Re: servlet mappings and security constraints with j_security_check

2003-10-13 Thread Matthew Do
How do I delete my name from Tomcat use list? Because I am trying use TOMCAT but it 
does not work well for me at this time. 

Have a good day.

Matthew Do
Seattle City Light
[EMAIL PROTECTED]
(206) 733 - 9022

>>> [EMAIL PROTECTED] 10/13/03 09:26AM >>>
I am getting the familiar status 400 - invalid direct reference, and yet 
I am absolutely not surfing to the login page myself.

This is the page I am on:

https://localhost:8443/mywebapp/registerdone.do 

and this is the link I am using:

https://localhost:8443/mywebapp/private/editprofile.do 

This mapping is protected by my security constraints (/private/) and so 
tomcat invokes the j_security_check form, and on submission tomcat gives 
me the 400 status invalid direct reference.

I have the login form and the login error form SSL encrypted.

It works fine for non-HTTPS links.

Here's the web.xml snippet:

   
 
   SSL 4 Login
   /ssllogin.html
   /sslerror.html
 
 
   SSL required
   CONFIDENTIAL
 
   
   
 
   Login
   /private/*
 
 
   user
   admin
 
 
   SSL not required
   NONE
 
   
   
 FORM
 BlackSailRealm
 
   /ssllogin.html
   /sslerror.html
 
   
   
 user
   
   
 admin
   

Does anyone know what I am doing wrong, or has seen this error too?

Thanks
Adam

-- 
struts 1.1 + tomcat 5.0.12 + java 1.4.2
Linux 2.4.20 RH9


-
To unsubscribe, e-mail: [EMAIL PROTECTED] 
For additional commands, e-mail: [EMAIL PROTECTED] 



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



servlet mappings and security constraints with j_security_check

2003-10-13 Thread Adam Hardy
I am getting the familiar status 400 - invalid direct reference, and yet 
I am absolutely not surfing to the login page myself.

This is the page I am on:

https://localhost:8443/mywebapp/registerdone.do

and this is the link I am using:

https://localhost:8443/mywebapp/private/editprofile.do

This mapping is protected by my security constraints (/private/) and so 
tomcat invokes the j_security_check form, and on submission tomcat gives 
me the 400 status invalid direct reference.

I have the login form and the login error form SSL encrypted.

It works fine for non-HTTPS links.

Here's the web.xml snippet:

  

  SSL 4 Login
  /ssllogin.html
  /sslerror.html


  SSL required
  CONFIDENTIAL

  
  

  Login
  /private/*


  user
  admin


  SSL not required
  NONE

  
  
FORM
BlackSailRealm

  /ssllogin.html
  /sslerror.html

  
  
user
  
  
admin
  
Does anyone know what I am doing wrong, or has seen this error too?

Thanks
Adam
--
struts 1.1 + tomcat 5.0.12 + java 1.4.2
Linux 2.4.20 RH9
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]