Now I understand all your points but it's not work anyway. I try to add an extra access control so that anonymous users can login. Accessing the login path leads to the inivite loop I mention in my post before.
Here my configuration for now: security.config: providers: my: entity: { class: MyUserBundle:User, property: username } firewalls: my: pattern: /my.* form-login: check_path: /my/login-check login_path: /my/login logout: true provider: my access_control: - { path: /my/login.*, role: IS_AUTHENTICATED_ANONYMOUSLY } - { path: /my.*, role: ROLE_USER } Any ideas? -- If you want to report a vulnerability issue on symfony, please send it to security at symfony-project.com You received this message because you are subscribed to the Google Groups "symfony users" group. To post to this group, send email to symfony-users@googlegroups.com To unsubscribe from this group, send email to symfony-users+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/symfony-users?hl=en