a configurable login submit form pattern can be used,

a user can either user /j_security_check or whatever they wish e.g. /logMeIn.

diff --git a/web/blank/WEB-INF/web.xml b/web/blank/WEB-INF/web.xml
index d181163..3ef198f 100644 (file)
--- a/web/blank/WEB-INF/web.xml
+++ b/web/blank/WEB-INF/web.xml
@@ -19,6 +19,14 @@
          <param-value>true</param-value>
          <description>Validate config file if set to true</description>
       </init-param>
+      <init-param>
+         <param-name>formPattern</param-name>
+         <param-value>/logMeIn</param-value>
+         <description>
+            As an example a login form can define "logMeIn" as it action in place of the standard
+            "j_security_check" which is a special flag user by app servers for container managed security.
+         </description>
+      </init-param>
    </filter>
 
    <!-- map all requests to the SecurityFilter, control what it does with configuration settings -->

diff --git a/web/share/WEB-INF/web.xml b/web/share/WEB-INF/web.xml
index a094913..286764e 100644 (file)
--- a/web/share/WEB-INF/web.xml
+++ b/web/share/WEB-INF/web.xml
@@ -19,6 +19,14 @@
          <param-value>true</param-value>
          <description>Validate config file if set to true</description>
       </init-param>
+      <init-param>
+         <param-name>formPattern</param-name>
+         <param-value>/logMeIn</param-value>
+         <description>
+            As an example a login form can define "logMeIn" as it action in place of the standard
+            "j_security_check" which is a special flag user by app servers for container managed security.
+         </description>
+      </init-param>
    </filter>
 
    <!-- map all requests to the SecurityFilter, control what it does with configuration settings -->
@@ -27,6 +35,17 @@
       <url-pattern>/*</url-pattern>
    </filter-mapping>
 
+   <servlet>
+      <servlet-name>NoResponseServlet</servlet-name>
+      <description>For Orion only</description>
+      <servlet-class>org.securityfilter.dummy.NoResponseServlet</servlet-class>
+   </servlet>
+
+   <servlet-mapping>
+      <servlet-name>NoResponseServlet</servlet-name>
+      <url-pattern>/logMeIn</url-pattern>
+   </servlet-mapping>
+
    <!-- make the session time-out after one minute -->
    <session-config>
       <session-timeout>1</session-timeout>