Re: Re: Problem with POST and FORM based authentication

[Anil Paul]

Thanks for replying. I've checked this and the login page is fine.
==


Please login:

  
  
  



==

As I wrote earlier, it correctly authenticates the user but after 
authenticating, it does not forward (or redirect, whatever) to the servlet's 
POST method. Also, if I apply the contraint for GET, it is working fine.

Every thing is working fine if I use the BASIC method instread of FORM.

I suspect that it is a bug in tomcat implementation. Can somebody please 
verify it?

thanks,
Paul.


>This is possibly a shot in the dark. But in your login.html page
have you defined ?
>Hope this helps.
>Thanks
>RS



"Anil Paul" <[EMAIL PROTECTED]> on 02/02/2002 10:58:32 AM


To:   [EMAIL PROTECTED]
cc:

Subject:  Problem with POST and FORM based authentication

Dear all,
I am trying to apply a security contraint on POST requests to my
servlet. I

specifed it in my web.xml as:



   
  posttest
  /servlet/TestServlet
  POST
   

   ...

   ...



I defined the login config as follows:


   FORM
   testrealm
   
 /login.html
 /error.html
   


Problem:

When I send a POST request to TestServlet from the brower (by
submitting a
form), I get the login.html page as expected. However, when I submit
the
username/password , doGet of TestServlet is getting called instead
of
doPost()!

To be sure that my settings are all right, I changed the login-
config from
FORM to BASIC, and everything worked fine. ie., after submitting the
login
page, doPost of the servlet is called. So, it's only with the FORM
based
authentication that there is a problem.

I also tested this configuration on JRun and it also has the same
issue.
Can
somebody please throw some light on it? May be I am not doing
something
right.

Please help,
Paul.



_
Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp.


--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

Re: Problem with POST and FORM based authentication

[RSEQUEIRA]

This is possibly a shot in the dark. But in your login.html page have you
defined ?
Hope this helps.
Thanks
RS





"Anil Paul" <[EMAIL PROTECTED]> on 02/02/2002 10:58:32 AM

Please respond to "Tomcat Users List" <[EMAIL PROTECTED]>

To:   [EMAIL PROTECTED]
cc:

Subject:  Problem with POST and FORM based authentication

Dear all,
I am trying to apply a security contraint on POST requests to my servlet. I

specifed it in my web.xml as:



   
  posttest
  /servlet/TestServlet
  POST
   

   ...

   ...



I defined the login config as follows:


   FORM
   testrealm
   
 /login.html
 /error.html
   


Problem:

When I send a POST request to TestServlet from the brower (by submitting a
form), I get the login.html page as expected. However, when I submit the
username/password , doGet of TestServlet is getting called instead of
doPost()!

To be sure that my settings are all right, I changed the login-config from
FORM to BASIC, and everything worked fine. ie., after submitting the login
page, doPost of the servlet is called. So, it's only with the FORM based
authentication that there is a problem.

I also tested this configuration on JRun and it also has the same issue.
Can
somebody please throw some light on it? May be I am not doing something
right.

Please help,
Paul.

_
Send and receive Hotmail on your mobile device: http://mobile.msn.com


--
To unsubscribe:   
For additional commands: 
Troubles with the list: 









--
To unsubscribe:   
For additional commands: 
Troubles with the list: