j_security_check error using apache with tomcat

[scswarga]

I am using Apache with jboss 3.2.5. I have my JJP connector setup and have mod_jk configured.
We wish to host the login page on apache and post to j_security.

I have been getting an inconstent behavior on Tomcat. The appliaction lets me login succesfully the first time. However. on subsequent logins I get HTTP Status 404 - /j_security_check error

I invalidate the session every time the user logs out and whenever there is a login error. I have even tried deleting all cookies on logout and when there is a login error.

Does anyone have a fix for te j_security_check error?

[scswarga]

I was debugging further and observed that the savedRequestURL from the org.jboss.web.tomcat.tc4.authenticator.FormAuthenticator was null.
For the first j_security_check, the user was succesfully redirected to the secured web page. But on subsequent logins, the savedRequestURL is returning null.
Does anyone know a fix for this?

[scswarga]

I did not get a response for the j_security_check problem. I fixed the problem by changing the org.jboss.web.tomcat.tc4.authenticator.FormAuthenticator in tomcat to get the j_uri parameter from the request object when the savedRequestURI is null. I made a request to apache to have it fixed and was told that it worked with vanilla Tomcat and is therefore a JBoss issue.

[starksm64]

Since 3.2.5 is using an obsolete version of tomcat, I can't very well tell what version is supposed to work correctly. What is the tomcat bug that states it functions correctly?

[scswarga]

The bug appears to be on JBoss 3.2.7 as well. The request was placed with apache under http://issues.apache.org/bugzilla/show_bug.cgi?id=36108.
There is an option with resin to use the j_uri parameter as the uri to redirect to on successful authentication (refer to http://www.novatoyouthsoccer.org:8080/resin-doc/security/authentication.xtp under Configuration -> j_security_check Parameters)
I wish jboss could have a similar option to overcome the bug.