Hi, I have an application we migrated to struts 2. We originally had oracle
OAM for authentication but now we are going back to JAAS. We used JAAS on
struts 1 and it work fine. I've added everything I need to in the web.xml
but anytime I use a link that requires authentication I get a blank page and
nothing in the logs(debugging is set to DEBUG). So, I decide to just create
a small app that would redirect to a login page for testing and I got the
same result..
We are using oc4j and it worked with struts1 on oc4j. But, I also have a
jboss version of the app and I get the same result
Any help would be greatly appreciated..
Dan
One other thing. I know the j_security_check work because if I got directly
to my login action and login the app authenticates correctly.. The only
problem is the redirect managed by JAAS to the login action page.
Here is the web.xml
<security-constraint>
<web-resource-collection>
<web-resource-name>Authentication Needed</web-resource-name>
<url-pattern>/homeAuth.do</url-pattern>
</web-resource-collection>
<auth-constraint>
<role-name>privileged_user</role-name>
</auth-constraint>
</security-constraint>
<login-config>
<auth-method>FORM</auth-method>
<form-login-config>
<form-login-page>/login.do</form-login-page>
<form-error-page>/loginRetry.do</form-error-page>
</form-login-config>
</login-config>
<security-role>
<role-name>privileged_user</role-name>
</security-role>
my struts config:
<struts>
<package name="jaastest-default-config" namespace="/"
extends="struts-default,tiles-default">
<!-- add the tile result type for this package -->
<default-interceptor-ref name="defaultStack"/>
<action name="homeAuth">
<result name="success">/WEB-INF/homeAuth.jsp</result>
</action>
<action name="login">
<result name="success">/WEB-INF/login.jsp</result>
</action>
<action name="home">
<result name="success">/WEB-INF/home.jsp</result>
</action>
</package>
</struts>
--
View this message in context:
http://www.nabble.com/JAAS-not-working-tp23494554p23494554.html
Sent from the Struts - User mailing list archive at Nabble.com.
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
