[JBoss-user] [Security JAAS/JBoss] - Re: Problems with FORM Authentication
guess somebody took the pin out of their little voodoo doll of your jboss server. Actually I had some baffling experiences before I sorted out the TRACE logging. a href=http://www.jboss.org/index.html?module=bbop=viewtopicp=3826125#3826125;View the original post/a a href=http://www.jboss.org/index.html?module=bbop=postingmode=replyp=3826125Reply to the post/a --- This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CEO of GenToo technologies. Learn everything from fundamentals to system administration.http://ads.osdn.com/?ad_id=1470alloc_id=3638op=click ___ JBoss-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/jboss-user
[JBoss-user] [Security JAAS/JBoss] - Re: Problems with FORM Authentication
Don, I'm assuming from your comments that the BASIC login causes the LoginModule to output heaps of successful login messages, and that when you change it to FORM, your LoginModule goes quiet. To me this says that your login form HTML is wrong. Are you sure you have spelt the j_username and j_password field names correctly, and the j_security_check form action? Adam a href=http://www.jboss.org/index.html?module=bbop=viewtopicp=3825928#3825928;View the original post/a a href=http://www.jboss.org/index.html?module=bbop=postingmode=replyp=3825928Reply to the post/a --- This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CEO of GenToo technologies. Learn everything from fundamentals to system administration.http://ads.osdn.com/?ad_id=1470alloc_id=3638op=click ___ JBoss-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/jboss-user
[JBoss-user] [Security JAAS/JBoss] - Re: Problems with FORM Authentication
I do not get it. I added category name=org.jboss.security
| priority value=TRACE class=org.jboss.logging.XLevel/
|/category
| to my log4j.xml as Scott Stark recommended. The FORM authentication is now
working as expected. Below are snippets from the configuration file and login.jsp
from the working FORM authentication.
login-config.xmlapplication-policy name = client-login
|authentication
| login-module code = org.jboss.security.ClientLoginModule
| flag = required
| /login-module
| login-module code = com.fdsolutions.security.module.LoginModule
| flag = required
| /login-module
|/authentication
| /application-policy
jboss-web.xmljboss-web
|
|security-domainjava:/jaas/client-login/security-domain
|context-root/myapp/context-root
|
|!-- Resource Environment References --
|
|!-- Resource references --
|
|!-- EJB References --
|
| /jboss-web
web.xmlsecurity-constraint
| display-nameServer Configuration Security Constraint/display-name
| web-resource-collection
| web-resource-nameProtected Area/web-resource-name
| url-pattern*.jsp/url-pattern
| url-pattern*.do/url-pattern
| /web-resource-collection
| auth-constraint
| role-nameuser/role-name
| /auth-constraint
| user-data-constraint
| transport-guaranteeNONE/transport-guarantee
| /user-data-constraint
| /security-constraint
| login-config
| auth-methodFORM/auth-method
| realm-nameFDS/realm-name
| form-login-config
| form-login-page/login.jsp/form-login-page
| form-error-page/login-error.html/form-error-page
| /form-login-config
| /login-config
| security-role
| descriptionThe role that is required to log in to the
application/description
| role-nameuser/role-name
| /security-role
login.jsp%@ page language=java isThreadSafe=true isErrorPage=false %
|
| html locale=true
| SCRIPT language=JavaScript
| !--
| top.location.target = _top
| if ( window.location.target != _top ) {
| top.location.href = window.location.href
| }
| // --
| /SCRIPT
| head
| titleFirst Degree Solutions, LLC/title
| link rel=StyleSheet href=myapp.css type=text/css media=screen
| /head
| body
| h1Login/h1
| br/
| center
| form method=POST action='%= response.encodeURL(
j_security_check ) %'
| table
| tr
| thUsername:/th
| tdinput type=text
name=j_username size=15//td
| /tr
| tr
| thPassword:/th
| tdinput type=password
name=j_password size=15//td
| /tr
| tr/
| tr
| td colspan=2 align=right
| input type=submit
value=Submit/
| /td
| /tr
| /table
| /form
| /center
| /body
| /html
a
href=http://www.jboss.org/index.html?module=bbop=viewtopicp=3826021#3826021;View
the original post/a
a
href=http://www.jboss.org/index.html?module=bbop=postingmode=replyp=3826021Reply
to the post/a
---
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470alloc_id=3638op=click
___
JBoss-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/jboss-user
