J_Security_check fails on fwd from another IP ?

Question

          Hey guys...
          I am using WLS70sp1
          I have in production a iplanet webserver
          When the users directly come to the webserver , they see the login page and can
          login.
          But if they come to another URL, which just redirects to the webserver they can
          see the login page but when they try to login with username/password , it fails
          with ".....j_security_check" in the URL.
          Any clue whatz missing if the request gets redirected from another server ?
          Thanx,
          Krish
          

Answer 1

>
I have in production a iplanet webserver
When the users directly come to the webserver , they see the login pageand can
login.
But if they come to another URL, which just redirects to the webserverthey can
see the login page but when they try to login with username/password , itfails
with ".....j_security_check" in the URL.I believe that Servlet 2.3 explicitly prohibits this action. From section
12.5.3
In order for the authentication to proceed appropriately,
the action of the login form must
always be 'j_security_check'. This restriction is made
so that the login form will always work no matter what the resource is
that
requests it and avoids requiring that the server to process the outbound
form to correct the action field.
So you can not cannot forward/redirect a request to j_security_check.
-utpal