From: Rohiini N <rohiini.n_at_tcs.com>
Date: Sat, 23 Feb 2008 12:50:07 +0530

Hi sahoo

I have a jsp page called index.jsp. It is my welcome page and it has links
to other pages.
    I have my login pages under the default webpages folder. I want my
login page alone to be secure. and this is my web.xml

 <welcome-file-list>
        <welcome-file>faces/index.jsp</welcome-file>
 </welcome-file-list>


 <security-constraint>
        <display-name>Constraint1</display-name>
        <web-resource-collection>
            <web-resource-name>SecurePages</web-resource-name>
            <description>Secure Pages</description>
            <url-pattern>/*</url-pattern>
            <http-method>GET</http-method>
            <http-method>POST</http-method>
        </web-resource-collection>
        <auth-constraint>
            <description/>
            <role-name>USERS</role-name>
        </auth-constraint>
        <user-data-constraint>
            <description/>
            <transport-guarantee>CONFIDENTIAL</transport-guarantee>
        </user-data-constraint>
      </security-constraint>
      <login-config>
        <auth-method>FORM</auth-method>
        <realm-name>myrealm</realm-name>
        <form-login-config>
            <form-login-page>/login.jsp</form-login-page>
            <form-error-page>/loginError.jsp</form-error-page>
        </form-login-config>
      </login-config>
    <security-role>
        <description/>
        <role-name>USERS</role-name>
    </security-role>


And if i try to put this login.jsp and loginError.jsp under a folder named
logon and use the code as follows

<form-login-config>
            <form-login-page>/logon/login.jsp</form-login-page>
            <form-error-page>/logon/loginError.jsp</form-error-page>
        </form-login-config>
It was not able to read the pages. As a result, it went to index.jsp
without displaying the login.jsp. Why doesnt it read the path? and what
should i do to make my login page alone secure.

Thanks in advance.


Thanks,
Rohiini


 
____________________________________________
=====-----=====-----=====
Notice: The information contained in this e-mail
message and/or attachments to it may contain
confidential or privileged information. If you are
not the intended recipient, any dissemination, use,
review, distribution, printing or copying of the
information contained in this e-mail message
and/or attachments to it are strictly prohibited. If
you have received this communication in error,
please notify us by reply e-mail or telephone and
immediately and permanently delete the message
and any attachments. Thank you