Hi; first of all thanks for your answers and i want to excuse to me for all the disturbance i give. Well... i have followed your tips; now my web.xml is this one:
anonymous wrote : <?xml version="1.0" encoding="UTF-8"?> | <!DOCTYPE web-app PUBLIC "-//Sun Microsystems, Inc.//DTD Web Application 2.3//EN" "http://java.sun.com/dtd/web-app_2_3.dtd"> | <web-app> | <display-name>Demo Engineering</display-name> | Semplice demo per l'utilizzo di wfmOpen per Engineering Ingegneria Informatica | | <filter-name>LoginFilter</filter-name> | <filter-class>it.eng.nikko.demo.web.login.LoginFilter</filter-class> | <init-param> | <param-name>ApplicationPolicy</param-name> | <param-value>danetworkflow-ia</param-value> | </init-param> | | <filter-mapping> | <filter-name>LoginFilter</filter-name> | <servlet-name>dispatcher</servlet-name> | </filter-mapping> | | <servlet-name>dispatcher</servlet-name> | <servlet-class>it.eng.nikko.demo.web.login.Dispatcher</servlet-class> | <load-on-startup>1</load-on-startup> | | <servlet-mapping> | <servlet-name>dispatcher</servlet-name> | <url-pattern>/dispatcher</url-pattern> | </servlet-mapping> | <security-constraint> | <display-name>Restricted</display-name> | <web-resource-collection> | <web-resource-name>Restricted</web-resource-name> | <url-pattern>/*</url-pattern> | <http-method>DELETE</http-method> | <http-method>HEAD</http-method> | <http-method>GET</http-method> | <http-method>POST</http-method> | <http-method>PUT</http-method> | </web-resource-collection> | <auth-constraint> | <role-name>StaffManagementUser</role-name> | </auth-constraint> | </security-constraint> | <login-config> | <auth-method>FORM</auth-method> | <form-login-config> | <form-login-page>/login.jsp</form-login-page> | <form-error-page>/error.html</form-error-page> | </form-login-config> | </login-config> | <security-role> | Default | <role-name>StaffManagementUser</role-name> | </security-role> | <ejb-ref> | Mi riferisco al workflow EJB | <ejb-ref-name>ejb/Engine</ejb-ref-name> | <ejb-ref-type>Session</ejb-ref-type> | de.danet.an.workflow.ejbs.WorkflowEngineHome | de.danet.an.workflow.ejbs.WorkflowEngine | <ejb-link>Engine</ejb-link> | </ejb-ref> | </web-app> This is my login.jsp: <html> | <head> | <title>login</title> | </head> | <body bgcolor="#ffffff"> | <form method="post" action="dispatcher"> | <table> | <tr> | <td> | <p>Username:</p> | </td> | <td> | <input type="text" name="username"/> | </td> | </tr> | <tr> | <td> | <p>Password:</p> | </td> | <td> | <input type="text" name="password"/> | </td> | </tr> | </table> | <br> | <br> | <input type="submit" name="Submit" value="Submit"> | <input type="reset" value="Reset"> | </form> | </body> | </html> Well... when i try to log in, now the request is not intercepted form the filter... i always go to the login page; before, instead, at least once i was able to log and call the EJB... i'm not able to understand where i'm wrong... Maybe must not i use the servlet called dispatcher and the Filter... i have read from somewhere that the action of my login page should be j_security_check and the password field should be j_password and username j_username.. i have tried this one but, as i thinked, i had an error that syas to that the resource is not available.... Wow.. or i'm an idiot or it's really difficult to set this kind of security :-)) Please do you have any ideas? View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=3853411#3853411 Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=3853411 ------------------------------------------------------- This SF.Net email is sponsored by: Sybase ASE Linux Express Edition - download now for FREE LinuxWorld Reader's Choice Award Winner for best database on Linux. http://ads.osdn.com/?ad_id=5588&alloc_id=12065&op=click _______________________________________________ JBoss-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/jboss-user