Hi all,

I have a problem I hope you can help with. I have configured Tomcat 6 for
SSO using form-based authentication for two webapps and this works fine for
these webapps when using jsp's for login pages.

Things go awry when I try to configure things further. From the first of my
webapps, I wish to redirect from login.jsp to my Struts /login action (I am
using the Smart URLs plugin to eliminate the .action extension). login.jsp
is configured as the form-login-page in web.xml. I am doing this because
Tomcat won't accept /login as this parameter.

login.jsp implements the redirect as follows:

<meta http-equiv="REFRESH" content="0;url=/login">

The login action generates the login form.

When I access a protected resource, I am redirected to the /login action by
way of login.jsp and I can login to the first webapp as expected. 

The problem is that after doing this, when I navigate to a protected
resource within the second web app, I am not able to access the resource as
expected. Instead, I am redirected to the login page for the second web app.

Why is this? If I simply put the login form in login.jsp for the first
webapp and repeat this process, then everything works as expected-- I am
able to access protected resources in webapp 2 without having to login
again.

Is there a way around this? Thanks for any help.

- Rich


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to