Re: Problem in j_security_check

2006-02-03 Thread Prashant Saraf
filnaly it done thanks 4 all On 2/3/06, David Delbecq <[EMAIL PROTECTED]> wrote: > > Everything that correspond to the security-constraint on your web.xml is > 'protected' and need authentification. > When you are authenticated, field request.getRemoteUser() is not null > anymore. > Be carefull, >

Re: Problem in j_security_check

2006-02-03 Thread David Delbecq
Everything that correspond to the security-constraint on your web.xml is 'protected' and need authentification. When you are authenticated, field request.getRemoteUser() is not null anymore. Be carefull, /saraf/* in security constraint mean the secure area is http:///saraf/saraf/* If your secure

Re: Problem in j_security_check

2006-02-03 Thread Prashant Saraf
i think problem should be web.xml but still it gives following problem 1)You are logged in as remote user *null* in session * 2AD5AC97008551CE1EDD510E06AE6E1F *WHICH SHOULD NOT* * 2)how should tomcat know that protected is protected

Re: Problem in j_security_check

2006-02-03 Thread David Smith
Ok. login.jsp and error.jsp probably shouldn't be located in the protected folder. They are meant to be seen by the unauthenticated users. index.html definitely shouldn't link to login.jsp. Link it to protected/index.jsp instead. Your web.xml specs a url pattern of saraf/*. It should be /

Re: Problem in j_security_check

2006-02-03 Thread Prashant Saraf
still it not works it again focous on login page and if i again given detail gives following error The requested resource (/saraf/protected/j_security_check) is not available is this somthig related to web.xml or i have add some in config/server.xml

Re: Problem in j_security_check

2006-02-03 Thread David Delbecq
<-- that's the error put this instead Prashant Saraf a écrit : >as i am new i refer tomcat 's jsp-example >my structure of webapp > >webapps-| > | > saraf > | > index.html(which link to login.jsp) > | > protected >

Re: Problem in j_security_check

2006-02-03 Thread Prashant Saraf
as i am new i refer tomcat 's jsp-example my structure of webapp webapps-| | saraf | index.html(which link to login.jsp) | protected | login.jsp,error.jsp,index.jsp. my login.jsp

Re: Problem in j_security_check

2006-02-03 Thread David Smith
Can you post your login.jsp and let us know if this webapp is ROOT or not? --David Prashant Saraf wrote: i did same now it gives following error The requested resource (/saraf/protected/j_security_check) is not available. Do i need edit server.xml or any other file. On 2/3/06, David Smith <[E

Re: Problem in j_security_check

2006-02-03 Thread Prashant Saraf
i did same now it gives following error The requested resource (/saraf/protected/j_security_check) is not available. Do i need edit server.xml or any other file. On 2/3/06, David Smith <[EMAIL PROTECTED]> wrote: > > A quick overview of how authentication works might be helpful here. > Here's the s

Re: Problem in j_security_check

2006-02-03 Thread David Smith
A quick overview of how authentication works might be helpful here. Here's the sequence of events: 1) User requests a secured resource 2) The server internally redirects the user to login.jsp (note: the client NEVER directly requests login.jsp) 3) The user enters his/her credentials and submi

Re: Problem in j_security_check

2006-02-03 Thread David Delbecq
Once again, login form can only be accessed on demand by server. This mean access to you login.jsp will only occur as a result of a jsp forward internal to server at the first time you enter a secure area. You can't either access j_security_check either login.jsp directly. The required data in serv

Re: Problem in j_security_check

2006-02-03 Thread Prashant Saraf
i created a link which connect to login.jsp then also it not works:( On 2/3/06, David Delbecq <[EMAIL PROTECTED]> wrote: > > This mean you tried to access login form directly. This is not allowed > in j2ee specifications. > Access to login form should only be triggered by server on demand. You > c

Re: Problem in j_security_check

2006-02-03 Thread David Delbecq
This mean you tried to access login form directly. This is not allowed in j2ee specifications. Access to login form should only be triggered by server on demand. You can't force a login. To access login page, simply put a link to saraf/index.html (simple example) Prashant Saraf a écrit : >i have a

Problem in j_security_check

2006-02-03 Thread Prashant Saraf
i have a problem in Tomcat & jsp when i use j_security_check it gives me following error. The request sent by the client was syntactically incorrect (Invalid direct reference to form login page why this so my web.xml http://java.sun.com/xml/ns/j2ee " xmlns:xsi=3D"http://www.w3.org/2001/X