Mailing-List: contact users-help@tomcat.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Tomcat Users List" <users@tomcat.apache.org>
Received-SPF: pass (athena.apache.org: domain of knst.kolinko@gmail.com
 designates 209.85.161.173 as permitted sender)
MIME-Version: 1.0
In-Reply-To: 
 <CACGXvK2gJGkwpMAjGn=PMDeQ__cD9Hc5fiWcLmvWbgPNtJQB8w@mail.gmail.com>
References: 
 <CACGXvK2gJGkwpMAjGn=PMDeQ__cD9Hc5fiWcLmvWbgPNtJQB8w@mail.gmail.com>
Date: Thu, 5 Apr 2012 16:35:49 +0400
Message-ID: 
 <CABzHfVm_SYf0d4px-X2E-uON55nr4PE9seRFkLhPjFp6BAwykw@mail.gmail.com>
Subject: Re: request.login() not persistent
From: Konstantin Kolinko <knst.kolinko@gmail.com>
To: Tomcat Users List <users@tomcat.apache.org>
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

2012/4/5 Jerry Malcolm <2ndgenfilms@gmail.com>:
> I am using TC 7.0 on a couple of servers. =A0I have id/pw fields and a
> 'login' button at the top of all guest pages on my site. =A0If the user
> clicks the login, it goes to a guest page that does the request.login()
> method call and then redirects to a protected page. =A0If the login fails=
,
> the normal j_security login form stuff kicks in on the protected page and
> the user logs in the old way.
>
> OK, this worked on one server for several months. =A0It never worked on t=
he
> other server. =A0On that server, the request.login() succeeded according =
to
> the logs. =A0But when it redirected to the protected page, the j_security
> login form would appear. =A0I could log in from there and everything was
> fine.
> (...)

How do you perform your redirect?
Do you call  HttpServletResponse.encodeRedirectURL( ) to encode
sessionid in the redirection URL?

Form authentication relies on sessions.  If new request does not
belong to the same session (the correct session id is not send by
client either in URL or with a cookie) then it does not have
authentication.


Best regards,
Konstantin Kolinko

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org