Hmmm, so you are saying that I can point <form-error-page> to the
login page? I will try this.


Mark R. Diggory wrote:
> Why do you say this? You can call the "j_security_check" service from 
> any jsp page, whether its the one defined in the login attribute of 
> web.xml or not.
> 
> <html>
> <head>
> <title>Login Page for Examples</title>
> <body bgcolor="white">
> <form method="POST" action='<%= response.encodeURL("j_security_check") 
> %>' >
>  <table border="0" cellspacing="5">
>    <tr>
>      <th align="right">Username:</th>
>      <td align="left"><input type="text" name="j_username"></td>
>    </tr>
>    <tr>
>      <th align="right">Password:</th>
>      <td align="left"><input type="password" name="j_password"></td>
>    </tr>
>    <tr>
>      <td align="right"><input type="submit" value="Log In"></td>
>      <td align="left"><input type="reset"></td>
>    </tr>
>  </table>
> </form>
> </body>
> </html>
> 
> -M.
> 
> p.s. I believe the original request that was made is stored in the users 
> session object. you could come at this page more than once and that 
> previous information is still stored. After a successful login, that 
> request should still be completed.
> 
> 
> 
> Vincent Stoessel wrote:
> 
>> Barney Hamish wrote:
>>
>>> On our systems I use an error page which contains another login form 
>>> as well
>>> as an error message. Maybe you could try that.
>>> Hamish
>>>
>>
>>
>> I though about doing this too but then I would have to implement my own
>> authentication scheme on that page, losing all the benefits of using 
>> the built-in one from tomcat.
>>
>>
> 
> 
> 
> 
> 
> -- 
> To unsubscribe, e-mail:   
> <mailto:[EMAIL PROTECTED]>
> For additional commands, e-mail: 
> <mailto:[EMAIL PROTECTED]>


-- 
Vincent Stoessel
Linux Systems Developer
vincent xaymaca.com


--
To unsubscribe, e-mail:   <mailto:[EMAIL PROTECTED]>
For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>

Reply via email to