I am trying to develop a sample application and authenticating it using Apache LDAP Server. Here are my enteries for login-config.xml file <application-policy name="MoITWeb"> | <authentication> | <login-module code="org.jboss.security.auth.spi.LdapLoginModule" flag="required"> | <module-option name="java.naming.factory.initial"> | com.sun.jndi.ldap.LdapCtxFactory | </module-option> | <module-option name="java.naming.provider.url"> | ldap://localhost:10389/ | </module-option> | <module-option name="java.naming.security.authentication"> | simple | </module-option> | <module-option name="java.naming.security.credentials"> | clear-text password | </module-option> | <module-option name="principalDNPrefix">uid=</module-option> | <module-option name="principalDNSuffix"> | ,ou=People,dc=example,dc=com | </module-option> | <module-option name="rolesCtxDN"> | ou=Roles,dc=example,dc=com | </module-option> | <module-option name="uidAttributeID">member</module-option> | <module-option name="matchOnUserDN">true</module-option> | <module-option name="roleAttributeID">cn</module-option> | <module-option name="roleAttributeIsDN">false</module-option> | <module-option name="searchTimeLimit">5000</module-option> | <module-option name="searchScope">ONELEVEL_SCOPE</module-option> | </login-module> | </authentication> | </application-policy> My web.xml file is this <web-app> | <welcome-file-list> | <welcome-file>index.jsp</welcome-file> | </welcome-file-list> | <security-constraint> | <display-name>ValidUser</display-name> | <web-resource-collection> | <web-resource-name>Resources</web-resource-name> | <url-pattern>/security/success.jsp</url-pattern> | <http-method>GET</http-method> | <http-method>POST</http-method> | </web-resource-collection> | <auth-constraint> | <description>ValidUser</description> | <!--<role-name>ValidUser</role-name>--> | <role-name>JBossAdmin</role-name> | </auth-constraint> | </security-constraint> | <security-constraint> | <web-resource-collection> | <web-resource-name>Setup(admin) Section</web-resource-name> | <description>For all authorized user</description> | <url-pattern>/security/*</url-pattern> | <http-method>GET</http-method> | <http-method>POST</http-method> | </web-resource-collection> | <auth-constraint> | <description> | Allow access for both default and enterprise users | </description> | <role-name>JBossAdmin</role-name> | </auth-constraint> | </security-constraint> | <security-role> | <description>ValidUser</description> | <role-name>JBossAdmin</role-name> | </security-role> | | <login-config> | <auth-method>FORM</auth-method> | <realm-name>MoITWeb</realm-name> | <form-login-config> | <form-login-page>/security/login.jsp</form-login-page> | <form-error-page>/security/error.jsp</form-error-page> | </form-login-config> | </login-config> | | </web-app>here are my pages index.jsp /security/login.jsp /security/error.jsp /security/succss.jsp here is code for login.jsp <form method="POST" action='<%=response.encodeURL("j_security_check")%>' > | <table cellpadding="2" border="0" cellspacing="0"> | <tr> | <td align="right">Username:</td> | <td align="left"><input type="text" name="j_username" size="20"></td> | </tr> | <tr> | <td align="right">Password:</td> | <td align="left"><input type="password" name="j_password" size="20"></td> | </tr> | <tr> | <td align="right"><input type="submit" value="Log In"></td> | <td align="left"><input type="reset"></td> | </tr> | </table> | </form> I have set the security domain in jboss-web.xml as <jboss-web> | <security-domain>java:/jaas/MoITWeb</security-domain> | </jboss-web> Where ever i try to run the application, login page appears. I have give user and password, If password is woring I am redirected to error.jsp, but if both user name and password are correct server gives an error Invalid direct reference to form login page The request sent by the client was syntactically incorrect (Invalid direct reference to form login page). I am trying to solve this issue from last 5 days but unable to find any solution. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4171412#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...