[jboss-user] [Security & JAAS/JBoss] - Re: Negotiate with Kerberos

11:13:07,170 DEBUG [ManagerBase] End expire sessions StandardManager processingTime 0 expired sessions: 0 11:13:07,700 DEBUG [Registry] Managed= jboss.web:type=RequestProcessor,worker=http-0.0.0.0-8080,name=HttpRequest1 11:13:07,700 DEBUG [BaseModelMBean] default constructor 11:13:07,700 DEBUG [BaseModelMBean] preRegister org.apache.coyote.RequestInfo@4852e6 jboss.web:type=RequestProcessor,worker=http-0.0.0.0-808 0,name=HttpRequest1 11:13:07,700 DEBUG [MapperListener] Handle jboss.web:type=RequestProcessor,worker=http-0.0.0.0-8080,name=HttpRequest1 type : JMX.mbean.regis tered 11:13:07,700 DEBUG [MapperListener] Handle jboss.web:type=RequestProcessor,worker=http-0.0.0.0-8080,name=HttpRequest1 type : JMX.mbean.regis tered 11:13:08,401 DEBUG [HttpServletRequestResponseValve] store Request and Response ojbects and call super.invoke(request, response) 11:13:08,401 DEBUG [AuthenticatorBase] Security checking request GET /Workplace/ 11:13:08,401 DEBUG [AuthenticatorBase] Security checking request GET /Workplace/ 11:13:08,401 DEBUG [RealmBase] Checking constraint 'SecurityConstraint[action]' against GET /WcmDefault.jsp --> false 11:13:08,401 DEBUG [RealmBase] Checking constraint 'SecurityConstraint[action]' against GET /WcmDefault.jsp --> false 11:13:08,401 DEBUG [RealmBase] Checking constraint 'SecurityConstraint[action]' against GET /WcmDefault.jsp --> false 11:13:08,401 DEBUG [RealmBase] Checking constraint 'SecurityConstraint[action]' against GET /WcmDefault.jsp --> false 11:13:08,401 DEBUG [RealmBase] No applicable constraint located 11:13:08,401 DEBUG [AuthenticatorBase] Not subject to any constraint 11:13:08,401 DEBUG [AuthenticatorBase] Not subject to any constraint 11:13:08,760 INFO [STDOUT] Could not get User Principal from request.getUserPrincipal(),use session instead. 11:13:08,760 INFO [STDOUT] now Principal is:null,principal Name is NULL 11:13:08,775 DEBUG [HttpServletRequestResponseValve] super.invoke(request, response) is over 11:13:09,103 DEBUG [CoyoteAdapter] Requested cookie session id is 097FDA5D8722CEE1F93F50825F06E732 11:13:09,103 DEBUG [HttpServletRequestResponseValve] store Request and Response ojbects and call super.invoke(request, response) 11:13:09,103 DEBUG [AuthenticatorBase] Security checking request GET /Workplace/containerSecured/Return.jsp 11:13:09,103 DEBUG [AuthenticatorBase] Security checking request GET /Workplace/containerSecured/Return.jsp 11:13:09,103 DEBUG [RealmBase] Checking constraint 'SecurityConstraint[action]' against GET /containerSecured/Return.jsp --> true 11:13:09,103 DEBUG [RealmBase] Checking constraint 'SecurityConstraint[action]' against GET /containerSecured/Return.jsp --> true 11:13:09,103 DEBUG [AuthenticatorBase] Calling hasUserDataPermission() 11:13:09,103 DEBUG [AuthenticatorBase] Calling hasUserDataPermission() 11:13:09,103 DEBUG [RealmBase] User data constraint has no restrictions 11:13:09,103 DEBUG [AuthenticatorBase] Calling authenticate() 11:13:09,103 DEBUG [AuthenticatorBase] Calling authenticate() 11:13:09,118 DEBUG [HttpServletRequestResponseValve] authenticate() begin 11:13:09,118 DEBUG [NTLogin] CallbackHandler: com.asiasoftsolutions.web.tomcat.security.AdvancedWebCallbackHandler@1a0c00 