Return-Path: 
 <tomcat-user-return-117884-apmail-jakarta-tomcat-user-archive=jakarta.apache.org@jakarta.apache.org>
Delivered-To: apmail-jakarta-tomcat-user-archive@www.apache.org
Received: (qmail 78720 invoked from network); 15 Dec 2004 16:38:45 -0000
Received: from hermes.apache.org (HELO mail.apache.org) (209.237.227.199)
  by minotaur-2.apache.org with SMTP; 15 Dec 2004 16:38:45 -0000
Received: (qmail 44997 invoked by uid 500); 15 Dec 2004 15:53:40 -0000
Delivered-To: apmail-jakarta-tomcat-user-archive@jakarta.apache.org
Received: (qmail 33418 invoked by uid 500); 15 Dec 2004 15:49:12 -0000
Mailing-List: contact tomcat-user-help@jakarta.apache.org; run by ezmlm
Precedence: bulk
List-Unsubscribe: <mailto:tomcat-user-unsubscribe@jakarta.apache.org>
List-Subscribe: <mailto:tomcat-user-subscribe@jakarta.apache.org>
List-Help: <mailto:tomcat-user-help@jakarta.apache.org>
List-Post: <mailto:tomcat-user@jakarta.apache.org>
List-Id: "Tomcat Users List" <tomcat-user.jakarta.apache.org>
Reply-To: "Tomcat Users List" <tomcat-user@jakarta.apache.org>
Delivered-To: mailing list tomcat-user@jakarta.apache.org
Received: (qmail 22794 invoked by uid 99); 15 Dec 2004 15:45:05 -0000
X-ASF-Spam-Status: No, hits=0.0 required=10.0
	tests=
X-Spam-Check-By: apache.org
Received-SPF: pass (hermes.apache.org: local policy)
Received: from mailhost3.cdn.fr (HELO net191rms001.cdn.fr) (194.2.239.193)
  by apache.org (qpsmtpd/0.28) with ESMTP; Wed, 15 Dec 2004 07:45:00 -0800
Received: from net188fls001.cdn.fr (unverified) by net191rms001.cdn.fr
 (Content Technologies SMTPRS 4.3.17) with ESMTP id
 <T6de406b4ccac1fbf0138c@net191rms001.cdn.fr> for
 <tomcat-user@jakarta.apache.org>;
 Wed, 15 Dec 2004 16:44:40 +0100
Received: from sec014mes051.cdn (unverified) by net188fls001.cdn.fr
    (Content Technologies SMTPRS 4.3.17) with ESMTP id
    <T6de406b423ac1fbc013a8@net188fls001.cdn.fr>; Wed, 15 Dec 2004 16:44:39
    +0100
Received: by sec014mes051.cdn with Internet Mail Service (5.5.2656.59) id
    <YRJXHJ8L>; Wed, 15 Dec 2004 16:44:40 +0100
Message-ID: <A1D92A8E6280D211900900805F8583C3035768CE@anj029mes011.cdn>
From: VAN DER MARLIERE FREDERIC <frederic.van_der_marliere@cdn.fr>
To: =?iso-8859-1?Q?Martin_Gr=FCneberg?= <martin.grueneberg@active-group.de>,
    'Tomcat Users List' <tomcat-user@jakarta.apache.org>
Subject: RE : Tomcat 5 and Realm problem
Date: Wed, 15 Dec 2004 16:44:37 +0100
MIME-Version: 1.0
X-Mailer: Internet Mail Service (5.5.2656.59)
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-Virus-Checked: Checked
X-Spam-Rating: minotaur-2.apache.org 1.6.2 0/1000/N

Not far. I do use IE and htpts. And I turned off cookies but in server.xml
file. I meet to many problems when I use session cookies and none with
encoded URL.=20
Any idea of the way to use realm authentication (FORM method) with cookies
turned off?

