Andoni,

I checked my login form and the only difference I observed was in the FORM tag:

<form method="POST" action='<%= response.encodeURL("j_security_check") %>' name="loginForm">

Beyond this as a possible cause, we would need to check/review your context definitions relating to the <REALM> Tag, and your security constraints defined in web.xml. I am using a JDBCRealm, but in regards to the actual authentication I do not believe that there is any functional difference.

Hope this helps.

Mark

Andoni wrote:

Hello,

I am trying to implement a JNDIRealm with form-based security.

When I look at the output from my RequestDumperValve I see that the call to j_security_check is like: /jsp/j_security_check which is understandible as it is just on its own in the form tag thus:

<form method="post" action="j_security_check" name="loginform">
<input type="hidden" name="j_username">
<input type="hidden" name="j_password">
</form>

Is there something I should put before it which none of the documentation refers to?

I am getting a 403 Access denied.

Thanks in advance,
Andoni.



-- Mark S. Morrison <mailto:[EMAIL PROTECTED]> *Justice Information Systems* *Engineering Vice President* 35 Robinson Lane Newnan, Georgia, 30263 Office: 678-423-1835 Cell: 404-435-9301 Fax: 678-423-3938 International Police Association <http://www.ipa-usa.org> /"Servo Per Amikeco"/ Life Member Membership Number 21020 US Section Region 46



---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Reply via email to