Skip to Main Content

Java EE (Java Enterprise Edition) General Discussion

Announcement

For appeals, questions and feedback about Oracle Forums, please email oracle-forums-moderators_us@oracle.com. Technical questions should be asked in the appropriate category. Thank you!

Invalid direct reference to form login page

843833Aug 5 2005 — edited Nov 14 2005
Hi

I have developed a WEB application that uses form based authentication.
I am using SUN AS PE 8.1. Sometimes after I enter password and login name it displays this error. I happens very rarely and it's not possible to reproduce this problem in a predictable way.

HTTP Status 400

The request sent by the client was syntactically incorrect. Invalid direct reference to form login page.


I am not trying to access it directly. I have WinXp firewall disabled.
The problem happens with both IE and FF. And I haven't disabled cookies, of course. Also I don't think it's related with client pc/browser configuration, because it happens from several PC's accessing this application. Including laptop in conference room where we show this app. to our customers. :-)

The problem appears in log file like this:

127.0.0.1 - - [03/Aug/2005:13:33:11 +0200] "POST /Gateway/j_security_check HTTP/1.1" 400 1085

I have checked app. server log files and there are no errors at that time. Except maybe this, but it seems it happened later.

[#|2005-08-03T13:33:24.263+0300|INFO|sun-appserver-pe8.1_02|javax.enterprise.system.container.web|_ThreadID=16;|Unable to find a <servlet-name> element which map: /Gateway/|#]


What does 1085 mean ? Is it some extra error code ?

I have tried to put this in login.jsp, but it haven't helped.
<%
    response.setHeader("Cache-Control","no-cache");
    response.setHeader("Pragma","no-cache");
    response.setDateHeader ("Expires", 0);
%> 
My login config:
  <login-config>
    <auth-method>FORM</auth-method>
    <realm-name>TxGatewayRDBMSRealm</realm-name>
    <form-login-config>
      <form-login-page>/login.jsp</form-login-page>
      <form-error-page>/errorPage/LoginFailed.jsp</form-error-page>
    </form-login-config>
  </login-config>
If this will happen in production server often (which of course is Linux) then our customer may ask to migrate to the dark side - jboss. I would not be very excited about it. :-)
Comments
Locked Post
New comments cannot be posted to this locked post.
Post Details
Locked on Dec 12 2005
Added on Aug 5 2005
6 comments
2,009 views