Added security role definition used in security constraint, should stop Tomcat from...
[java-idp.git] / webAppConfig / dist.idp-container-security-example.xml
1 <?xml version="1.0" encoding="ISO-8859-1"?>
2
3 <!DOCTYPE web-app
4     PUBLIC "-//Sun Microsystems, Inc.//DTD Web Application 2.3//EN"
5     "http://java.sun.com/dtd/web-app_2_3.dtd">
6
7 <web-app>
8
9         <context-param>
10         <param-name>IdPConfigFile</param-name>
11         <param-value>$IDP_HOME$/etc/idp.xml</param-value>
12     </context-param>
13
14     <servlet>
15         <servlet-name>IdP</servlet-name>
16         <display-name>Shibboleth Identity Provider</display-name>
17         <servlet-class>edu.internet2.middleware.shibboleth.idp.IdPResponder</servlet-class>
18     </servlet>
19
20     <servlet-mapping>
21         <servlet-name>IdP</servlet-name>
22         <url-pattern>/SSO</url-pattern>
23     </servlet-mapping>
24     <servlet-mapping>
25         <servlet-name>IdP</servlet-name>
26         <url-pattern>/AA</url-pattern>
27     </servlet-mapping>
28     <servlet-mapping>
29         <servlet-name>IdP</servlet-name>
30         <url-pattern>/Artifact</url-pattern>
31     </servlet-mapping>
32
33         <mime-mapping>
34                 <extension>css</extension>
35                 <mime-type>text/css</mime-type>
36         </mime-mapping>
37         
38         <security-constraint>
39                 <web-resource-collection>
40                         <web-resource-name>Shibboleth SSO Service</web-resource-name>
41                         <url-pattern>/SSO</url-pattern>
42                 </web-resource-collection>
43                 <auth-constraint>
44                         <role-name>tomcat</role-name>
45                 </auth-constraint>
46         </security-constraint>
47
48         <login-config>
49                 <auth-method>BASIC</auth-method>
50                 <realm-name>Shibboleth SSO Service</realm-name>
51         </login-config>
52
53         <security-role>
54         <description>default tomcat user</description>
55         <role-name>tomcat</role-name>
56     </security-role>
57 </web-app>