web.xml Clarifications
Chapter 2 Web Applications 15
If you add or remove a web application, servlet, or JSP, you must restart the server.
web.xml Clarifications
This section provides clarifications for using the web.xml file with iPlanet Web
Server 6.0.
login-config
If there is a security constraint and no login-config element is present, or if no
auth-method is specified, the auth-method defaults to BASIC. For BASIC
authentication, if no
realm-name is specified, the realm-name defaults to iWS Web
Container
. If auth-method is not FORM, the form-login-config element is
ignored even if specified.
security-constraint
if no url-pattern is specified, no constraints are applied. If no http-method is
specified in a
web-resource-collection subelement, the constraint is applied to
all HTTP methods. If no
transport-guarantee is specified in a
user-data-constraint subelement, it defaults to NONE. If no auth-constraint
subelement is present or if no
role-name is specified, no user is allowed any access.
session-timeout
If session-timeout is specified in web.xml, this timeout value overrides any
timeOut parameter value specified in the session-manager element in
web-apps.xml. This override does not apply when you configure a single session
manager that all web applications in a virtual server use. It only applies when you:
• Do not configure a session manager for all web applications in a virtual server
(the default behavior) Each web application has its own session manager.
• Configure a web-application-specific session manager in addition to the
virtual-server-wide one. In that case, only the web-application-specific session
manager’s
timeOut value is overridden.
Note that
session-timeout value is specified in minutes while session-manager
timeOut parameters are specified in seconds.
For more information about session managers, see Chapter 6, “Session Managers.”
Comentarios a estos manuales