[jboss-user] [Security & JAAS/JBoss] - Re: Negotiate with Kerberos

eric.lvyan do-not-reply at jboss.com
Tue Jun 3 02:55:51 EDT 2008


11:13:07,170 DEBUG [ManagerBase] End expire sessions StandardManager processingTime 0 expired sessions: 0
11:13:07,700 DEBUG [Registry] Managed= jboss.web:type=RequestProcessor,worker=http-0.0.0.0-8080,name=HttpRequest1
11:13:07,700 DEBUG [BaseModelMBean] default constructor
11:13:07,700 DEBUG [BaseModelMBean] preRegister org.apache.coyote.RequestInfo at 4852e6 jboss.web:type=RequestProcessor,worker=http-0.0.0.0-808
0,name=HttpRequest1
11:13:07,700 DEBUG [MapperListener] Handle jboss.web:type=RequestProcessor,worker=http-0.0.0.0-8080,name=HttpRequest1 type : JMX.mbean.regis
tered
11:13:07,700 DEBUG [MapperListener] Handle jboss.web:type=RequestProcessor,worker=http-0.0.0.0-8080,name=HttpRequest1 type : JMX.mbean.regis
tered
11:13:08,401 DEBUG [HttpServletRequestResponseValve] store Request and Response ojbects and call super.invoke(request, response)
11:13:08,401 DEBUG [AuthenticatorBase] Security checking request GET /Workplace/
11:13:08,401 DEBUG [AuthenticatorBase] Security checking request GET /Workplace/
11:13:08,401 DEBUG [RealmBase]   Checking constraint 'SecurityConstraint[action]' against GET /WcmDefault.jsp --> false
11:13:08,401 DEBUG [RealmBase]   Checking constraint 'SecurityConstraint[action]' against GET /WcmDefault.jsp --> false
11:13:08,401 DEBUG [RealmBase]   Checking constraint 'SecurityConstraint[action]' against GET /WcmDefault.jsp --> false
11:13:08,401 DEBUG [RealmBase]   Checking constraint 'SecurityConstraint[action]' against GET /WcmDefault.jsp --> false
11:13:08,401 DEBUG [RealmBase]   No applicable constraint located
11:13:08,401 DEBUG [AuthenticatorBase]  Not subject to any constraint
11:13:08,401 DEBUG [AuthenticatorBase]  Not subject to any constraint
11:13:08,760 INFO  [STDOUT] Could not get User Principal from request.getUserPrincipal(),use session instead.
11:13:08,760 INFO  [STDOUT] now Principal is:null,principal Name is NULL
11:13:08,775 DEBUG [HttpServletRequestResponseValve] super.invoke(request, response) is over
11:13:09,103 DEBUG [CoyoteAdapter]  Requested cookie session id is 097FDA5D8722CEE1F93F50825F06E732
11:13:09,103 DEBUG [HttpServletRequestResponseValve] store Request and Response ojbects and call super.invoke(request, response)
11:13:09,103 DEBUG [AuthenticatorBase] Security checking request GET /Workplace/containerSecured/Return.jsp
11:13:09,103 DEBUG [AuthenticatorBase] Security checking request GET /Workplace/containerSecured/Return.jsp
11:13:09,103 DEBUG [RealmBase]   Checking constraint 'SecurityConstraint[action]' against GET /containerSecured/Return.jsp --> true
11:13:09,103 DEBUG [RealmBase]   Checking constraint 'SecurityConstraint[action]' against GET /containerSecured/Return.jsp --> true
11:13:09,103 DEBUG [AuthenticatorBase]  Calling hasUserDataPermission()
11:13:09,103 DEBUG [AuthenticatorBase]  Calling hasUserDataPermission()
11:13:09,103 DEBUG [RealmBase]   User data constraint has no restrictions
11:13:09,103 DEBUG [AuthenticatorBase]  Calling authenticate()
11:13:09,103 DEBUG [AuthenticatorBase]  Calling authenticate()
11:13:09,118 DEBUG [HttpServletRequestResponseValve] authenticate() begin
11:13:09,118 DEBUG [NTLogin] CallbackHandler: com.asiasoftsolutions.web.tomcat.security.AdvancedWebCallbackHandler at 1a0c00
