On Thursday, August 24, 2017 5:29 PM, James H. H. Lampert 
<jam...@touchtonecorp.com> wrote:
> Cache and cookies both cleared, all the way back, and the context 
> that theoretically should be presenting a sign-on dialog for the 
> forbidden pages still serves an immediate 403 page instead.


I don't use Tomcat's Realms for AuthN/AuthZ; the cookie clearing suggestion was 
a bit of a guess.
Does your app's web.xml include a <login-config> element?
Apache Tomcat 8 (8.0.46) - Realm Configuration HOW-TO

  
|  
|   |  
Apache Tomcat 8 (8.0.46) - Realm Configuration HOW-TO
 By Craig R. McClanahan   |  |

  |

 

- Bob




   

Reply via email to