Thanks for response.

I have login.jsp defined in both applications.
That is the login.jsp has the same content but there are two files:

/usr/local/tomcat/webapps/first_app/login.jsp
and
/usr/local/tomcat/webapps/second_app/login.jsp

In both deployment descriptors 
/usr/local/tomcat/webapps/first_app/WEB-INF/web.xml
and
/usr/local/tomcat/webapps/second_app/WEB-INF/web.xml

I have identical entries:
<!-- Define the Login Configuration for this Application -->
  <login-config>
    <auth-method>FORM</auth-method>
    <form-login-config>
      <form-login-page>
        /login.jsp
      </form-login-page>
      <form-error-page>
        /error.jsp
      </form-error-page>
    </form-login-config>
  </login-config>

I guess it may be part of the problem that there are actually two (although
identical) files login.jsp.
However when I tried to use just one:

second_app:
      <form-login-page>
        ../first_app/login.jsp
      </form-login-page>

first_app:
      <form-login-page>
        /login.jsp
      </form-login-page>

I was getting 400 and 404 errors.


Thanks for help.
Jerzy


-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] 
Sent: Tuesday, July 02, 2002 6:03 PM
To: [EMAIL PROTECTED]
Subject: RE: j_security_check problem (two applications)

Do you have single-sign-on set up?



-----Original Message-----
From: Brzezicki, Jerzy [mailto:[EMAIL PROTECTED]] 
Sent: Tuesday, July 02, 2002 4:38 PM
To: '[EMAIL PROTECTED]'
Subject: j_security_check problem (two applications)

Hi,

 

I have two applications within the same Tomcat 4 container. 

I want to configure FORM type of authentication so user needs to login only
once.

I configured JDBCRealm that worked ok with BASIC type of authentication.

What I mean by ok was that while switching from one application to another
the login request was not displayed for second time.

Now I created FORM type of authentication just as HOWTO says. However every
time I switch from one application to another the user needs to login for
second time.

Do you know how to avoid this ?

 

Thanks,

Jerzy


--
To unsubscribe, e-mail:   <mailto:[EMAIL PROTECTED]>
For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>

Reply via email to