file. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org