[jboss-user] [Security & JAAS/JBoss] - Where is the destination url stored?

I have an issue, similar to others here, where my default page is sometimes my login.html page. If this is the case, when I log into the web app, I get the 400 Invalid direct reference message because to j_security_check, the destination page is also the log in page. Here is my login-config section of web.xml <login-config> <auth-method>FORM</auth-method> <realm-name>blah</realm-name> <form-login-config> <form-login-page>/common/login.html</form-login-page> <form-error-page>/common/loginerror.jsp</form-error-page> </form-login-config> </login-config> Where does JBoss store the URL it uses after a successful login? I want to check this to see it is set, in the case of someone bookmarking the login.html page, and if it is set to the login.html page explicitly. Can anyone help here? View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3959320#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...