11:13:09,118 DEBUG [NTLogin] CallbackHandler: com.asiasoftsolutions.web.tomcat.security.AdvancedWebCallbackHandler@1a0c00 11:13:09,118 DEBUG [JaasSecurityManagerService] Created securityMgr=org.jboss.security.plugins.JaasSecurityManager@9d40d 11:13:09,118 DEBUG [JaasSecurityManagerService] Created securityMgr=org.jboss.security.plugins.JaasSecurityManager@9d40d 11:13:09,118 DEBUG [NTLogin] CachePolicy set to: org.jboss.util.TimedCachePolicy@140b918 11:13:09,118 DEBUG [NTLogin] CachePolicy set to: org.jboss.util.TimedCachePolicy@140b918 11:13:09,118 DEBUG [JaasSecurityManagerService] setCachePolicy, c=org.jboss.util.TimedCachePolicy@140b918 11:13:09,118 DEBUG [JaasSecurityManagerService] setCachePolicy, c=org.jboss.util.TimedCachePolicy@140b918 11:13:09,118 DEBUG [JaasSecurityManagerService] Added NTLogin, org.jboss.security.plugins.SecurityDomainContext@37da60 to map 11:13:09,118 DEBUG [JaasSecurityManagerService] Added NTLogin, org.jboss.security.plugins.SecurityDomainContext@37da60 to map 11:13:09,150 DEBUG [NegotiateExtLoginModule] login() begin 11:13:09,633 DEBUG [NegotiateExtLoginModule] ntlmChallenge:sf-x8zïy 11:13:09,648 DEBUG [NegotiateExtLoginModule] will call callbackHandler ... 11:13:09,679 DEBUG [AdvancedWebCallbackHandler] Sending back authorization header 11:13:09,679 DEBUG [NegotiateExtLoginModule] have called callbackHandler, will validate all of callback 11:13:09,679 DEBUG [NegotiateExtLoginModule] _principal:null 11:13:09,679 DEBUG [HttpServletRequestResponseValve] UserId:null 11:13:09,679 DEBUG [NegotiateExtLoginModule] login() begin 11:13:09,679 DEBUG [NegotiateExtLoginModule] ntlmChallenge:sf-x8zïy 11:13:09,679 DEBUG [NegotiateExtLoginModule] will call callbackHandler ... 11:13:09,679 DEBUG [AdvancedWebCallbackHandler] Sending back authorization header 11:13:09,679 DEBUG [NegotiateExtLoginModule] have called callbackHandler, will validate all of callback 11:13:09,679 DEBUG [NegotiateExtLoginModule] _principal:null 11:13:09,679 DEBUG [AuthenticatorBase] Failed authenticate() test 11:13:09,679 DEBUG [AuthenticatorBase] Failed authenticate() test 11:13:09,679 DEBUG [HttpServletRequestResponseValve] super.invoke(request, response) is over 11:13:09,757 DEBUG [Registry] Managed= jboss.web:type=RequestProcessor,worker=http-0.0.0.0-8080,name=HttpRequest2 11:13:09,757 DEBUG [BaseModelMBean] default constructor 11:13:09,757 DEBUG [BaseModelMBean] preRegister org.apache.coyote.RequestInfo@bbd9e6 jboss.web:type=RequestProcessor,worker=http-0.0.0.0-808 0,name=HttpRequest2 11:13:09,757 DEBUG [MapperListener] Handle jboss.web:type=RequestProcessor,worker=http-0.0.0.0-8080,name=HttpRequest2 type : JMX.mbean.regis tered 11:13:09,757 DEBUG [MapperListener] Handle jboss.web:type=RequestProcessor,worker=http-0.0.0.0-8080,name=HttpRequest2 type : JMX.mbean.regis tered 11:13:09,757 DEBUG [CoyoteAdapter] Requested cookie session id is 097FDA5D8722CEE1F93F50825F06E732 11:13:09,757 DEBUG [HttpServletRequestResponseValve] store Request and Response ojbects and call super.invoke(request, response) 11:13:09,757 DEBUG [AuthenticatorBase] Security checking request GET /Workplace/containerSecured/Return.jsp 11:13:09,757 DEBUG [AuthenticatorBase] Security checking