I did try it. Worked fine on my development box.
But when I deployed it at my hosting company I found that httpSession information was getting blown away in the process of doing the redirect. The redirect was fine, but on the next submission, the user's credentials were gone. Request.getRemoteUser() returned null. When the redirection didn't take place, this didn't happen...
This would typically only happen when the browser was not using cookies to track session IDs and URL rewriting was not applied to the redirect. Or if the redirect went between servers or context paths such that the jsessionid cookie wasn't visible to the destination server.
Joe
--
Joe Germuska [EMAIL PROTECTED] http://blog.germuska.com "Narrow minds are weapons made for mass destruction" -The Ex
--------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]