-----Message d'origine-----
De : Martin Gr=FCneberg [mailto:martin.grueneberg@active-group.de]=20
Envoy=E9 : mercredi 15 d=E9cembre 2004 08:52
=C0 : 'Tomcat Users List'
Objet : AW: Tomcat 5 and Realm problem


Hi Frederic,

you are using IE and https? I got the same error and can't find a proper
solution for it. I bet you have turned of cookies in IE. Turn them on (allow
session-cookies) and it will work again.=20

Greetings
Martin =20

-----Urspr=FCngliche Nachricht-----
Von: VAN DER MARLIERE FREDERIC [mailto:frederic.van_der_marliere@cdn.fr]=20
Gesendet: Dienstag, 14. Dezember 2004 18:41
An: tomcat-user@jakarta.apache.org
Betreff: Tomcat 5 and Realm problem

Hi,

I'm developping a web app in wich I want the users to authenticate via
Realm. I first used BASIC authentication m=E9thod and everything worked fin=
e.
But when I want to use the FORM one, I get the following message when login
and password are correct (if not, I get the error page I configured in
web.xml):

The time allowed for the login process has been exceeded. If you wish to
continue you must either click back twice and re-click the link you
requested or close and re-open your browser

My web.xml looks like:

<security-constraint>
    <display-name></display-name>

    <web-resource-collection>
      <web-resource-name>protection index</web-resource-name>
      <url-pattern>/</url-pattern>
      <http-method>GET</http-method>
    </web-resource-collection>

    <auth-constraint>
      <role-name>myRole</role-name>
    </auth-constraint>
</security-constraint>

<login-config>
    <auth-method>FORM</auth-method>
    <form-login-config>
      <form-login-page>/login.jsp</form-login-page>
      <form-error-page>/error.jsp</form-error-page>
    </form-login-config>
</login-config>

<security-role>
    <role-name>myRole</role-name>
</security-role>

And login.jsp looks like:

  <html>
  <head></head>
  <body>
    <form action=3D"j_security_check" method=3D"POST">
      <input type=3D"text" name=3D"j_username" />
      <input type=3D"password" name=3D"j_password" />
      <input type=3D"submit" />
    </form>
  </body>
</html>


Does someone have any idea about the origin of my problem ?

Thanks.
Fred.


----------------------------------------------------
Ce message et toutes les pieces jointes (ci-apres le "message") sont
confidentiels et etablis a l'intention exclusive de ses destinataires. Toute
utilisation ou diffusion non autorisee est interdite.Tout message
electronique est susceptible d'alteration. Le CREDIT DU NORD et ses filiales
declinent toute responsabilite au titre de ce message s'il a ete altere,
deforme ou falsifie. This message and any attachments ( the "message") are
confidential and intended solely for the addressees. Any unauthorised use or
dissemination is prohibited.E-mails are susceptible to alteration. Neither
CREDIT DU NORD nor any of its subsidiaries or affiliates shall be liable for
the message if altered, changed or falsified.
----------------------------------------------------



____________
Virus checked by G DATA AntiVirusKit
Version: AVK 15.0.1471 from 11.12.2004
Virus news: www.antiviruslab.com



----------------------------------------------------
Ce message et toutes les pieces jointes (ci-apres le "message") sont confid=
entiels et etablis a l'intention exclusive de ses destinataires.
Toute utilisation ou diffusion non autorisee est interdite.Tout message ele=
ctronique est susceptible d'alteration.
Le CREDIT DU NORD et ses filiales declinent toute responsabilite au titre d=
e ce message s'il a ete altere, deforme ou falsifie.
This message and any attachments ( the "message") are confidential and inte=
nded solely for the addressees.
Any unauthorised use or dissemination is prohibited.E-mails are susceptible=
 to alteration.
Neither CREDIT DU NORD nor any of its subsidiaries or affiliates shall be l=
iable for the message if altered, changed or falsified.
----------------------------------------------------


---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-user-help@jakarta.apache.org