![](https://csdnimg.cn/release/download_crawler_static/12077032/bg10.jpg)
Spring Security Reference
5.1.0.BUILD-SNAPSHOT Spring Security xvi
44.8. spring-security-openid .................................................................................... 278
44.9. spring-security-taglibs ..................................................................................... 278
45. Proxy Server Configuration ....................................................................................... 280
46. Spring Security FAQ ................................................................................................. 281
46.1. General Questions ......................................................................................... 281
Will Spring Security take care of all my application security requirements? .......... 281
Why not just use web.xml security? ................................................................. 281
What Java and Spring Framework versions are required? ................................. 282
I’m new to Spring Security and I need to build an application that supports
CAS single sign-on over HTTPS, while allowing Basic authentication locally for
certain URLs, authenticating against multiple back end user information sources
(LDAP and JDBC). I’ve copied some configuration files I found but it doesn’t
work. .............................................................................................................. 283
46.2. Common Problems ........................................................................................ 283
When I try to log in, I get an error message that says "Bad Credentials". What’s
wrong? ........................................................................................................... 284
My application goes into an "endless loop" when I try to login, what’s going on?
....................................................................................................................... 284
I get an exception with the message "Access is denied (user is anonymous);".
What’s wrong? ............................................................................................... 285
Why can I still see a secured page even after I’ve logged out of my application?
....................................................................................................................... 285
I get an exception with the message "An Authentication object was not found in
the SecurityContext". What’s wrong? ............................................................... 285
I can’t get LDAP authentication to work. .......................................................... 285
Session Management ..................................................................................... 286
I’m using Spring Security’s concurrent session control to prevent users from
logging in more than once at a time. ............................................................... 286
Why does the session Id change when I authenticate through Spring Security? ... 286
I’m using Tomcat (or some other servlet container) and have enabled HTTPS
for my login page, switching back to HTTP afterwards. ..................................... 286
I’m not switching between HTTP and HTTPS but my session is still getting lost ... 287
I’m trying to use the concurrent session-control support but it won’t let me log
back in, even if I’m sure I’ve logged out and haven’t exceeded the allowed
sessions. ........................................................................................................ 287
Spring Security is creating a session somewhere, even though I’ve configured it
not to, by setting the create-session attribute to never. ...................................... 287
I get a 403 Forbidden when performing a POST ............................................... 287
I’m forwarding a request to another URL using the RequestDispatcher, but my
security constraints aren’t being applied. .......................................................... 288
I have added Spring Security’s <global-method-security> element to my
application context but if I add security annotations to my Spring MVC controller
beans (Struts actions etc.) then they don’t seem to have an effect. ..................... 288
I have a user who has definitely been authenticated, but when I try to access the
SecurityContextHolder during some requests, the Authentication is null. ............. 288
The authorize JSP Tag doesn’t respect my method security annotations when
using the URL attribute. .................................................................................. 288
46.3. Spring Security Architecture Questions ............................................................ 288
How do I know which package class X is in? ................................................... 289
How do the namespace elements map to conventional bean configurations? ...... 289