Tomcat 5.0.4 fails to serve form-login-error page properly

2003-07-24 Thread Oleg S. Estehin
Hi

I am porting my application from Tomcat 4.1.24 to Tomcat 5.0.4 (i.e. porting
from Servlets 2.3/JSP 1.2 to Servlets 2.4/JSP 2.0).

I have a servlet mapped to /auth that produces the page with login form.
Form based authentication is set with the following fragment of the
deployment descriptor:

login-config
  auth-methodFORM/auth-method
  form-login-config
form-login-page/auth/form-login-page
form-error-page/auth?action=error/form-error-page
  /form-login-config
/login-config

When the servlet is called with ?action=error query string it displays
additional warning besides the login form.

It was working perfectly in Tomcat 4.1.24 but it works in Tomcat 5.0.4 only
in half:

When user tries to access protected page he is presented with login page. If
he enters valid login/password then he receives access to the resourse.

But if the user enters invalid login/password then instead of
form-error-page Tomcat displays HTTP Status 405 - HTTP method POST is not
supported by this URL error with URL http://myhost.here/j_security_check;.


I have tried to set up AccessLogValve and RequestDumpValve and to set debug
attribute on every element in servlet.xml and my context.xml (where
applicable) in order to try to understand what is going on inside Tomcat 5,
but no luck so far - request damp just shows that 1) there was request to
protected resourse 2) Tomcat returned form-login-page 3) user sent it back
with invalid login/password 4) Tomcat returned error 405.

I had expected that there should be output from Realm between 3) and 4) but
there is not.

So, at the moment the conclusion is that the code that worked perfectly in
Tomcat 4.1.24 doesn't work in Tomcat 5.0.4 and i don't know why but i would
be delighted if somebody will help me to find this out :)


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Tomcat 5.0.4 fails to serve form-login-error page properly

2003-07-23 Thread Oleg S. Estehin
Hi

I am porting my application from Tomcat 4.1.24 to Tomcat 5.0.4 (i.e. porting
from Servlets 2.3/JSP 1.2 to Servlets 2.4/JSP 2.0).

I have a servlet mapped to /auth that produces the page with login form.
Form based authentication is set with the following fragment of the
deployment descriptor:

login-config
  auth-methodFORM/auth-method
  form-login-config
form-login-page/auth/form-login-page
form-error-page/auth?action=error/form-error-page
  /form-login-config
/login-config

When the servlet is called with ?action=error query string it displays
additional warning besides the login form.

It was working perfectly in Tomcat 4.1.24 but it works in Tomcat 5.0.4 only
in half:

When user tries to access protected page he is presented with login page. If
he enters valid login/password then he receives access to the resourse.

But if the user enters invalid login/password then instead of
form-error-page Tomcat displays HTTP Status 405 - HTTP method POST is not
supported by this URL error with URL http://myhost.here/j_security_check;.


I have tried to set up AccessLogValve and RequestDumpValve and to set debug
attribute on every element in servlet.xml and my context.xml (where
applicable) in order to try to understand what is going on inside Tomcat 5,
but no luck so far - request damp just shows that 1) there was request to
protected resourse 2) Tomcat returned form-login-page 3) user sent it back
with invalid login/password 4) Tomcat returned error 405.

I had expected that there should be output from Realm between 3) and 4) but
there is not.

So, at the moment the conclusion is that the code that worked perfectly in
Tomcat 4.1.24 doesn't work in Tomcat 5.0.4 and i don't know why but i would
be delighted if somebody will help me to find this out :)


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]