11:13:09,118 DEBUG [NTLogin] CallbackHandler: com.asiasoftsolutions.web.tomcat.security.AdvancedWebCallbackHandler at 1a0c00
11:13:09,118 DEBUG [JaasSecurityManagerService] Created securityMgr=org.jboss.security.plugins.JaasSecurityManager at 9d40d
11:13:09,118 DEBUG [JaasSecurityManagerService] Created securityMgr=org.jboss.security.plugins.JaasSecurityManager at 9d40d
11:13:09,118 DEBUG [NTLogin] CachePolicy set to: org.jboss.util.TimedCachePolicy at 140b918
11:13:09,118 DEBUG [NTLogin] CachePolicy set to: org.jboss.util.TimedCachePolicy at 140b918
11:13:09,118 DEBUG [JaasSecurityManagerService] setCachePolicy, c=org.jboss.util.TimedCachePolicy at 140b918
11:13:09,118 DEBUG [JaasSecurityManagerService] setCachePolicy, c=org.jboss.util.TimedCachePolicy at 140b918
11:13:09,118 DEBUG [JaasSecurityManagerService] Added NTLogin, org.jboss.security.plugins.SecurityDomainContext at 37da60 to map
11:13:09,118 DEBUG [JaasSecurityManagerService] Added NTLogin, org.jboss.security.plugins.SecurityDomainContext at 37da60 to map
11:13:09,150 DEBUG [NegotiateExtLoginModule] login() begin
11:13:09,633 DEBUG [NegotiateExtLoginModule] ntlmChallenge:sf-x8zïy
11:13:09,648 DEBUG [NegotiateExtLoginModule] will call callbackHandler ...
11:13:09,679 DEBUG [AdvancedWebCallbackHandler] Sending back authorization header
11:13:09,679 DEBUG [NegotiateExtLoginModule]  have called callbackHandler, will validate all of callback
11:13:09,679 DEBUG [NegotiateExtLoginModule] _principal:null
11:13:09,679 DEBUG [HttpServletRequestResponseValve] UserId:null
11:13:09,679 DEBUG [NegotiateExtLoginModule] login() begin
11:13:09,679 DEBUG [NegotiateExtLoginModule] ntlmChallenge:sf-x8zïy
11:13:09,679 DEBUG [NegotiateExtLoginModule] will call callbackHandler ...
11:13:09,679 DEBUG [AdvancedWebCallbackHandler] Sending back authorization header
11:13:09,679 DEBUG [NegotiateExtLoginModule]  have called callbackHandler, will validate all of callback
11:13:09,679 DEBUG [NegotiateExtLoginModule] _principal:null
11:13:09,679 DEBUG [AuthenticatorBase]  Failed authenticate() test
11:13:09,679 DEBUG [AuthenticatorBase]  Failed authenticate() test
11:13:09,679 DEBUG [HttpServletRequestResponseValve] super.invoke(request, response) is over
11:13:09,757 DEBUG [Registry] Managed= jboss.web:type=RequestProcessor,worker=http-0.0.0.0-8080,name=HttpRequest2
11:13:09,757 DEBUG [BaseModelMBean] default constructor
11:13:09,757 DEBUG [BaseModelMBean] preRegister org.apache.coyote.RequestInfo at bbd9e6 jboss.web:type=RequestProcessor,worker=http-0.0.0.0-808
0,name=HttpRequest2
11:13:09,757 DEBUG [MapperListener] Handle jboss.web:type=RequestProcessor,worker=http-0.0.0.0-8080,name=HttpRequest2 type : JMX.mbean.regis
tered
11:13:09,757 DEBUG [MapperListener] Handle jboss.web:type=RequestProcessor,worker=http-0.0.0.0-8080,name=HttpRequest2 type : JMX.mbean.regis
tered
11:13:09,757 DEBUG [CoyoteAdapter]  Requested cookie session id is 097FDA5D8722CEE1F93F50825F06E732
11:13:09,757 DEBUG [HttpServletRequestResponseValve] store Request and Response ojbects and call super.invoke(request, response)
11:13:09,757 DEBUG [AuthenticatorBase] Security checking request GET /Workplace/containerSecured/Return.jsp
11:13:09,757 DEBUG [AuthenticatorBase] Security checking request GET /Workplace/containerSecured/Return.jsp
