RE: Multiple Datasources

[BinhMinh Nguyen <st...@yahoo.com>]

I have a strange problem, can someone tell me what is
wrong?

I use form based authentication with Websphere using
custom registry,
setup in web.xml is as below.

when I tried to access a protected resource URL,
http://bhn.gers.com:9080/furnnet/main/dispatcher.do,
since everything
under dir "/main" is defined to be protected in the
web.xml, I was
brought to the login page as expected, after submit
the form with the
j_username and j_password, I got a 404 file not found,
as below,
but in fact the user had been authenticated because if
I resubmit the
same URL link, I was able to access that URL link.
Can someon tell me what is wrong with it or my setup?
thanks

Binh

<security-constraint id="SecurityConstraint_1">
         <web-resource-collection
id="WebResourceCollection_1">
            <web-resource-name>fn
access</web-resource-name>            
            <url-pattern>/main/*</url-pattern>
            
            <http-method>POST</http-method>
            <http-method>GET</http-method>
         </web-resource-collection>
         <auth-constraint id="AuthConstraint_1">
            <description>fn access:+:</description>
            <role-name>fnUser</role-name>
         </auth-constraint>
         <user-data-constraint
id="UserDataConstraint_1">
           
<transport-guarantee>NONE</transport-guarantee>
         </user-data-constraint>
      </security-constraint>
      <login-config id="LoginConfig_1">
         <auth-method>FORM</auth-method>
         <realm-name>dbRealm</realm-name>
         <form-login-config id="FormLoginConfig_1">
           
<form-login-page>/logon.html</form-login-page>
           
<form-error-page>/error.jsp</form-error-page>
         </form-login-config>
      </login-config>
      <security-role id="SecurityRole_1">
         <role-name>fnUser</role-name>
      </security-role>

__________________________________________________
Do You Yahoo!?
Try FREE Yahoo! Mail - the world's greatest free email!
http://mail.yahoo.com/

--
To unsubscribe, e-mail:   <ma...@jakarta.apache.org>
For additional commands, e-mail: <ma...@jakarta.apache.org>