Forum:

Web Component Certification (OCEJWCD)

Form Authentication does not work TomCat 5.5?

Grace Yang

Ranch Hand

Posts: 58

posted 17 years ago

Number of slices to send:

Optional 'thank-you' note:

Send

I am learngin Form Authentication , and I don't think 'j_security_check' works in TomCat 5.5, right?

Thanks.

Christophe Verré

Sheriff

Posts: 14691

I like...

posted 17 years ago

Number of slices to send:

Optional 'thank-you' note:

Send

That would be a huge bug, wouldn't it ?

But I think Tomcat is ok with form authentication. Can you post your form ? And please tell us a bit more about what is not working.

[My Blog]
All roads lead to JavaRanch

Tridib Samanta

Ranch Hand

Posts: 128

posted 17 years ago

Number of slices to send:

Optional 'thank-you' note:

Send

Form based authentication works perfectly in tomcat 5.5

Thanks, Tridib
SCJP 1.4, SCWCD 1.4, SCBCD 5.0

Grace Yang

Ranch Hand

Posts: 58

posted 17 years ago

Number of slices to send:

Optional 'thank-you' note:

Send

Thanks for reply :-)

I want to know how Form Authentication works, but I get "HTTP Status 404 - /myWeb/MySecurity/j_security_check" after submitting the form.

---invoke form page.
http://localhost:8080/myWeb/MySecurity/formlogin.html

=== here's steps I do :

1. ---add following inside "tomcat-users.xml"
<user name="john" password="jjj" roles="employee" />
<user name="mary" password="mmm" roles="employee" />
<user name="bob" password="bbb" roles="employee, supervisor" />

2. -- add following inside web.xml
<login-config>
<auth-method>FORM</auth-method>
<form-login-config>
<form-login-page>/MySecurity/formlogin.html</form-login-page>
<form-error-page>/MySecurity/formerror.html</form-error-page>
</form-login-config>
</login-config>

3. -- create "formlogin.html"
<html>
<body>
<h4>Please login:</h4>
<form method="POST" action="j_security_check">
<input type="text" name="j_username">
<input type="password" name="j_password">
<input type="submit" value="OK">
</form>
</body>
</html>
4. -- create file "formerror.html"
<html>
<body>
<h4>Sorry, your username and password do not match.</h4>
</body>
</html>

Christophe Verré

Sheriff

Posts: 14691

I like...

posted 17 years ago

Number of slices to send:

Optional 'thank-you' note:

Send

You usually don't access the login page directly. In the deployment descriptor, you have to tell the container which resources are secured, and if you try to access them, the container will redirect you automatically to the login page. Try to think about it : if you access the login page directly, when you press the submit button, which page is going to be displayed next ?

[My Blog]
All roads lead to JavaRanch

Grace Yang

Ranch Hand

Posts: 58

posted 17 years ago

Number of slices to send:

Optional 'thank-you' note:

Send

Thanks Satou !!!

As you suggested, I added resouce access constraint, it works, great.

Grace

Everybody! Do the Funky Monkey! Like this tiny ad!

Gift giving made easy with the permaculture playing cards

https://coderanch.com/t/777758/Gift-giving-easy-permaculture-playing