2013년 3월 20일 수요일

Tomcat URL 직접 접근 막기

o web.xml 설정


 <!-- Define a Security Constraint on this Application -->
 <security-constraint>
  <web-resource-collection>
   <web-resource-name>Resumes</web-resource-name>
   <url-pattern>/data/*</url-pattern>

   <url-pattern>/data2/*</url-pattern>
  </web-resource-collection>
  <auth-constraint>
   <!-- NOTE:  This role is not present in the default users file -->
   <role-name>admin</role-name>
  </auth-constraint>
 </security-constraint>

 <!-- Define the Login Configuration for this Application -->
 <login-config>
  <auth-method>BASIC</auth-method>
  <realm-name>인증창에 설명할 내용</realm-name>
<!--  <auth-method>FORM</auth-method>
  <form-login-config>
   <form-login-page>/admin/login.jsp</form-login-page>
   <form-error-page>/admin/fail.jsp</form-error-page>
  </form-login-config> -->

 </login-config>

 <!-- Security roles referenced by this web application -->
 <security-role>
  <description>
  The role that is required to log in to the Manager Application
  </description>
  <role-name>admin</role-name>
 </security-role>

 

댓글 없음: