[jboss-user] [Security & JAAS/JBoss] - Re: JavaServer Faces and container-managed authorization not

2008-08-20 Thread ragavgomatam
HI, So you are saying jsp version works ??? anonymous wrote : When I enter the myHome.faces URL, it displays this page, I enter the username and password, and it goes to the myHome.xhtml page as it should, so everything works properly. This is the same behavior I get when I use BASIC authentica

[jboss-user] [Security & JAAS/JBoss] - Re: JavaServer Faces and container-managed authorization not

2008-08-20 Thread poesys
BTW, thanks for your help--I really appreciate it very much! View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4171628#4171628 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4171628 __

[jboss-user] [Security & JAAS/JBoss] - Re: JavaServer Faces and container-managed authorization not

2008-08-20 Thread poesys
Here is the plain jsp login page: | http://www.w3.org/TR/html4/loose.dtd";> | | <%@ page errorPage="/jsp/common/gen_error.jsp" %> | | | | | | | | Username: | Password: | | | | When I enter the myHome.faces UR

[jboss-user] [Security & JAAS/JBoss] - Re: JavaServer Faces and container-managed authorization not

2008-08-20 Thread ragavgomatam
Can you do a quick test ? Can you replace your jsf with plain jsp ? Also can you post your jsp/html code of the login page ? Does it have anonymous wrote : form action="j_security_check" and anonymous wrote : j_username and j_password I presume it does & If it does, then WebContainer does th

[jboss-user] [Security & JAAS/JBoss] - Re: JavaServer Faces and container-managed authorization not

2008-08-20 Thread poesys
Some additional information. Here is the code from the managed bean action method that the Login button calls that creates the LoginContext. I've added debugging code to retrieve the subject from the authentication cache (at least I hope that's what PolicyContext does) and display everything, th

[jboss-user] [Security & JAAS/JBoss] - Re: JavaServer Faces and container-managed authorization not

2008-08-20 Thread poesys
As I reported in my followup post, I replaced my custom login module entirely with the standard JBoss DatabaseServerLoginModule configured with queries. That works fine and authenticates, but I'm still not seeing the roles being accepted during authorization. The roles are coming back correctly

[jboss-user] [Security & JAAS/JBoss] - Re: JavaServer Faces and container-managed authorization not

2008-08-20 Thread ragavgomatam
I still suspect its an issue with your LoginModule. Code for accessing the database by extending AbstarctSeverLoginModule is posted in the forum..Check that out & compare yours...Are you setting the roles correctly ? View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopi

[jboss-user] [Security & JAAS/JBoss] - Re: JavaServer Faces and container-managed authorization not

2008-08-19 Thread poesys
Debugged the DatabaseServerLoginModule using source and found it was getting a blank at the end from the database, added ltrim/rtrim and got successful authentication. However, it still fails to navigate to myHome.faces. So the problem is not in the custom login module but somewhere deep in the

[jboss-user] [Security & JAAS/JBoss] - Re: JavaServer Faces and container-managed authorization not

2008-08-19 Thread poesys
Solved the application-policy name. My login module code uses the full JNDI name, and it should be using just the unqualified name without the JNDI prefixes. Then the login-config.xml and web.xml references to the name can also leave off the JNDI prefixes and everything works (except for the rol

[jboss-user] [Security & JAAS/JBoss] - Re: JavaServer Faces and container-managed authorization not

2008-08-15 Thread poesys
The last sentence in the second paragraph should read, "All my Faces navigation rules use the option. Lost in HTML translation. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4170875#4170875 Reply to the post : http://www.jboss.com/index.html?modu