Can someone tell me please why Websphere cannot locate the logon.jsp:
Below is the setup in web.xml for the form based authentication.
the logon.jsp is at the same level of /main off the context root.
<context-rrot>
logon.jsp
error.jsp
main/
...
if I try the url <context-root>/main, then I can get the login.jsp, after loing on, then I can go anywhere since I am authenticated.
but if I tried <context-root>/main/dispatcher.do or any thing like <context-root>/main/retailer.jsp ,
the application enters a inifinite loop searching ofr the login.jsp !!!
Same thing happens if I logged out, after logging out the user, I would like to redirect the user to the login page, again the application enters the inifite loop looking for the login.jsp
Can someone tell me why. Thanks in advance
Binh
<security-constraint id="SecurityConstraint_1">
<web-resource-collection id="WebResourceCollection_1">
<web-resource-name>fn access</web-resource-name>
<url-pattern>/main/*</url-pattern>
<http-method>POST</http-method>
<http-method>GET</http-method>
</web-resource-collection>
<auth-constraint id="AuthConstraint_1">
<description>fn access:+:</description>
<role-name>fnUser</role-name>
</auth-constraint>
<user-data-constraint id="UserDataConstraint_1">
<transport-guarantee>NONE</transport-guarantee>
</user-data-constraint>
</security-constraint>
<login-config id="LoginConfig_1">
<auth-method>FORM</auth-method>
<realm-name>dbRealm</realm-name>
<form-login-config id="FormLoginConfig_1">
<form-login-page>/logon.jsp</form-login-page>
<form-error-page>/error.jsp</form-error-page>
</form-login-config>
</login-config>
<security-role id="SecurityRole_1">
<role-name>fnUser</role-name>
</security-role>
