I'm sorry to repost this question, but I wanted to add some more details: I experimented by adding a test page to my protected directory that does not use tiles. When I accessed that test page, got a 404: Page cannot be found. So then I changed the following in my web.xml file from:
<login-config> <auth-method>FORM</auth-method> <form-login-config> <form-login-page>.login</form-login-page> <form-error-page>.loginFailed</form-error-page> </form-login-config> </login-config> to: <login-config> <auth-method>FORM</auth-method> <form-login-config> <form-login-page>/jsp/login/login.jsp</form-login-page> <form-error-page>/jsp/login/login_failed.jsp</form-error-page> </form-login-config> </login-config> Now when I access the test file (the one without tiles) I do get the login form (just the form, not in my tiles). Either way, when I access another file in the same directory that does use tiles, I still get the 'response has already been committed' in the body tile. If I remove the "protection" from the directory, the page works just fine. Thanks in advance for any help, Janice ----- Original Message ----- From: "Janice" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, January 23, 2004 2:23 PM Subject: 'response has already been committed' on protected page when I expected the login form? > Hi Gang, > > I've started putting authentication into my struts app. The problem I'm > having is that as soon as I go to an area that is protected, I get the > "response has already been committed" error in my body tile. Could somebody > please tell me what I'm doing wrong? > > This is what I added to web.xml: > " > <security-constraint> > <web-resource-collection> > <web-resource-name>Protected_Pages</web-resource-name> > <description>These pages are only accessible by authorized > admins</description> > <url-pattern>/jsp/admin/*</url-pattern> > </web-resource-collection> > <auth-constraint> > <description>These are the roles that have access.</description> > <role-name>appAdmin</role-name> > </auth-constraint> > <user-data-constraint> > <description>This is how the user data must be transmitted between the > client and the server.</description> > <transport-guarantee>NONE</transport-guarantee> > </user-data-constraint> > </security-constraint> > > <login-config> > <auth-method>FORM</auth-method> > <form-login-config> > <form-login-page>.login</form-login-page> > <form-error-page>.loginFailed</form-error-page> > </form-login-config> > </login-config> > > <security-role> > <role-name> > appAdmin > </role-name> > </security-role> > " > > My pages are defined in tiles-def.xml as: > " > <definition name=".login" extends=".layout.base"> > <put name="body" value="/jsp/login/login.jsp"/> > </definition> > > <definition name=".loginFailed" extends=".layout.base"> > <put name="body" value="/jsp/login/login_failed.jsp"/> > </definition> > " > > I should note that even when I called the .jsps directly it didn't work > either. > > I feel a little lost here... the how-tos make it sound so easy, but I can't > even get the silly form to show up! > > Thanks in advance, > Janice > > --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]