Invalid direct reference to form login page

[Pedro Garcia]

Hi.
I configure my tomcat 4.1.18 to managed JRealm security.
here is my server.xml configuration

      <!-- Oracle DB01 access control -->
      <Realm  className="org.apache.catalina.realm.JDBCRealm" debug="99"
             driverName="oracle.jdbc.driver.OracleDriver"
          connectionURL="jdbc :-o	 racle:thin:@myserver:1521 :mrgreen: b01"
         connectionName="scott" connectionPassword="tiger"
              userTable="users" userNameCol="username" userCredCol="password"
          userRoleTable="user_roles" roleNameCol="rolename" />

When I run the protected example and login as an user without the role, send me next error.

HTTP Status 400 - Invalid direct reference to form login page
type Status report
message Invalid direct reference to form login page
description The request sent by the client was syntactically incorrect
(Invalid direct reference to form login page).

This is my web.xml restrictions

 
    <security-constraint>
      <display-name>Ejemplo de restriccion de Seguridad</display-name>
      <web-resource-collection>
         <web-resource-name>Protected Area</web-resource-name>
         <url-pattern>/protected/*</url-pattern>
     <http-method>DELETE</http-method>
         <http-method>GET</http-method>
         <http-method>POST</http-method>
   <http-method>PUT</http-method>
      </web-resource-collection>
      <auth-constraint>
           <role-name>manager</role-name>
      </auth-constraint>
      <user-data-constraint><transport-guarantee>NONE</transport-guarantee></user-data-constraint>
    </security-constraint>
   <!-- Default login configuration uses form-based authentication -->
    <login-config>
      <auth-method>FORM</auth-method>
      <realm-name>Ejemplo de restriccion de Seguridad</realm-name>
      <form-login-config>
        <form-login-page>/login.jsp</form-login-page>
        <form-error-page>/error.jsp</form-error-page>
      </form-login-config>
    </login-config>
    <security-role>
        <description> Un Administrador </description>
        <role-name>
            manager
        </role-name>
    </security-role>
 

I call in my login page
<form method="POST" action='<%= response.encodeURL("j_security_check") %>' >
How can I validate or managed this exceptions?

[Pedro Garcia]

The same problem persists with new tomcat versions.
Somebody know how to fix that?