[JBoss-user] [Security JAAS/JBoss] - Re: Problems with FORM Authentication
I wish that I could get an answer on this issue. I know that there is a duh in the configuration but I cannot find it. Based on the number times this posting has been viewed, I assume that it is a common question. a href=http://www.jboss.org/index.html?module=bbop=viewtopicp=3825792#3825792;View the original post/a a href=http://www.jboss.org/index.html?module=bbop=postingmode=replyp=3825792Reply to the post/a --- This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CEO of GenToo technologies. Learn everything from fundamentals to system administration.http://ads.osdn.com/?ad_id=1470alloc_id=3638op=click ___ JBoss-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/jboss-user
[JBoss-user] [Security JAAS/JBoss] - Re: Problems with FORM Authentication
You have added no new information in the last few additions to this thread, so try showing the server.log messages from the login. To get more out of the security layer enable trace level logging and ensure the server.log FILE appender does not have a Threshold setting. |category name=org.jboss.security | priority value=TRACE class=org.jboss.logging.XLevel/ |/category | a href=http://www.jboss.org/index.html?module=bbop=viewtopicp=3825820#3825820;View the original post/a a href=http://www.jboss.org/index.html?module=bbop=postingmode=replyp=3825820Reply to the post/a --- This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CEO of GenToo technologies. Learn everything from fundamentals to system administration.http://ads.osdn.com/?ad_id=1470alloc_id=3638op=click ___ JBoss-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/jboss-user
[JBoss-user] [Security JAAS/JBoss] - Re: Problems with FORM Authentication
I have been out-of-pocket and without Internet access. My primary objective is to use FORM Authentication. I do not necessarily need to use my custom login module. I only created it because the DatabaseLoginServerModule was not logging enough tracing information. The central issue is that whenever I try to use FORM Authentication the logging always fails redirecting to the form-error-page. It appears that j_security_check never uses the specified security-domain. Is there something missing from the snippets that I originally provided? a href=http://www.jboss.org/index.html?module=bbop=viewtopicp=3824647#3824647;View the original post/a a href=http://www.jboss.org/index.html?module=bbop=postingmode=replyp=3824647Reply to the post/a --- This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CEO of GenToo technologies. Learn everything from fundamentals to system administration.http://ads.osdn.com/?ad_id=1470alloc_id=3638op=click ___ JBoss-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/jboss-user
[JBoss-user] [Security JAAS/JBoss] - Re: Problems with FORM Authentication
about should read above View the original post : http://www.jboss.org/index.html?module=bbop=viewtopicp=3823419#3823419 Reply to the post : http://www.jboss.org/index.html?module=bbop=postingmode=replyp=3823419 --- SF.Net is sponsored by: Speed Start Your Linux Apps Now. Build and deploy apps Web services for Linux with a free DVD software kit from IBM. Click Now! http://ads.osdn.com/?ad_id=1356alloc_id=3438op=click ___ JBoss-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/jboss-user
[JBoss-user] [Security JAAS/JBoss] - Re: Problems with FORM Authentication
What are you trying to achieve here - not the work arounds etc, but your initial objective? I have form based auth working with DatabaseLoginServerModule, mainly thanks to the paper I mentioned about, that Scott wrote. Martin View the original post : http://www.jboss.org/index.html?module=bbop=viewtopicp=3823418#3823418 Reply to the post : http://www.jboss.org/index.html?module=bbop=postingmode=replyp=3823418 --- SF.Net is sponsored by: Speed Start Your Linux Apps Now. Build and deploy apps Web services for Linux with a free DVD software kit from IBM. Click Now! http://ads.osdn.com/?ad_id=1356alloc_id=3438op=click ___ JBoss-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/jboss-user
[JBoss-user] [Security JAAS/JBoss] - Re: Problems with FORM Authentication
