strange redirect issue with user-data-constraint

I have a securityfilter-config.xml file with this at the top:


<securityfilter-config>

    <security-constraint>
     <web-resource-collection>
       <web-resource-name>Affiliate Signup page must be secure</web- 
resource-name>
       <url-pattern>/foo/bar/index.jsp</url-pattern>
       <http-method>DELETE</http-method>
       <http-method>GET</http-method>
       <http-method>POST</http-method>
       <http-method>PUT</http-method>
     </web-resource-collection>
     <user-data-constraint>
       <description>SSL required</description>
       <transport-guarantee>CONFIDENTIAL</transport-guarantee>
     </user-data-constraint>

   </security-constraint>

The following security-constraints do not conflict with this one.

The problem I'm seeing is that on our testing and production machines  
the browser gets stuck in an infinite loop.  Hitting the page causes a  
302 Temporarily Moved response to be sent to the browser.  However,  
all of the following response are exactly the same so its telling a  
client that asks for https://www.site.com/foo/bar/index.jsp that the  
page has been moved to https://www.site.com/foo/bar/index.jsp.
   My dev system does not have this problem.  The redirect from  
http:// to http:// works as desired.  All of the systems involved are  
using Tomcat 6.0.18 and the securityfilter.jar that I built from CVS  
the other day.  The only difference between the systems is that my dev  
machine is Mac OS X and the others are Linux.

Any ideas?
   -M@

-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/