I have a strange problem, can someone tell me what is wrong?
I use form based authentication with Websphere using custom registry, setup in web.xml is as below. when I tried to access a protected resource URL, http://bhn.gers.com:9080/furnnet/main/dispatcher.do, since everything under dir "/main" is defined to be protected in the web.xml, I was brought to the login page as expected, after submit the form with the j_username and j_password, I got a 404 file not found, as below, but in fact the user had been authenticated because if I resubmit the same URL link, I was able to access that URL link. Can someon tell me what is wrong with it or my setup? thanks Binh <security-constraint id="SecurityConstraint_1"> <web-resource-collection id="WebResourceCollection_1"> <web-resource-name>fn access</web-resource-name> <url-pattern>/main/*</url-pattern> <http-method>POST</http-method> <http-method>GET</http-method> </web-resource-collection> <auth-constraint id="AuthConstraint_1"> <description>fn access:+:</description> <role-name>fnUser</role-name> </auth-constraint> <user-data-constraint id="UserDataConstraint_1"> <transport-guarantee>NONE</transport-guarantee> </user-data-constraint> </security-constraint> <login-config id="LoginConfig_1"> <auth-method>FORM</auth-method> <realm-name>dbRealm</realm-name> <form-login-config id="FormLoginConfig_1"> <form-login-page>/logon.html</form-login-page> <form-error-page>/error.jsp</form-error-page> </form-login-config> </login-config> <security-role id="SecurityRole_1"> <role-name>fnUser</role-name> </security-role> __________________________________________________ Do You Yahoo!? Try FREE Yahoo! Mail - the world's greatest free email! http://mail.yahoo.com/ -- To unsubscribe, e-mail: <mailto:[EMAIL PROTECTED]> For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>