11:13:09,757 DEBUG [RealmBase]   Checking constraint 'SecurityConstraint[action]' against GET /containerSecured/Return.jsp --> true
11:13:09,757 DEBUG [RealmBase]   Checking constraint 'SecurityConstraint[action]' against GET /containerSecured/Return.jsp --> true
11:13:09,757 DEBUG [AuthenticatorBase]  Calling hasUserDataPermission()
11:13:09,757 DEBUG [AuthenticatorBase]  Calling hasUserDataPermission()
11:13:09,757 DEBUG [RealmBase]   User data constraint has no restrictions
11:13:09,757 DEBUG [AuthenticatorBase]  Calling authenticate()
11:13:09,757 DEBUG [AuthenticatorBase]  Calling authenticate()
11:13:09,757 DEBUG [HttpServletRequestResponseValve] authenticate() begin
11:13:09,757 DEBUG [NegotiateExtLoginModule] login() begin
11:13:09,757 DEBUG [NegotiateExtLoginModule] ntlmChallenge:sf-x8zïy
11:13:09,757 DEBUG [NegotiateExtLoginModule] will call callbackHandler ...
11:13:09,757 DEBUG [AdvancedWebCallbackHandler] Got NegotiateCallback: [B at 1fea274
11:13:10,022 DEBUG [AdvancedWebCallbackHandler] Token was Type 1 NTLM
11:13:10,085 DEBUG [NegotiateExtLoginModule]  have called callbackHandler, will validate all of callback
11:13:10,085 DEBUG [NegotiateExtLoginModule] _principal:null
11:13:10,100 DEBUG [HttpServletRequestResponseValve] UserId:null
11:13:10,100 DEBUG [NegotiateExtLoginModule] login() begin
11:13:10,100 DEBUG [NegotiateExtLoginModule] ntlmChallenge:sf-x8zïy
11:13:10,100 DEBUG [NegotiateExtLoginModule] will call callbackHandler ...
11:13:10,100 DEBUG [AdvancedWebCallbackHandler] Got NegotiateCallback: [B at 114da8
11:13:10,100 DEBUG [AdvancedWebCallbackHandler] Token was Type 1 NTLM
11:13:10,272 DEBUG [NegotiateExtLoginModule]  have called callbackHandler, will validate all of callback
11:13:10,272 DEBUG [NegotiateExtLoginModule] _principal:null
11:13:10,272 DEBUG [AuthenticatorBase]  Failed authenticate() test
11:13:10,272 DEBUG [AuthenticatorBase]  Failed authenticate() test
11:13:10,272 DEBUG [HttpServletRequestResponseValve] super.invoke(request, response) is over
11:13:10,287 DEBUG [CoyoteAdapter]  Requested cookie session id is 097FDA5D8722CEE1F93F50825F06E732
11:13:10,287 DEBUG [HttpServletRequestResponseValve] store Request and Response ojbects and call super.invoke(request, response)
11:13:10,287 DEBUG [AuthenticatorBase] Security checking request GET /Workplace/containerSecured/Return.jsp
11:13:10,287 DEBUG [AuthenticatorBase] Security checking request GET /Workplace/containerSecured/Return.jsp
11:13:10,287 DEBUG [RealmBase]   Checking constraint 'SecurityConstraint[action]' against GET /containerSecured/Return.jsp --> true
11:13:10,287 DEBUG [RealmBase]   Checking constraint 'SecurityConstraint[action]' against GET /containerSecured/Return.jsp --> true
11:13:10,287 DEBUG [AuthenticatorBase]  Calling hasUserDataPermission()
11:13:10,287 DEBUG [AuthenticatorBase]  Calling hasUserDataPermission()
11:13:10,287 DEBUG [RealmBase]   User data constraint has no restrictions
11:13:10,287 DEBUG [AuthenticatorBase]  Calling authenticate()
11:13:10,287 DEBUG [AuthenticatorBase]  Calling authenticate()
11:13:10,287 DEBUG [HttpServletRequestResponseValve] authenticate() begin
11:13:10,287 DEBUG [NegotiateExtLoginModule] login() begin
11:13:10,287 DEBUG [NegotiateExtLoginModule] ntlmChallenge:sf-x8zïy
11:13:10,287 DEBUG [NegotiateExtLoginModule] will call callbackHandler ...
