Form Base Login

Question

Dear programmers
I tries to use form base login and unfortuanetly nothing happen.
I have written this little form:
<form method="post" action="j_security_check">
     <table width="80%">
          <tr>
               <td width="20%" align="right">
                    UserId:
               </td>
               <td>
                    <input size="20" type="text" name="j_username" maxlength="25">                    
               </td>
          </tr>
          <tr>
               <td align="right">
                    Password:
               </td>
               <td>
                    <input size="20" type="password" name="j_password" maxlength="25">
               </td>
          </tr>
          <tr>
               <td></td>
               <td>
                    <input type="submit" name="action" value="Login"> �
                    <input type="reset" name="reset" value="Clear">                    
               </td>
     </table>
</form>and configured the web.xml this way:
<login-config>
     <auth-method>FORM</auth-method>
     <form-login-config>
          <form-login-page>/jsp/login.jsp</form-login-page>
          <form-error-page>/jsp/error.jsp</form-error-page>
     </form-login-config>
</login-config>I did everything like in the example of http://www.redbooks.ibm.com/abstracts/tips0220.html?Open
I expected that when I'll try to navigate a page in my application, I'll be automatically redireced to the login page. Unfortuanetly it didn't happen.
Did I do something wrong?
Should I do something on the server? (I use websphere 5.1.2).

Answer 1

Hi adslyl, thanks for the reply.
I have defined the following security-constrain:
<security-constraint>
     <web-resource-collection>
          <web-resource-name>(New Web Resource Collection)</web-resource-name>
          <description></description>
          <url-pattern>/faces/*</url-pattern>
          <http-method>GET</http-method>
          <http-method>POST</http-method>
     </web-resource-collection>
</security-constraint>But it seems that it doesn't help. If I understand it correctly every reference to doGet() or doPost() should perform this security mechanism. Am I right?