I'm sorry to repost this question, but I wanted to add some more details:

I experimented by adding a test page to my protected directory that does not
use tiles.  When I accessed that test page, got a 404: Page cannot be found.
So then I changed the following in my web.xml file from:

   <login-config>
     <auth-method>FORM</auth-method>
     <form-login-config>
       <form-login-page>.login</form-login-page>
       <form-error-page>.loginFailed</form-error-page>
     </form-login-config>
   </login-config>

to:

  <login-config>
    <auth-method>FORM</auth-method>
    <form-login-config>
      <form-login-page>/jsp/login/login.jsp</form-login-page>
      <form-error-page>/jsp/login/login_failed.jsp</form-error-page>
    </form-login-config>
  </login-config>

Now when I access the test file (the one without tiles) I do get the login
form (just the form, not in my tiles).

Either way, when I access another file in the same directory that does use
tiles, I still get the 'response has already been committed' in the body
tile.  If I remove the "protection" from the directory, the page works just
fine.

Thanks in advance for any help,
Janice

----- Original Message ----- 
From: "Janice" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, January 23, 2004 2:23 PM
Subject: 'response has already been committed' on protected page when I
expected the login form?


> Hi Gang,
>
> I've started putting authentication into my struts app.  The problem I'm
> having is that as soon as I go to an area that is protected, I get the
> "response has already been committed" error in my body tile.  Could
somebody
> please tell me what I'm doing wrong?
>
> This is what I added to web.xml:
> "
>   <security-constraint>
>     <web-resource-collection>
>       <web-resource-name>Protected_Pages</web-resource-name>
>       <description>These pages are only accessible by authorized
> admins</description>
>       <url-pattern>/jsp/admin/*</url-pattern>
>     </web-resource-collection>
>     <auth-constraint>
>       <description>These are the roles that have access.</description>
>       <role-name>appAdmin</role-name>
>     </auth-constraint>
>     <user-data-constraint>
>       <description>This is how the user data must be transmitted between
the
> client and the server.</description>
>       <transport-guarantee>NONE</transport-guarantee>
>     </user-data-constraint>
>   </security-constraint>
>
>   <login-config>
>     <auth-method>FORM</auth-method>
>     <form-login-config>
>       <form-login-page>.login</form-login-page>
>       <form-error-page>.loginFailed</form-error-page>
>     </form-login-config>
>   </login-config>
>
>  <security-role>
>   <role-name>
>    appAdmin
>   </role-name>
>  </security-role>
> "
>
> My pages are defined in tiles-def.xml as:
> "
>   <definition name=".login" extends=".layout.base">
>     <put name="body" value="/jsp/login/login.jsp"/>
>   </definition>
>
>   <definition name=".loginFailed" extends=".layout.base">
>     <put name="body" value="/jsp/login/login_failed.jsp"/>
>   </definition>
> "
>
> I should note that even when I called the .jsps directly it didn't work
> either.
>
> I feel a little lost here... the how-tos make it sound so easy, but I
can't
> even get the silly form to show up!
>
> Thanks in advance,
> Janice
>
>


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to