11:13:10,287 DEBUG [AdvancedWebCallbackHandler] Got NegotiateCallback: [B at 151a7
11:13:10,287 DEBUG [AdvancedWebCallbackHandler] Token was Type 3 NTLM
11:13:10,287 DEBUG [NegotiateExtLoginModule]  have called callbackHandler, will validate all of callback
11:13:10,287 DEBUG [NegotiateExtLoginModule] Found NTLM token in SPNEGO: NTLMSSP ?   ? ? î   ? ? ñ   ? ? H   ? ? Z   ? ? t       +   ?? ???+
?   ¤A S F I L E N E T A d m i n i s t r a t o r F I L E N E T - T E S T 8¦?#?3?fS£+El?µê +nGƒë?D8¦?#?3?fS£+El?µê +nGƒë?D
11:13:10,287 DEBUG [NegotiateExtLoginModule] doNtlmAuth() is begin,
dc:0.0.0.0<00>/192.168.10.1
 principal:ASFILENET\Administrator
11:13:10,365 DEBUG [NegotiateExtLoginModule] SmbSession logon sucessful
11:13:10,365 DEBUG [NegotiateExtLoginModule] _principal:ASFILENET\Administrator
11:13:10,365 DEBUG [NegotiateExtLoginModule] getRoleSets() begin...
11:13:10,381 DEBUG [HttpServletRequestResponseValve] principal.getName():1212462790287
11:13:10,381 DEBUG [HttpServletRequestResponseValve] UserId:ASFILENET\Administrator
11:13:10,381 DEBUG [NegotiateExtLoginModule] login() begin
11:13:10,381 DEBUG [NegotiateExtLoginModule] ntlmChallenge:sf-x8zïy
11:13:10,381 DEBUG [NegotiateExtLoginModule] will call callbackHandler ...
11:13:10,381 DEBUG [AdvancedWebCallbackHandler] Got NegotiateCallback: [B at 1ef37d6
11:13:10,381 DEBUG [AdvancedWebCallbackHandler] Token was Type 3 NTLM
11:13:10,381 DEBUG [NegotiateExtLoginModule]  have called callbackHandler, will validate all of callback
11:13:10,381 DEBUG [NegotiateExtLoginModule] Found NTLM token in SPNEGO: NTLMSSP ?   ? ? î   ? ? ñ   ? ? H   ? ? Z   ? ? t       +   ?? ???+
?   ¤A S F I L E N E T A d m i n i s t r a t o r F I L E N E T - T E S T 8¦?#?3?fS£+El?µê +nGƒë?D8¦?#?3?fS£+El?µê +nGƒë?D
11:13:10,381 DEBUG [NegotiateExtLoginModule] doNtlmAuth() is begin,
dc:0.0.0.0<00>/192.168.10.1
 principal:ASFILENET\Administrator
11:13:10,381 DEBUG [NegotiateExtLoginModule] SmbSession logon sucessful
11:13:10,381 DEBUG [NegotiateExtLoginModule] _principal:ASFILENET\Administrator
11:13:10,381 DEBUG [NegotiateExtLoginModule] getRoleSets() begin...
