On Thursday, August 24, 2017 5:29 PM, James H. H. Lampert <jam...@touchtonecorp.com> wrote: > Cache and cookies both cleared, all the way back, and the context > that theoretically should be presenting a sign-on dialog for the > forbidden pages still serves an immediate 403 page instead.
I don't use Tomcat's Realms for AuthN/AuthZ; the cookie clearing suggestion was a bit of a guess. Does your app's web.xml include a <login-config> element? Apache Tomcat 8 (8.0.46) - Realm Configuration HOW-TO | | | Apache Tomcat 8 (8.0.46) - Realm Configuration HOW-TO By Craig R. McClanahan | | | - Bob