You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@struts.apache.org by Richard Mixon <rn...@custco.biz> on 2003/06/07 07:16:57 UTC

Double login with CMA and struts

I am having a problem in that after my initial login, one or two requests
later, I am prompted to login again. Its really vexing, I've looked
everywhere.

Any ideas on what might be causing this. ACTUALLY I would like to know how
to make it do this on purpose. I need a way of logging the user off - the
session.invalidate() API does not handle container authentication and the
session.logout is not available until servlet 2.4.

Anyway, I am using a Servlet filter to wrap my application. It makes it easy
to
1) Obtain and close database connections (actually I use Hibernate);
2) Make sure that my application context objects (looked up at logon) are
stored in the Http session.

I am also using container managed authentication (CMA) with Tomcat 4.1.24. I
used Matt Raible's Struts-Resume application as a template. The form invokes
a login servlet that handles protocol switching (http to https), but I am
not using that at the time (plus it has not changed at all).

A little while ago, I started noticing the second login prompt a couple of
weeks ago. I've gone through all of my changes and backed out the ones that
are even close to having to do with the filter or my login servlet.

Thanks in advance - Richard



---------------------------------------------------------------------
To unsubscribe, e-mail: struts-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: struts-user-help@jakarta.apache.org