Return-Path: 
 <tomcat-user-return-7052-qmlist-jakarta-archive-tomcat-user=jakarta.apache.org@jakarta.apache.org>
Delivered-To: apmail-jakarta-tomcat-user-archive@apache.org
Received: (qmail 15153 invoked from network); 10 Jan 2002 10:44:05 -0000
Received: from unknown (HELO nagoya.betaversion.org) (192.18.49.131)
  by daedalus.apache.org with SMTP; 10 Jan 2002 10:44:05 -0000
Received: (qmail 22730 invoked by uid 97); 10 Jan 2002 10:43:52 -0000
Delivered-To: qmlist-jakarta-archive-tomcat-user@jakarta.apache.org
Received: (qmail 22714 invoked by uid 97); 10 Jan 2002 10:43:52 -0000
Mailing-List: contact tomcat-user-help@jakarta.apache.org; run by ezmlm
Precedence: bulk
List-Unsubscribe: <mailto:tomcat-user-unsubscribe@jakarta.apache.org>
List-Subscribe: <mailto:tomcat-user-subscribe@jakarta.apache.org>
List-Help: <mailto:tomcat-user-help@jakarta.apache.org>
List-Post: <mailto:tomcat-user@jakarta.apache.org>
List-Id: "Tomcat Users List" <tomcat-user.jakarta.apache.org>
Reply-To: "Tomcat Users List" <tomcat-user@jakarta.apache.org>
Delivered-To: mailing list tomcat-user@jakarta.apache.org
Received: (qmail 22703 invoked from network); 10 Jan 2002 10:43:51 -0000
X-Authentication-Warning: mail.rit.se: Host g213-88-137-195.dialup.rit.se
 [213.88.137.195] claimed to be FORTE
Message-ID: <01C199CA.B376DEC0@FORTE>
From: Victoria Einarsson <victoria.einarsson@affectus.se>
To: "'tomcat-user@jakarta.apache.org'" <tomcat-user@jakarta.apache.org>
Subject: wrong user role => Error 403 instead of redirecting to
 Form-Error-Page
Date: Thu, 10 Jan 2002 11:34:00 +0100
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
X-Spam-Rating: daedalus.apache.org 1.6.2 0/1000/N
X-Spam-Rating: daedalus.apache.org 1.6.2 0/1000/N

Hi,

Im a newbie and have some problems with JDBCRealm and form-login and I =
hope someone can help me.

When I login with a correct username and password but wrong role, it =
does not redirect to the specified form-error-page. Instead it returns =
403 error  code. But when I logon as a user that is not in the database =
it redirects correctly to the specified page. Im using Tomcat 4.0.1 and =
MySQL database
Whats wrong? (more details below)

Thanks a lot in advance!
/ Victoria



In MySql database I have the two users
   username=3Dvic password=3Dvic role=3Dmanager
   username=3Dpet password=3Dpet role=3Duser


The web.xml-file:
...
  <security-constraint>
    <web-resource-collection>
      <web-resource-name>Entire Application</web-resource-name>
      <url-pattern>/*</url-pattern>
    </web-resource-collection>
    <auth-constraint>
       <role-name>manager</role-name>
    </auth-constraint>
  </security-constraint>

  <login-config>
    <auth-method>FORM</auth-method>
    <realm-name>JDBC</realm-name>
    <form-login-config>=20
        <form-login-page>/login.html</form-login-page>=20
        <form-error-page>/error.html</form-error-page>
    </form-login-config>=20
  </login-config>
...


The login.html:
...
<form method=3D"POST" action=3D"j_security_check">=20
  Login id: <input type=3D"text" name=3D"j_username" size=3D"8"  =
class=3DformStyle><br>
  Password: <input type=3D"password" name=3D"j_password"  size=3D"8"  =
class=3DformStyle><br>
  <input type=3D"submit" value=3D" Log In " =3D name=3D"LogIn"  =
class=3DformStyle>         =20
</form>
...


When I login as "vic, vic" (in database an correct role) I'm redirected =
to index.html    =3D> OK
When I login as "jim,jim" (not in the database) I'm redirected to =
error.html    =3D> OK
When I login as "pet,sdg" (pet in database but wrong password) I'm =
redirected to error.html    =3D> OK
But when I login as "pet,pet" (user in database but not correct role)  I =
got error 403    =3D> NOT Ok, Im expecting to be redirected to =
error.html






--
To unsubscribe:   <mailto:tomcat-user-unsubscribe@jakarta.apache.org>
For additional commands: <mailto:tomcat-user-help@jakarta.apache.org>
Troubles with the list: <mailto:tomcat-user-owner@jakarta.apache.org>