-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Andrew,
Andrew R Feller wrote: > 3. It is unclear what happens in the event when a user requests the > form- > login-page directly instead of going through a container-managed > resource. > > How does j_security_check know where to redirect the user once he has > authenticated successfully? If you're still asking, please read section 12.5.3 of the servlet specification: it tells you exactly what the servlet container is expected to do. It's available online from Sun's website. If you want to see /how/ it's done, you're going to have to dig around in the Tomcat source code. Th reason the code is not documented is because the specification outlines the behavior: there's no reason to document the code, etc. - -chris -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFHM2Yq9CaO5/Lv0PARAhzaAJ99NhIYjUUlY0seR/GDElFtDiklJQCfZrDb 5ouywvbE1WtVoKVzOKrV0II= =B+j0 -----END PGP SIGNATURE----- --------------------------------------------------------------------- To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]