Mailing-List: contact users-help@tomcat.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Tomcat Users List" <users@tomcat.apache.org>
Received-SPF: pass (nike.apache.org: domain of appy74@dsl.pipex.com designates
 212.74.114.38 as permitted sender)
From: "Martin O'Shea" <appy74@dsl.pipex.com>
To: "'Tomcat Users List'" <users@tomcat.apache.org>
References: <1317746617.4e8b37b9f03d5@netmail.pipex.net>
 <99C8B2929B39C24493377AC7A121E21FB0038543D8@USEA-EXCH8.na.uis.unisys.com>
 <1317748330.4e8b3e6aefdcb@netmail.pipex.net>
 <4E8B46DA.6020605@christopherschultz.net> <4E8B4A01.4080709@ice-sa.com>
 <1317751568.4e8b4b103edd5@netmail.pipex.net> <4E8B56D0.7030506@ice-sa.com>
 <00a301cc8375$32988390$97c98ab0$@dsl.pipex.com>
 <4E8C9646.3030703@christopherschultz.net>
In-Reply-To: <4E8C9646.3030703@christopherschultz.net>
Subject: RE: Using multiple login pages
Date: Wed, 5 Oct 2011 18:59:51 +0100
Message-ID: <00ac01cc8388$94c6a8e0$be53faa0$@dsl.pipex.com>
MIME-Version: 1.0
Content-Type: text/plain;
	charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Thread-Index: 
 AQE0g4/R1ojm70ppBm5oJVQqETk4LQH6gidqAlmmnr0B1jZ2DAJJiCaiAkqwA7cCD7nv7ALPbohXAiQoMw6WD/n2IA==
Content-Language: en-gb

I have it now. There was a redirection going on in a method called from =
a scriptlet in the login page. It now seems to be OK.

Thanks Chris.

But one thing bugs me still: you said that you can have 'different login =
pages for different types of resources you're trying to reach.' Can you =
give any pointers about this?

.-----Original Message-----
From: Christopher Schultz [mailto:chris@christopherschultz.net]=20
Sent: 05 Oct 2011 18 39
To: Tomcat Users List
Subject: Re: Using multiple login pages

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Martin,

On 10/5/2011 11:41 AM, Martin O'Shea wrote:
> This follows on from yesterday's discussion about whether in my=20
> application, I can have more than one page with an embedded login form =

> or not.
>=20
> I've been looking over the servlet spec (V2.2) and it seems that I=20
> can't actually do this which is a shame.

Do what, have different login pages for different types of resources =
you're trying to reach? Sure you can: try reading my responses.

> So I'm now looking at a more conventional log in from a login page.
> But can anyone explain to me why I don=E2=80=99t see my login page =
when I run=20
> the application?
>=20
> Login.jsp contains the following:

This isn't relevant if you're not seeing it.

> Which corresponds to the following in web.xml:
>=20
> <welcome-file-list>
> <welcome-file>/jsp/about/concept.jsp</welcome-file>
> </welcome-file-list>
>=20
> <security-constraint> <web-resource-collection>=20
> <url-pattern>/aboutConcept</url-pattern>
> </web-resource-collection> <auth-constraint> <description/>=20
> <role-name>ADMIN</role-name> </auth-constraint> </security-constraint=20
> >
>=20
> <login-config> <form-login-config>
> <form-login-page>/jsp/security/protected/login.jsp</form-login-page>
>
>=20
<form-error-page>/jsp/security/protected/error.jsp</form-error-page>
> </form-login-config> </login-config>
>=20
> But when I run the application, all I get is the html of the page=20
> specified in the welcome file list?

Is that a question or a statement?

> But if I then invoke a link from the welcome file, I get the login=20
> page. Surely it should be the other way around?

Your welcome file is not protected in any way, so you are not challenged =
for credentials. If you want to login to see every page on your site, =
you should have <url-pattern>/*</url-pattern> in your =
<web-resource-collection>.

- -chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk6MlkYACgkQ9CaO5/Lv0PB3nQCfRf0g/erXaD2kOPyaBCMJW/h0
Ce0An0EbOElkSImGQYK8y+JkZdtcrIqL
=3Dwbh5
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org