https://bz.apache.org/bugzilla/show_bug.cgi?id=68495

--- Comment #9 from Noah Adams <nad...@cirqular.com> ---
Before you ask, I just replicated this on a clean install of 9.0.85

RHEL 9 JDK 8

I only edited tomcat_users.xml to uncomment the admin user and change the
password

Note that to get the sample app to work with the UserDatabase realm, I had to
edit the web.xml to change:  

<auth-constraint>
     <role-name>*</role-name>
</auth-constraint>

to:

<auth-constraint>
     <role-name>manager-gui</role-name>
</auth-constraint>

The cortrac-login realm name that I mentioned above doesn't seem to matter.

After this, the same steps as above replicate 

1) Navigate to sample/hello.jsp. It should prompt you to login.
2) After logging in, let the session expire. I set the session timeout to 1
minute for easy testing
3) Click the button on the page. If your session expired, you should be
prompted to login again and after you do, you will see the error.

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Reply via email to