[
https://issues.apache.org/jira/browse/SLING-1472?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12855219#action_12855219
]
Jason Rose commented on SLING-1472:
-----------------------------------
Sorry about the false positive regarding Sakai; I didn't pick up from the JIRA
case that its form auth has a different backend than Sling's.
When I inspect the services installed by the 0.9-SNAPSHOT bundle, I get the
following output:
Apache Sling Form Based Authentication Handler (338) provides:
--------------------------------------------------------------
component.id = 60
component.name = org.apache.sling.formauth.FormAuthenticationHandler
form.auth.name = sling.formauth
form.auth.storage = cookie
form.auth.timeout = 30
form.credentials.name = sling.formauth
form.login.form = /system/sling/form/login
form.token.file = cookie-tokens.bin
objectClass = org.apache.sling.commons.auth.spi.AuthenticationHandler,
org.apache.sling.commons.auth.spi.AuthenticationFeedbackHandler
path = /
service.description = Apache Sling Form Based Authentication Handler
service.id = 375
service.pid = org.apache.sling.formauth.FormAuthenticationHandler
service.vendor = The Apache Software Foundation
----
objectClass = org.apache.sling.jcr.jackrabbit.server.security.LoginModulePlugin
service.description = LoginModulePlugin Support for FormAuthenticationHandler
service.id = 376
service.vendor = The Apache Software Foundation
----
component.id = 61
component.name = org.apache.sling.formauth.AuthenticationFormServlet
objectClass = javax.servlet.Servlet
service.description = Default Login Form for Form Based Authentication
service.id = 377
service.pid = org.apache.sling.formauth.AuthenticationFormServlet
service.vendor = The Apache Software Foundation
sling.auth.requirements = -/system/sling/form/login
sling.servlet.paths = /system/sling/form/login
All of this seems to be correct, but I still get a 404 when I try to GET the
path in my browser or with cURL. Looking at the source for the servlet, it
includes a form that posts to j_security_check with j_username and j_password.
I just think something got lost in the recent auth changes from about 2 weeks
ago, and this code just hasn't been updated yet, because old checkouts of the
trunk on coworkers' machines work just fine.
> Form Auth seems unoperational
> -----------------------------
>
> Key: SLING-1472
> URL: https://issues.apache.org/jira/browse/SLING-1472
> Project: Sling
> Issue Type: Bug
> Components: Extensions
> Environment: sling trunk -r930334 on fuse 4.2
> Reporter: Jason Rose
>
> Installing bundle
> mvn:org.apache.sling/org.apache.sling.formauth/0.9-SNAPSHOT doesn't seem to
> actually provide any functionality.
> curl http://localhost:8181/system/sling/form/login returns a 404.
> The authentication handler itself doesn't seem to provide any login or logout
> support; if I post to /j_security_check with the correct credentials, the
> basic auth handler handles it. I don't know if the form auth code is even
> running at all. Calling /system/sling/logout pops up the basic challenge
> modal in my browser.
> It looks like there was a Sakai bug raised about this a while ago, and they
> fixed it. I don't know if the code was backported, or what.
> http://jira.sakaiproject.org/browse/KERN-716
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
