Hi, No, they are not already logged.
Sorry for my bad scenario's description. I try to clear it: The application is a Web application developed with Spring 2.5 /Spring-Security 2.0.5/ Hibernate 3.2. At the moment it's running on a remote machine with tomcat 5.5.15 (I will update it soon) RHEL 4. On the same machine run apache 2.0.*. Locally I use the browser Firefox 3.6.3 (same problem with IE 8 anyway) and this Word-file with well-formed links: http//... etc If I copy and paste one of these links on the browser I redirected to the login page and after login the right page is displayed (it's a protected resource). If I click on this hyperlink directly on word (without be already logged), broswer is open automatically with login page on. But after login it return me to the default home page (debugging the application it happens cos jsessionid changes) The http.conf is configured for the proxy like this: ProxyRequests off ProxyPass mycompany.com localhost:8080 ProxyPassReverse mycompany.com localhost:8080 this defines how apache changes http to https: #Load Tomcat Conector Module LoadModule jk_module modules/mod_jk-apache-2.0.49-linux-i686.so # Where to find workers.properties JkWorkersFile /etc/httpd/conf.d/workers.properties # Where to put jk shared memory JkShmFile /var/log/httpd/mod_jk-prod2.shm # Where to put jk logs JkLogFile /var/log/httpd/mod_jk-prod2.log # Set the jk log level [debug/error/info] JkLogLevel info # Select the timestamp log format JkLogStampFormat "[%a %b %d %H:%M:%S %Y] " NameVirtualHost *:80 <VirtualHost *:80> ServerName mycompany.com ServerAdmin d...@mycompany.com JkMount /main* worker1 JkMount /manager* worker1 #DocumentRoot /var/www/html/maintenance DocumentRoot /var/www/html/mvcprox RewriteEngine on ReWriteCond %{SERVER_PORT} !^443$ RewriteRule ^/(.*) https://%{HTTP_HOST}/$1 [NC,R,L] </virtualHost> <VirtualHost *:80> ServerName 192.168.173.19 ServerAdmin d...@mycompany.com DocumentRoot /var/www/html/nightlybuild </virtualHost> Listen 88 <VirtualHost *:88> ServerName mycompany.com DocumentRoot /var/www/html/nightlybuild </VirtualHost> finally server.xml for tomcat: <Server port="8005" shutdown="SHUTDOWN" maxHttpHeaderSize="8192" maxThreads="150" minSpareThreads="25" maxSpareThreads="75" enableLookups="false" redirectPort="8443" acceptCount="100" connectionTimeout="20000" disableUploadTimeout="true" useBodyEncodingForURI="true" > <GlobalNamingResources> <!-- Used by Manager webapp --> <Resource name="UserDatabase" auth="Container" type="org.apache.catalina.UserDatabase" description="User database that can be updated and saved" factory="org.apache.catalina.users.MemoryUserDatabaseFactory" pathname="conf/tomcat-users.xml" /> </GlobalNamingResources> <Service name="Catalina"> <Connector port="8080" ProxyName="mycompany.com" ProxyPort="80" /> <!-- This is here for compatibility only, not required --> <Connector port="8009" protocol="AJP/1.3" redirectPort="8443" /> <Connector port="8443" maxHttpHeaderSize="8192" maxThreads="150" minSpareThreads="25" maxSpareThreads="75" enableLookups="false" disableUploadTimeout="true" acceptCount="100" scheme="https" secure="true" clientAuth="false" sslProtocol="TLS" /> <Engine name="Catalina" defaultHost="localhost"> <Realm className="org.apache.catalina.realm.UserDatabaseRealm" resourceName="UserDatabase" /> <Host name="localhost" appBase="/app/mycompany/webapps" unpackWARs="true" autoDeploy="true" xmlValidation="false" xmlNamespaceAware="false" deployXML="true" /> </Engine> </Service> </Server> After click on a link, I have something like the session described before between MS-Word and the server with a specific JSESSIONID in the headers of the protocols and browser session with another cookie with different JSESSIONID thanks, Julio --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org