Is HTTP BASIC authentication broken in JBoss-3.2.2RC4_Tomcat-4.1.27? Using UsersRolesLoginModule seems not to work reliably as a replacement for Tomcat's MemoryRealm, at least in the scenario I outlined in my original post four days ago.
-- Weiqi Gao [EMAIL PROTECTED] On Fri, 2003-10-10 at 20:28, Weiqi Gao wrote: > Hi, > > I'm trying to setup Simon Brown's Weblog software Pebble 1.3 > (http://www.simongbrown.com/blog/readme.html) under JBoss+Tomcat bundle > and encountered some difficulties that maybe are related to the way > JBoss does authentication for webapps. > > Deployment-wise, Pebble is very simple. I downloaded the pebble-1.3.war > file and exploded it into the > jboss-3.2.1_tomcat-4.1.24/server/default/deploy directory. > > The Pebble deployment instruction calls for adding two roles and a user > to standalone Tomcat's tomcat-users.xml file. > > I mimicked that with two things in JBoss. First, I set up a JBossSX > realm named "blog" using the UsersRolesLoginModule with a user (in > users.properties) and two roles (in roles.properties). Second, I added > a jboss-web.xml file to pebble-1.3.war/WEB-INF that contains > <jboss-web><security-domain>java:jaas/blog</security-domain></jboss-web>. > > This allowed the Pebble to run. (Actually I've been using Pebble 1.1 > for the past three months with some success under JBoss 3.2.1 + Tomcat > 4.1.24, RH Linux 9.0 and Sun JDK 1.4.2_01.) > > However certain features of Pebble are missing in JBoss+Tomcat that are > present in standalone Tomcat. One example is the comments popup > window. Under standalone Tomcat, if I have already logged in, the > comments popup window would contain a "remove" link besides each > comment. Under JBoss+Tomcat, even after logging in, the comments popup > window would not contain the "remove" links. > > It also happens with the TrackBack popup window in the CVS version of > Pebble. In general all servlets and JSP pages that does not require > user login, but offers more features if the user is logged in would show > the extra features in standalone Tomcat but not in JBoss+Tomcat. > > I would appreciate it very much if anyone can shed some light on my > problem. > > (I tried to post this earlier today on GMANE's news-mailing list gateway > but I did not see it show up. I apologize if yo have already seen > this.) -- Weiqi Gao [EMAIL PROTECTED] http://www.weiqigao.com ------------------------------------------------------- This SF.net email is sponsored by: SF.net Giveback Program. SourceForge.net hosts over 70,000 Open Source Projects. See the people who have HELPED US provide better services: Click here: http://sourceforge.net/supporters.php _______________________________________________ JBoss-Development mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/jboss-development
