Hi, I have the same issue.But i am not using spring.Its simple Servlet Container's default session manager . my shiro.ini look like this [main] # realm to be used jdbcRealm=com.myAuthenticationJdbcRealm jdbcRealm.jndiDataSourceName=java:comp/env/jdbc/dbpool #jdbcRealm.dataSource = $ds jdbcRealm.permissionsLookupEnabled=true # password hashing specification credentialMatcher = com.MYCredentialsMatcher jdbcRealm.credentialsMatcher = $credentialMatcher # replace form authentication filter with verbose filter authc = com.MyFormAuthenticationFilter # request parameter with login error information; if not present filter assumes 'shiroLoginFailure' authc.failureKeyAttribute=simpleShiroApplicationLoginFailure # specify login page authc.loginUrl = /jsp/admin/Login.jsp # name of request parameter with username; if not present filter assumes 'username' authc.usernameParam = username # name of request parameter with password; if not present filter assumes 'password' authc.passwordParam = password # redirect after successful login authc.successUrl = /admin/home/HomePage.do # roles filter: redirect to error page if user does not have access rights roles.unauthorizedUrl = /common/loginFailed.do logout= com.MyLogoutFilter logout.redirectUrl = /jsp/admin/Login.jsp [urls] # force ssl for login page /common/Logout.do=noSessionCreation,logout /jsp/admin/Login.jsp=authc /jsp/loymartjsp/**=authc /jsp/**=authc /admin/**=authc /platform/**=authc /program/**=authc.
please help me on this -- View this message in context: http://shiro-user.582556.n2.nabble.com/Login-successful-but-isAuthenticated-is-false-upon-the-next-request-tp7578909p7579233.html Sent from the Shiro User mailing list archive at Nabble.com.