11:13:10,381 DEBUG [HttpServletRequestResponseValve] principal.getName(): ASFILENET\Administrator
11:13:10,381 DEBUG [AuthenticatorBase]  Calling accessControl()
11:13:10,381 DEBUG [AuthenticatorBase]  Calling accessControl()
11:13:10,381 DEBUG [AuthenticatorBase]  Successfully passed all security constraints
11:13:10,381 DEBUG [AuthenticatorBase]  Successfully passed all security constraints
11:13:10,381 INFO  [STDOUT] now Principal is:ASFILENET\Administrator,principal Name is ASFILENET\Administrator
11:13:10,396 DEBUG [JspServlet] JspEngine --> /containerSecured/Return.jsp
11:13:10,396 DEBUG [JspServlet]              ServletPath: /containerSecured/Return.jsp
11:13:10,396 DEBUG [JspServlet]                 PathInfo: null
11:13:10,396 DEBUG [JspServlet]                 RealPath: C:\jboss-4.0.5.GA\server\filenetsso\.\deploy\Workplace.war\containerSecured\Return
.jsp
11:13:10,396 DEBUG [JspServlet]               RequestURI: /Workplace/containerSecured/Return.jsp
11:13:10,396 DEBUG [JspServlet]              QueryString: returnUrl=http%3A%2F%2Ffilenet-test.asfilenet.com%3A8080%2FWorkplace%2F
11:13:10,396 DEBUG [JspServlet]           Request Params:
11:13:10,396 DEBUG [JspServlet]                  returnUrl = http://filenet-test.asfilenet.com:8080/Workplace/
11:13:10,552 DEBUG [HttpServletRequestResponseValve] super.invoke(request, response) is over
11:13:10,568 DEBUG [CoyoteAdapter]  Requested cookie session id is 097FDA5D8722CEE1F93F50825F06E732
11:13:10,568 DEBUG [HttpServletRequestResponseValve] store Request and Response ojbects and call super.invoke(request, response)
11:13:10,568 DEBUG [AuthenticatorBase] Security checking request GET /Workplace/
11:13:10,568 DEBUG [AuthenticatorBase] Security checking request GET /Workplace/
11:13:10,568 DEBUG [RealmBase]   Checking constraint 'SecurityConstraint[action]' against GET /WcmDefault.jsp --> false
11:13:10,568 DEBUG [RealmBase]   Checking constraint 'SecurityConstraint[action]' against GET /WcmDefault.jsp --> false
11:13:10,568 DEBUG [RealmBase]   Checking constraint 'SecurityConstraint[action]' against GET /WcmDefault.jsp --> false
11:13:10,568 DEBUG [RealmBase]   Checking constraint 'SecurityConstraint[action]' against GET /WcmDefault.jsp --> false
11:13:10,568 DEBUG [RealmBase]   No applicable constraint located
11:13:10,568 DEBUG [AuthenticatorBase]  Not subject to any constraint
11:13:10,568 DEBUG [AuthenticatorBase]  Not subject to any constraint
11:13:10,568 INFO  [STDOUT] Could not get User Principal from request.getUserPrincipal(),use session instead.
11:13:10,568 INFO  [STDOUT] Try Insert User Principal To Request............
11:13:10,568 INFO  [STDOUT] now Principal is:ASFILENET\Administrator,principal Name is ASFILENET\Administrator
11:13:10,568 DEBUG [JspServlet] JspEngine --> /WcmDefault.jsp
11:13:10,568 DEBUG [JspServlet]              ServletPath: /WcmDefault.jsp
11:13:10,568 DEBUG [JspServlet]                 PathInfo: null
11:13:10,568 DEBUG [JspServlet]                 RealPath: C:\jboss-4.0.5.GA\server\filenetsso\.\deploy\Workplace.war\WcmDefault.jsp
11:13:10,568 DEBUG [JspServlet]               RequestURI: /Workplace/WcmDefault.jsp
11:13:10,568 DEBUG [JspServlet]              QueryString: null
11:13:10,568 DEBUG [JspServlet]           Request Params:
11:13:11,659 INFO  [STDOUT] Using Java API config file: jndi:/localhost/Workplace/WEB-INF/WcmApiConfig.properties.


View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4155211#4155211

Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4155211




More information about the jboss-user mailing list