Hi,

No, they are not already logged.

Sorry for my bad scenario's description. I try to clear it:
The application is a Web application developed with Spring 2.5
/Spring-Security 2.0.5/ Hibernate 3.2.
At the moment it's running on a remote machine with tomcat 5.5.15 (I
will update it soon) RHEL 4. On the same machine run apache 2.0.*.

Locally I use the browser Firefox 3.6.3 (same problem with IE 8
anyway) and this Word-file with well-formed links:

http//... etc

If I copy and paste one of these links on the browser I redirected to
the login page and after login the right page is displayed (it's a
protected resource).
If I click on this hyperlink directly on word (without be already
logged), broswer is open automatically with login page on. But after
login it return me to the default home page (debugging the application
it happens cos jsessionid changes)

The http.conf is configured for the proxy like this:

ProxyRequests off
ProxyPass mycompany.com localhost:8080
ProxyPassReverse mycompany.com  localhost:8080

this defines how apache changes http to https:

#Load Tomcat Conector Module
LoadModule jk_module modules/mod_jk-apache-2.0.49-linux-i686.so

# Where to find workers.properties
  JkWorkersFile /etc/httpd/conf.d/workers.properties
# Where to put jk shared memory
  JkShmFile     /var/log/httpd/mod_jk-prod2.shm
# Where to put jk logs
  JkLogFile     /var/log/httpd/mod_jk-prod2.log
# Set the jk log level [debug/error/info]
  JkLogLevel    info
# Select the timestamp log format
  JkLogStampFormat "[%a %b %d %H:%M:%S %Y] "

NameVirtualHost  *:80
<VirtualHost *:80>
  ServerName mycompany.com
  ServerAdmin d...@mycompany.com
  JkMount  /main* worker1
  JkMount  /manager* worker1
  #DocumentRoot /var/www/html/maintenance
  DocumentRoot /var/www/html/mvcprox
  RewriteEngine on
  ReWriteCond %{SERVER_PORT} !^443$
  RewriteRule ^/(.*) https://%{HTTP_HOST}/$1 [NC,R,L]
</virtualHost>

<VirtualHost *:80>
  ServerName 192.168.173.19
  ServerAdmin d...@mycompany.com
  DocumentRoot /var/www/html/nightlybuild
</virtualHost>


Listen 88
<VirtualHost *:88>
  ServerName mycompany.com
  DocumentRoot /var/www/html/nightlybuild
</VirtualHost>

finally server.xml for tomcat:

<Server port="8005" shutdown="SHUTDOWN"
 maxHttpHeaderSize="8192"
    maxThreads="150" minSpareThreads="25" maxSpareThreads="75"
    enableLookups="false" redirectPort="8443" acceptCount="100"
    connectionTimeout="20000" disableUploadTimeout="true"
useBodyEncodingForURI="true" >

  <GlobalNamingResources>
    <!-- Used by Manager webapp -->
    <Resource name="UserDatabase" auth="Container"
              type="org.apache.catalina.UserDatabase"
       description="User database that can be updated and saved"
           factory="org.apache.catalina.users.MemoryUserDatabaseFactory"
          pathname="conf/tomcat-users.xml" />
  </GlobalNamingResources>

  <Service name="Catalina">
    <Connector port="8080"
       ProxyName="mycompany.com"
       ProxyPort="80"
     />

    <!-- This is here for compatibility only, not required -->
    <Connector port="8009" protocol="AJP/1.3" redirectPort="8443" />

    <Connector port="8443" maxHttpHeaderSize="8192"
           maxThreads="150" minSpareThreads="25" maxSpareThreads="75"
           enableLookups="false" disableUploadTimeout="true"
           acceptCount="100" scheme="https" secure="true"
           clientAuth="false" sslProtocol="TLS" />

    <Engine name="Catalina" defaultHost="localhost">
      <Realm className="org.apache.catalina.realm.UserDatabaseRealm"
             resourceName="UserDatabase" />
      <Host name="localhost" appBase="/app/mycompany/webapps"
        unpackWARs="true" autoDeploy="true"
       xmlValidation="false" xmlNamespaceAware="false"
       deployXML="true" />
    </Engine>

  </Service>
</Server>

After click on a link, I have something like the session described
before between MS-Word and the server with a specific JSESSIONID in
the headers of the protocols and browser session with another cookie
with different JSESSIONID

thanks,
Julio

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Reply via email to