Re: Realm SSL : issue when logout

2011-09-27 Thread Chema
Why getContext(/app) ?? HTTP Sessions are local to each web application. If protected.html belongs to a different web application, it would not (and cannot) know that you invalidated session in this webapp. Hi You're right: protected.html belongs another web application. But my Tomcat is

Re: Realm SSL : issue when logout

2011-09-26 Thread Konstantin Kolinko
2011/9/7 Chema demablo...@gmail.com: ServletContext context = this.getServletContext().getContext(/app); if (context != null)        response.sendRedirect(context.getContextPath() + /protected.html ); I hoped that login.html was return but protected.html is Why getContext(/app) ?? HTTP

Realm SSL : issue when logout

2011-09-07 Thread Chema
Hello: I've got a web application running on Tomcat 7.0.16 It uses realm authentication to validate users ( FORM login method with a custom login page named login.html) and it's secured by SSL with security-constraint web-resource-collection web-resource-namessl/web-resource-name

Re: Realm SSL : issue when logout

2011-09-07 Thread Mark Thomas
On 07/09/2011 12:20, Chema wrote: Hello: I've got a web application running on Tomcat 7.0.16 It uses realm authentication to validate users ( FORM login method with a custom login page named login.html) and it's secured by SSL with security-constraint web-resource-collection

Re: Realm SSL : issue when logout

2011-09-07 Thread Chema
Thanks but that didn't work for me I've got Connector SSLEnabled=true clientAuth=false keystoreFile=C:\keystore.jks keystorePass=tomcat maxThreads=150 port=8443 protocol=HTTP/1.1 scheme=https secure=true sslProtocol=TLS/ in my server.xml And I've created a SessionTrackingModeListener (just