Index: lams_common/src/java/org/lamsfoundation/lams/web/session/LoginFormAuthenticator.java =================================================================== diff -u -r0b91d14af990013a1f529eca5d701ebe37a5fc73 -r69f71732ee88c23ac8989c8e82070a6402b59fb5 --- lams_common/src/java/org/lamsfoundation/lams/web/session/LoginFormAuthenticator.java (.../LoginFormAuthenticator.java) (revision 0b91d14af990013a1f529eca5d701ebe37a5fc73) +++ lams_common/src/java/org/lamsfoundation/lams/web/session/LoginFormAuthenticator.java (.../LoginFormAuthenticator.java) (revision 69f71732ee88c23ac8989c8e82070a6402b59fb5) @@ -26,7 +26,16 @@ import org.apache.catalina.connector.Request; import org.apache.catalina.connector.Response; import org.apache.catalina.deploy.LoginConfig; - +/** + * This class is special for JBOSS/Tomcat. + * + * The resson is JBOSS ignores any Filter if j_security_checks submit. It becomes impossilble to preset the current + * session ID to UniversialLoginModule. This class will replace default SystemSessionFilter setting. + * + * @author Steve.Ni + * + * $version$ + */ public class LoginFormAuthenticator extends FormAuthenticator{ public boolean authenticate(Request request, Response response, LoginConfig config) throws IOException {