Looks like the application is looking for
http://quantum.dbt.com/login.jsp which is different from wherever
you're hitting the app on /quantum/j_security_check

You should configure the front side of the proxy in tomcat (see
proxyName and proxyPort)

R.

On 3/16/07, rfisk <[EMAIL PROTECTED]> wrote:

I assume you mean that the JKMount should just be configured like:

JkMount /*    ajp13 # assuming that the Apache Directory setting is at the
root of the context we're serving

The problem with this is that you are getting no performance benefit from
apache (images,css vs pages). Be that as it may, it still doesn't resolve
the problem when I configure it this way.

The access_log for apache reports this:

This is the post that occurs when you hit the login button.

- - - [16/Mar/2007:09:12:22 -0600] "POST /quantum/j_security_check HTTP/1.1"
302
 304 "http://quantum.dbt.com/login.jsp"; "Mozilla/5.0 (Windows; U; Windows NT
5.1
; en-US; rv:1.8.1.2) Gecko/20070219 Firefox/2.0.0.2" 0 "username=rick;
JSESSIONI
D=78879D365D5CB896D802F5B809440F62;
JSESSIONID=171EE909F7584A787FADB8A1783775BF"
 192.168.1.3

The backend apparently makes a Get request as a result of this post:

- - - [16/Mar/2007:09:12:22 -0600] "GET /j_security_check HTTP/1.1" 404 1003
"http://quantum.dbt.com/login.jsp"; "Mozilla/5.0 (Windows; U; Windows NT 5.1;
en-US;
 rv:1.8.1.2) Gecko/20070219 Firefox/2.0.0.2" 0
"JSESSIONID=171EE909F7584A787FADB8A1783775BF" 192.168.1.3

Which returns a 404 from tomcat.

So, adding a rewrite rule to prefix j_security_check with /quantum (the
context I've deployed for this webapp) !visuch that we don't get the 404:

RewriteRule ^/(.*)  /quantum/$1 [PT]

causes the redirect to get picked up by mod_jk, but the jsp returns
error="true" as if there was a login failure.

- - - [16/Mar/2007:09:32:24 -0600] "POST /quantum/j_security_check HTTP/1.1"
302
 304 "http://quantum.dbt.com/login.jsp"; "Mozilla/5.0 (Windows; U; Windows NT
5.1
; en-US; rv:1.8.1.2) Gecko/20070219 Firefox/2.0.0.2" 0 "username=rick;
JSESSIONI
D=78879D365D5CB896D802F5B809440F62;
JSESSIONID=171EE909F7584A787FADB8A1783775BF"
 192.168.1.3

- - - [16/Mar/2007:09:32:24 -0600] "GET /j_security_check HTTP/1.1" 302 -
"http:
//quantum.dbt.com/login.jsp" "Mozilla/5.0 (Windows; U; Windows NT 5.1;
en-US; rv
:1.8.1.2) Gecko/20070219 Firefox/2.0.0.2" 0
"JSESSIONID=171EE909F7584A787FADB8A1
783775BF" 192.168.1.3

- - - [16/Mar/2007:09:32:24 -0600] "GET /quantum/login.jsp?error=true
HTTP/1.1"
302 308 "http://quantum.dbt.com/login.jsp"; "Mozilla/5.0 (Windows; U; Windows
NT
5.1; en-US; rv:1.8.1.2) Gecko/20070219 Firefox/2.0.0.2" 0 "username=rick;
JSESSI
ONID=78879D365D5CB896D802F5B809440F62;
JSESSIONID=171EE909F7584A787FADB8A1783775
BF" 192.168.1.3



And looking at the output here, you can see that the rewrite rule is
redirecting rather than getting the 404 after the rewrite rule was added,
but the url passed in to j_security_check is domain/login.jsp. Could that be
the source of the problem?

The login.jsp?error="true" is what I get after the login attempt.

Is the url passed based on the entry in security.xml? The vaue set for
filterProcessUrl is /j_security_check.









mraible wrote:
>
> I'd recommend proxying an entire app to Tomcat, rather than trying to
> handle specific URLs with mod_jk.
>
> Matt
>
> On 3/16/07, rfisk <[EMAIL PROTECTED]> wrote:
>>
>> I am having trouble integrating apache and mod_jk with my appfuse app.
>>
>> The goal is to have multiple appfuse apps hosted as virtual hosts with
>> the
>> context hidden from the end user.
>>
>> I am able to get mod_jk and apache configured such that the site will
>> come
>> up properly. In order to do this, I also configure rewrite rules in
>> apache
>> to hide the context.
>>
>> However, I can never get the login/user authentication to work properly.
>>
>> I have a JKMount for the worker on /j_security_check but the login.jsp
>> returns error="true" after login.
>>
>> Has anyone had any luck with this? I've searched the web but with no luck
>> in
>> finding a resolution.
>> --
>> View this message in context:
>> 
http://www.nabble.com/mod_jk-and-j_security_check-tf3414945s2369.html#a9516027
>> Sent from the AppFuse - User mailing list archive at Nabble.com.
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: [EMAIL PROTECTED]
>> For additional commands, e-mail: [EMAIL PROTECTED]
>>
>>
>
>
> --
> http://raibledesigns.com
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
>
>
>

--
View this message in context: 
http://www.nabble.com/mod_jk-and-j_security_check-tf3414945s2369.html#a9519063
Sent from the AppFuse - User mailing list archive at Nabble.com.

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to