DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://nagoya.apache.org/bugzilla/show_bug.cgi?id=5197>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=5197

Error Page 401 redirection avoids web resource authorization

           Summary: Error Page 401 redirection avoids web resource
                    authorization
           Product: Tomcat 4
           Version: 4.0.1 Final
          Platform: All
        OS/Version: Windows NT/2K
            Status: NEW
          Severity: Normal
          Priority: Other
         Component: Catalina
        AssignedTo: [EMAIL PROTECTED]
        ReportedBy: [EMAIL PROTECTED]


The presence of a 401 error redirection create some problem in user 
authorization; an access to a protected resource generate an Internal Error.
Here is a part of my web.xml file:

<error-page>
  <error-code>401</error-code>
  <location>/error_Unauthorized.jsp</location>
</error-page>
<security-constraint>
      <web-resource-collection>
         <web-resource-name>Protected Area</web-resource-name>
         <url-pattern>/login.jsp</url-pattern>
      </web-resource-collection>
      <auth-constraint>
         <role-name>Login</role-name>
      </auth-constraint>
</security-constraint>   

The presence of other kind of redirection (i.e. 404 error) doesn't generate 
the error. 
I recreated the error with both Memory and Jdbc Realms.

--
To unsubscribe, e-mail:   <mailto:[EMAIL PROTECTED]>
For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>

Reply via email to