This is a "feature" of container-managed authentication.  You have to
think of the login.jsp as a page that shouldn't see - kind of like the
popup dialog you get with basic authentication.  The login.jsp only
shows up when you try to access a protected resource - so if you try
to access login.jsp - it thinks the protected resource is login.jsp
and takes you back to that page after you request it. 
login-redirect.jsp, on the other hand, redirects to a *real* protected
resource.

FWIW, if we move to Acegi Security, this issue will be fixed.

http://www.rollerweblogger.org/wiki/Wiki.jsp?page=Proposal_AcegiSecurity

Matt

On 10/14/05, fengjun <[EMAIL PROTECTED]> wrote:
>
>
> hi:
>
> I visit the url http://localhost:8080/roller/login.jsp . and putin the
> userName and the password . I can't login .
>
> But if I visit the url http://localhost:8080/roller/login-redirect.jsp .
> and putin the userName and the password . I can login .
>
> I don't know why?
>
> what is the different?
>
> I want to login the Roller Site form other url directly. how can I do ?
>
> I use the tomcat.
>
> thanks.
>
> --
> fengjun <[EMAIL PROTECTED]>
>
>

Reply via email to