Hi
i am trying to use form based authentication .the form page come up asking for username and password but when i enter the correct info(username and password) it is always going to error page ? why? can anyone please explain...
Here is my web.xml
****************************888
<?xml version="1.0" encoding="UTF-8"?>
<web-app xmlns="http://java.sun.com/xml/ns/j2ee" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://java.sun.com/xml/ns/j2ee
http://java.sun.com/xml/ns/j2ee/web-app_2_4.xsd" version="2.4">
<
servlet>
<servlet-name>Search</servlet-name>
<servlet-class>com.example.Search</servlet-class>
</servlet>
<servlet-mapping>
<servlet-name>Search</servlet-name>
<url-pattern>/Search</url-pattern>
</servlet-mapping>
<session-config>
<session-timeout>
30
</session-timeout>
</session-config>
<welcome-file-list>
<welcome-file>
index.jsp
</welcome-file>
<welcome-file>
index.html
</welcome-file>
<welcome-file>
index.htm
</welcome-file>
</welcome-file-list>
<security-role>
<role-name>Guest</role-name>
</security-role>
<login-config>
<auth-method>FORM</auth-method>
<form-login-config>
<form-login-page>/login.html</form-login-page>
<form-error-page>/error.html</form-error-page>
</form-login-config>
</login-config>
<security-constraint>
<web-resource-collection>
<web-resource-name>searching</web-resource-name>
<url-pattern>/Search</url-pattern>
<http-method>POST</http-method>
</web-resource-collection>
<auth-constraint>
<role-name>Guest</role-name>
</auth-constraint>
</security-constraint>
</web-app>
This is my tomcat-users.xml file
***************************************
<?xml version="1.0" encoding="utf-8" ?>
- <tomcat-users>
<role rolename="Guest" />
<role rolename="Admin" />
<role rolename="Member" />
<user name="Tom" password="rose" roles="Guest" />
<user name="jim" password="green" roles="green,Guest" />
<user name="Bill" password="red" roles="Member" />
</tomcat-users>
login.html page
***********************
<form action="j_security_check" method="POST">
username :<input type="text" name="j_username" ><br>
password: <input type="password" name="j_password"><br>
<input type="submit" value="click"><br>
</form>
erro page
**************
uauthorized user
thanks