Also meine web.xml sieht so aus:
<?xml version="1.0" encoding="UTF-8"?>
<web-app id="WebApp_ID" version="2.5" xmlns="http://java.sun.com/xml/ns/javaee" xmlns:web="http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd">
<display-name>Bugzilla-3.6.1</display-name>
<servlet>
<servlet-name>cgi</servlet-name>
<servlet-class>org.apache.catalina.servlets.CGIServlet</servlet-class>
<init-param>
<param-name>executable</param-name>
<param-value>C:\Perl\bin\perl.exe -wT</param-value>
</init-param>
<init-param>
<param-name>debug</param-name>
<param-value>0</param-value>
</init-param>
<init-param>
<param-name>cgiPathPrefix</param-name>
<param-value></param-value>
</init-param>
<init-param>
<param-name>passShellEnvironment</param-name>
<param-value>true</param-value>
</init-param>
</servlet>
<servlet-mapping>
<servlet-name>cgi</servlet-name>
<url-pattern>*.cgi</url-pattern>
</servlet-mapping>
<welcome-file-list>
<welcome-file>index.cgi</welcome-file>
</welcome-file-list>
<security-constraint>
<display-name>forbid localconfig</display-name>
<web-resource-collection>
<web-resource-name>localconfig</web-resource-name>
<url-pattern>/localconfig</url-pattern>
</web-resource-collection>
<auth-constraint>
<role-name>nix-gibtsnich</role-name>
</auth-constraint>
</security-constraint>
<security-constraint>
<display-name>forbid data directory</display-name>
<web-resource-collection>
<web-resource-name>data</web-resource-name>
<url-pattern>/data/*</url-pattern>
</web-resource-collection>
<auth-constraint>
<role-name>nix-gibtsnich</role-name>
</auth-constraint>
</security-constraint>
<security-constraint>
<display-name>forbid pm</display-name>
<web-resource-collection>
<web-resource-name>pm</web-resource-name>
<url-pattern>*.pm</url-pattern>
</web-resource-collection>
<auth-constraint>
<role-name>nix-gibtsnich</role-name>
</auth-constraint>
</security-constraint>
<security-constraint>
<display-name>forbid pl</display-name>
<web-resource-collection>
<web-resource-name>pl</web-resource-name>
<url-pattern>*.pl</url-pattern>
</web-resource-collection>
<auth-constraint>
<role-name>nix-gibtsnich</role-name>
</auth-constraint>
</security-constraint>
<security-constraint>
<display-name>forbid tmpl</display-name>
<web-resource-collection>
<web-resource-name>tmpl</web-resource-name>
<url-pattern>*.tmpl</url-pattern>
</web-resource-collection>
<auth-constraint>
<role-name>nix-gibtsnich</role-name>
</auth-constraint>
</security-constraint>
</web-app>
Das läuft, bis auf eine Sache: Ich kann keine Attachements zu Bugs hochladen :-(