JAAS身份验证在Tomcat中不起作用

时间:2019-10-23 21:35:19

标签: jsp tomcat debian authorization jaas

我正在尝试在Tomcat服务器中配置示例配置案例。这些是我的设置:

web.xml文件

<?xml version="1.0" encoding="UTF-8"?>

<web-app xmlns="http://xmlns.jcp.org/xml/ns/javaee"
  xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
  xsi:schemaLocation="http://xmlns.jcp.org/xml/ns/javaee
                      http://xmlns.jcp.org/xml/ns/javaee/web-app_3_1.xsd"
  version="3.1"
  metadata-complete="true">

    <description>
    ID webapp
    </description>
    <display-name>ID webapp</display-name>

    <welcome-file-list>
        <welcome-file>index.jsp</welcome-file>
    </welcome-file-list>

    <security-constraint>
    <web-resource-collection>
        <web-resource-name>Admin</web-resource-name>
        <url-pattern>/secure/menu.jsp</url-pattern>
    </web-resource-collection>
    <auth-constraint>
         <role-name>tomcat</role-name>
         <role-name>role1</role-name>
    </auth-constraint>
    </security-constraint>

    <security-role>
         <role-name>tomcat</role-name>
    </security-role>
    <security-role>
         <role-name>role1</role-name>
    </security-role>

    <login-config>
      <auth-method>FORM</auth-method>
      <realm-name>Example Form-Based Authentication Area</realm-name>
      <form-login-config>
        <form-login-page>/secure/login.jsp</form-login-page>
        <form-error-page>/secure/error.jsp</form-error-page>
      </form-login-config>
    </login-config>
</web-app>

login.jsp文件

<html>
<head>
<title>Login Page for Examples</title>
<body bgcolor="white">
<form method="POST" action='<%= response.encodeURL("j_security_check") %>' >
  <table border="0" cellspacing="5">
    <tr>
      <th align="right">Username:</th>
      <td align="left"><input type="text" name="j_username"></td>
    </tr>
    <tr>
      <th align="right">Password:</th>
      <td align="left"><input type="password" name="j_password"></td>
    </tr>
    <tr>
      <td align="right"><input type="submit" value="Log In"></td>
      <td align="left"><input type="reset"></td>
    </tr>
  </table>
</form>
</body>
</html>

index.jsp

<%@ page language="java" contentType="text/html; charset=UTF-8" pageEncoding="UTF-8"%>

<html>
  <head>
      <meta http-equiv="content-type" content="text/html; charset=UTF-8">
      <title>Home Page</title>
  </head>
<body>
<div id="content">
<h1>Sistema de Gestión</h1>

<p>
<a href="secure/menu.jsp">Acceso al Sistema</a></p>
</div>
</body>
</html>

主要问题在于,即使表单也没有显示。当我单击index.jsp中的href链接时,Web浏览器中仅出现403-Forbidden错误。这是我的目录树。

enter image description here

我不知道如何继续在Web浏览器中获取凭据表格。我想念的是什么?

0 个答案:

没有答案