Return-Path: 
 <tomcat-user-return-51739-apmail-jakarta-tomcat-user-archive=jakarta.apache.org@jakarta.apache.org>
Delivered-To: apmail-jakarta-tomcat-user-archive@jakarta.apache.org
Received: (qmail 18365 invoked by uid 500); 26 Oct 2001 13:13:38 -0000
Mailing-List: contact tomcat-user-help@jakarta.apache.org; run by ezmlm
Precedence: bulk
Reply-To: tomcat-user@jakarta.apache.org
list-help: <mailto:tomcat-user-help@jakarta.apache.org>
list-unsubscribe: <mailto:tomcat-user-unsubscribe@jakarta.apache.org>
list-post: <mailto:tomcat-user@jakarta.apache.org>
Delivered-To: mailing list tomcat-user@jakarta.apache.org
Received: (qmail 18317 invoked from network); 26 Oct 2001 13:13:38 -0000
Message-ID: <764CA2FF49EC054BA086FC8253A52DD7432CCB@merc09.na.sas.com>
From: Larry Isaacs <Larry.Isaacs@sas.com>
To: "'tomcat-user@jakarta.apache.org'" <tomcat-user@jakarta.apache.org>
Subject: RE: login from home page
Date: Fri, 26 Oct 2001 09:13:29 -0400
MIME-Version: 1.0
X-Mailer: Internet Mail Service (5.5.2653.19)
Content-Type: text/plain;
	charset="iso-8859-1"
X-Spam-Rating: daedalus.apache.org 1.6.2 0/1000/N

You don't mention which Tomcat you are using.  Assuming it
is a Tomcat 3.2.x version, I think this is a known problem.
For both Ajp12 and Ajp13 protocols, the remoteUser is always
set to the "user" supplied with the browser's request.  This
isn't the user the FORM login seeks to authenticate, which
is a Tomcat maintained user.  Try setting debug="1" on
SimpleRealm, or debug="3" on JDBCRealm to see the "user"
that the realm is trying to authenticate.

In Tomcat 3.3, the "tomcatAuthentication" attribute of
Ajp13Interceptor and Ajp12Interceptor controls whether the
browser supplied user or the Tomcat maintained user is
used for the Ajp13 or Ajp12 requests.  The default is to use
Tomcat's user.

Hope this helps.

Larry

> -----Original Message-----
> From: Carlo Sorda [mailto:csorda@peoples.it]
> Sent: Thursday, October 25, 2001 1:25 PM
> To: tomcat-user@jakarta.apache.org
> Subject: login from home page
> 
> 
> Hi,
> I have this situation:
> 
> I have an Home Page, in my home page there are two text box 
> for input login
> and password.
> What can I do for authenticate a user and go to a protect area.
> My protect area is configured whit:
> <login-config>
> >         <auth-method>FORM</auth-method>
> >         <form-login-config>
> >             <form-login-page>/admin/login.jsp</form-login-page>
> >             <form-error-page>/admin/loginerror.jsp</form-error-page>
> >         </form-login-config>
> >     </login-config>
> 
> When I direct go in http://localhost/admin/ my login.jsp 
> appear and all OK,
> but nothing do to when I insert name and password on my home page.
> What can I do? There is a solution?
> Thanks, Carlo Sorda
>