The security mechanism does not want the user to go directly to the login page. What you need to do is make sure that the user was forwarded to the login page by the application server. I have seen people put scriptlets in the login page which check to see if the session is new and then redirect to a protected resource if it is. This will cause the servlet container to then redirect back to the login page. What I did was make my page protected and then it forwards to the login page immediately if the user is not logged in. Hope that helps.
View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=3850401#3850401 Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=3850401 ------------------------------------------------------- This SF.net email is sponsored by: IT Product Guide on ITManagersJournal Use IT products in your business? Tell us what you think of them. Give us Your Opinions, Get Free ThinkGeek Gift Certificates! Click to find out more http://productguide.itmanagersjournal.com/guidepromo.tmpl _______________________________________________ JBoss-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/jboss-user
