actually the issue was happening whenever i closed down jboss and restarted it and tried to access a protected page. i determined the issue was because there was a cached copy of one of the pages, so i set the headers on all my jsp's (including the login jsp) to not allow caching and now the error never happens -joe
On 5/1/07, David Smith <[EMAIL PROTECTED]> wrote:
I'm suspecting you either link to /j_security_check or manually forward there from your pages. Pages in your web project shouldn't ever link to it except the login form and even then only in the action attribute of the form tag. Tomcat will take control when it sees a client trying to access a protected resource without a valid session and return the login page. Your code doesn't have to ever do that. --David Joe A wrote: > if i redeploy my webapp and try to access a protected page, it will show > the login > screen but after clicking login it just reloads the login page instead > of sending me to the protected page. if i reload the login page it will > give me access > to the page i wanted. if i fill in user/pass and hit login a 2nd time it > shows: > > HTTP Status 404 - /j_security_check > > type Status report > > message /j_security_check > > description The requested resource (/j_security_check) is not available. > Apache Tomcat/5.5.20 > --------------------------------------------------------------------- To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]