|
| Hi,
if this isn't a question for this newsgroup then pls let me know.
I've got people using word as their default editor with outlook. When
passing links to them via email to pre written secure areas set up in
JSP through SSL I'm being asked to log in as usual, then instead of
the page displaying, they are getting:
HTTP Status 400 - Invalid Direct Reference to form login page
Apache Tomcat 4.1.29
I've had an outside dev team look into it & they have come back to me
with:
When clicking on a hyperlink in Office, the built-in browser to office
requests the secure page from the server. Tomcat knows the user has
not logged in yet because the users' session cookie is missing or out
of date. Tomcat then redirects the browser to the main login page. At
that point the built-in browser creates a new browser and passes it
the URL of the login page. The new browser has a different session so
Tomcat no longer knows where to send the user after they press the
"login" button.
This is why the user gets:
HTTP Status 400 - Invalid Direct Reference to form login page
Apache Tomcat 4.1.29
So I have to now choose whether to let the development team:
Install a 3rd party replacement for Tomcat's form based security which
they say may be possible, or they can completely write a fix in about
a w to 12 days.
Tomcat isn't my strong point, so if anybody can advise me, that would
be good.
If this isn't where I can direct questions like this, the pls advise
where it's possible.
The server is IIS 5, win 2000
cheers
Ita
|
|