Ok, I've seen that before. Probably your protected page has the same name as one of the welcome-file page matches in web.xml, or they're both present.
If index.html is your welcome page, use that in the welcome-file setting and not an existing .jsp file. I think that's the way it works. Rod. US SSA said: > Yes, you are right. > > However, when I changed the pattern to /*.jsp, the login page was > skipped and the browser went straight to the protected page without any > authentication. > > I am not sure what's going on. > > Yaakov Chaikin > Software Engineer > BAE SYSTEMS > 301-838-6899 (phone) > 301-838-6802 (fax) > [EMAIL PROTECTED] > > >> -----Original Message----- >> From: Rod Giffin [mailto:[EMAIL PROTECTED] >> Sent: Monday, December 08, 2003 1:31 PM >> To: [EMAIL PROTECTED] >> Subject: Re: login page css not applied >> >> US SSA said: >> > Hi, >> > >> > I have a problem where the login page is not showing any images and > not >> > having the css applied to it. >> >> But after the user has authenticated, it works right? >> >> I'm not 100% sure about the setup of your webapp and I've been > spending so >> much time with other products I've forgotten a lot of stuff, but it >> appears to me on first glance that you've got a security constraint on > /*, >> which would include images/ and css/ in that webapp before the user > has >> authenticated, wouldn't it? If not, then I've forgotten more than I >> realized. >> >> Anyway, if so, the browser is requesting the css and image files > before >> the user has enough authentication to get them. That's why it's > working >> after the user is authenticated and a role assigned. >> >> Rod. >> >> >> [snip] >> > <security-constraint> >> > <web-resource-collection> >> > <web-resource-name>Regular and Power >> > User</web-resource-name> >> > <url-pattern>/*</url-pattern> >> > </web-resource-collection> >> > <auth-constraint> >> > <role-name>RegularUser</role-name> >> > <role-name>PowerUser</role-name> >> > <role-name>Administrator</role-name> >> > </auth-constraint> >> > <user-data-constraint> >> > <transport-guarantee>NONE</transport-guarantee> >> > </user-data-constraint> >> > </security-constraint> >> --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
