DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://nagoya.apache.org/bugzilla/show_bug.cgi?id=9791>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=9791

Form-based login fails using apache, mod_jk, mod_ssl without cookies





------- Additional Comments From [EMAIL PROTECTED]  2002-11-18 15:29 -------
Corey, I've checked through the code and the tomcat side looks fine. Are you
sure your login form is ok? For form based authentication without cookies, you
need to use URL rewriting on the form action in your login page, like so:

<form action='<%= response.encodeURL("j_security_check") %>'>

If you don't do this, then the session that created the login form will not be
requested when the login form is submitted. In particular, if you use a plain
.htm login form instead of a jsp, you /must/ use cookies.

--
To unsubscribe, e-mail:   <mailto:[EMAIL PROTECTED]>
For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>

Reply via email to