j_security_check - Invalid username or password message

[John Fairbairn]

Hi,
I'm using j_security_check in my web application deployed on jboss3.0.4-tomcat4.1.12. On a successful login, the user is redirected to the protected resource. On an invalid login, I'd like a message displayed on the login.jsp. The login.jsp is both my login page and error page.
<login-config>
<auth-method>FORM</auth-method>
<form-login-config>
<form-login-page>/jsp/login.jsp</form-login-page>
<form-error-page>/jsp/login.jsp</form-error-page>
</form-login-config>
</login-config>
Thanks,
John

[Pradeep bhatt]

Pass a query paramter to the failed page say failed=true as shown below

 <login-config>
<auth-method>FORM</auth-method>
<form-login-config>
<form-login-page>/jsp/login.jsp</form-login-page>
[B]<form-error-page>/jsp/login.jsp?failed=true</form-error-page>[/B]
</form-login-config>
</login-config> 

Check for failed=true in the jsp and display the error message.

[John Fairbairn]

Perfect. Can't believe I didn't think of it. Thanks.

[Abhijeet Deshmukh]

hi pradip,

i am still confused about form auth, using j_security_check after succefull login how web server know which is home page i mean which do we hv any thing where we can specify home page.

Thanks & Regards
Abhijeet

[Prakas Subed]

To extend this question further...
I wonder if Tomcat/JBoss provide a way to pass actual reason/root cause behind the failure to the login JSP as a param. For our internal/ad hoc system this is desired.

Thanks,

Originally posted by abhijit deshmukh:
hi pradip,

i am still confused about form auth, using j_security_check after succefull login how web server know which is home page i mean which do we hv any thing where we can specify home page.

Thanks & Regards
Abhijeet

[Ulf Dittmer]

What other reasons might that be? The authentication simply checks that the username/password combination passed to the server exist. If it doesn't, the error page is shown. Are you thinking of conditions like "user database not accessible" ?

[PrachiS Shah]

This is working okay. But when the user refreshes the page without filling any data then also the error page gets called and the error message is displayed...Please help

[PrachiS Shah]

Pradeep bhatt wrote:Pass a query paramter to the failed page say failed=true as shown below

 <login-config>
<auth-method>FORM</auth-method>
<form-login-config>
<form-login-page>/jsp/login.jsp</form-login-page>
[B]<form-error-page>/jsp/login.jsp?failed=true</form-error-page>[/B]
</form-login-config>
</login-config> 

Check for failed=true in the jsp and display the error message.

This is working okay. But when the user refreshes the page without filling any data then also the error page gets called and the error message is displayed...Please help