Been offline while setting up a new computer. Before I created my custom login module, I tried the DatabaseServerLoginModule. I had the same problem. I created the custom login module so that I could attempt to track down the location of the problem. View the original post : http://www.jboss.org/index.html?module=bbop=viewtopicp=3823200#3823200 Reply to the post : http://www.jboss.org/index.html?module=bbop=postingmode=replyp=3823200 --- SF.Net is sponsored by: Speed Start Your Linux Apps Now. Build and deploy apps Web services for Linux with a free DVD software kit from IBM. Click Now! http://ads.osdn.com/?ad_id=1356alloc_id=3438op=click ___ JBoss-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/jboss-user
[JBoss-user] [Security JAAS/JBoss] - Re: Problems with FORM Authentication
I have familiarly question. My issue is:the LDAP autentication is ok.but when I uss response.sendRedirect(check/frame.js); the login page displayed. it is seem the web container is not acknowledge the authentication. who can tell me what cause this?I have study three days. thanks in advance. William View the original post : http://www.jboss.org/index.html?module=bbop=viewtopicp=3823087#3823087 Reply to the post : http://www.jboss.org/index.html?module=bbop=postingmode=replyp=3823087 --- SF.Net is sponsored by: Speed Start Your Linux Apps Now. Build and deploy apps Web services for Linux with a free DVD software kit from IBM. Click Now! http://ads.osdn.com/?ad_id=1356alloc_id=3438op=click ___ JBoss-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/jboss-user
[JBoss-user] [Security JAAS/JBoss] - Re: Problems with FORM Authentication
How about getting it working with the JBoss DatabaseServerLoginModule before trying your own custom module? A good starting point might be the updated JavaWorld JAAS Howto paper at http://sourceforge.net/docman/display_doc.php?docid=18240group_id=22866 I used that paper and now have form based auth working with a struts application - subsequent restricted page access fails - but that's anothe story. Martin View the original post : http://www.jboss.org/index.html?module=bbop=viewtopicp=3822997#3822997 Reply to the post : http://www.jboss.org/index.html?module=bbop=postingmode=replyp=3822997 --- SF.Net is sponsored by: Speed Start Your Linux Apps Now. Build and deploy apps Web services for Linux with a free DVD software kit from IBM. Click Now! http://ads.osdn.com/?ad_id=1356alloc_id=3438op=click ___ JBoss-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/jboss-user
[JBoss-user] [Security JAAS/JBoss] - Re: Problems with FORM Authentication
I really would like to get an answer to this problem. While BASIC authentication works, it has a nasty side-effect due to the fact that the user credentials are cached in the browser. View the original post : http://www.jboss.org/index.html?module=bbop=viewtopicp=3822721#3822721 Reply to the post : http://www.jboss.org/index.html?module=bbop=postingmode=replyp=3822721 --- SF.Net is sponsored by: Speed Start Your Linux Apps Now. Build and deploy apps Web services for Linux with a free DVD software kit from IBM. Click Now! http://ads.osdn.com/?ad_id=1356alloc_id=3438op=click ___ JBoss-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/jboss-user
[JBoss-user] [Security JAAS/JBoss] - Re: Problems with FORM Authentication
For starters, make sure that the form-login-config is not commented out as currently the case for the given web.xml. Is the login page being displayed at all? View the original post : http://www.jboss.org/index.html?module=bbop=viewtopicp=3822058#3822058 Reply to the post : http://www.jboss.org/index.html?module=bbop=postingmode=replyp=3822058 --- SF.Net is sponsored by: Speed Start Your Linux Apps Now. Build and deploy apps Web services for Linux with a free DVD software kit from IBM. Click Now! http://ads.osdn.com/?ad_id=1356alloc_id=3438op=click ___ JBoss-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/jboss-user
[JBoss-user] [Security JAAS/JBoss] - Re: Problems with FORM Authentication
When I attempt to use FORM authentication, I change auth-method to FORM and uncomment form-login-config. My login form is displayed. I enter valid user credentials and the form-error-page is displayed. From the logging that I have included in my custom login module, I know that it is not being accessed. View the original post : http://www.jboss.org/index.html?module=bbop=viewtopicp=3822064#3822064 Reply to the post : http://www.jboss.org/index.html?module=bbop=postingmode=replyp=3822064 --- SF.Net is sponsored by: Speed Start Your Linux Apps Now. Build and deploy apps Web services for Linux with a free DVD software kit from IBM. Click Now! http://ads.osdn.com/?ad_id=1356alloc_id=3438op=click ___ JBoss-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/jboss-user