request GET /Workplace/containerSecured/Return.jsp 11:13:09,757 DEBUG [RealmBase] Checking constraint 'SecurityConstraint[action]' against GET /containerSecured/Return.jsp --> true 11:13:09,757 DEBUG [RealmBase] Checking constraint 'SecurityConstraint[action]' against GET /containerSecured/Return.jsp --> true 11:13:09,757 DEBUG [AuthenticatorBase] Calling hasUserDataPermission() 11:13:09,757 DEBUG [AuthenticatorBase] Calling hasUserDataPermission() 11:13:09,757 DEBUG [RealmBase] User data constraint has no restrictions 11:13:09,757 DEBUG [AuthenticatorBase] Calling authenticate() 11:13:09,757 DEBUG [AuthenticatorBase] Calling authenticate() 11:13:09,757 DEBUG [HttpServletRequestResponseValve] authenticate() begin 11:13:09,757 DEBUG [NegotiateExtLoginModule] login() begin 11:13:09,757 DEBUG [NegotiateExtLoginModule] ntlmChallenge:sf-x8zïy 11:13:09,757 DEBUG [NegotiateExtLoginModule] will call callbackHandler ... 11:13:09,757 DEBUG [AdvancedWebCallbackHandler] Got NegotiateCallback: [B@1fea274 11:13:10,022 DEBUG [AdvancedWebCallbackHandler] Token was Type 1 NTLM 11:13:10,085 DEBUG [NegotiateExtLoginModule] have called callbackHandler, will validate all of callback 11:13:10,085 DEBUG [NegotiateExtLoginModule] _principal:null 11:13:10,100 DEBUG [HttpServletRequestResponseValve] UserId:null 11:13:10,100 DEBUG [NegotiateExtLoginModule] login() begin 11:13:10,100 DEBUG [NegotiateExtLoginModule] ntlmChallenge:sf-x8zïy 11:13:10,100 DEBUG [NegotiateExtLoginModule] will call callbackHandler ... 11:13:10,100 DEBUG [AdvancedWebCallbackHandler] Got NegotiateCallback: [B@114da8 11:13:10,100 DEBUG [AdvancedWebCallbackHandler] Token was Type 1 NTLM 11:13:10,272 DEBUG [NegotiateExtLoginModule] have called callbackHandler, will validate all of callback 11:13:10,272 DEBUG [NegotiateExtLoginModule] _principal:null 11:13:10,272 DEBUG [AuthenticatorBase] Failed authenticate() test 11:13:10,272 DEBUG [AuthenticatorBase] Failed authenticate() test 11:13:10,272 DEBUG [HttpServletRequestResponseValve] super.invoke(request, response) is over 11:13:10,287 DEBUG [CoyoteAdapter] Requested cookie session id is 097FDA5D8722CEE1F93F50825F06E732 11:13:10,287 DEBUG [HttpServletRequestResponseValve] store Request and Response ojbects and call super.invoke(request, response) 11:13:10,287 DEBUG [AuthenticatorBase] Security checking request GET /Workplace/containerSecured/Return.jsp 11:13:10,287 DEBUG [AuthenticatorBase] Security checking request GET /Workplace/containerSecured/Return.jsp 11:13:10,287 DEBUG [RealmBase] Checking constraint 'SecurityConstraint[action]' against GET /containerSecured/Return.jsp --> true 11:13:10,287 DEBUG [RealmBase] Checking constraint 'SecurityConstraint[action]' against GET /containerSecured/Return.jsp --> true 11:13:10,287 DEBUG [AuthenticatorBase] Calling hasUserDataPermission() 11:13:10,287 DEBUG [AuthenticatorBase] Calling hasUserDataPermission() 11:13:10,287 DEBUG [RealmBase] User data constraint has no restrictions 11:13:10,287 DEBUG [AuthenticatorBase] Calling authenticate() 11:13:10,287 DEBUG [AuthenticatorBase] Calling authenticate() 11:13:10,287 DEBUG [HttpServletRequestResponseValve] authenticate() begin 11:13:10,287 DEBUG [NegotiateExtLoginModule] login() begin 11:13:10,287 DEBUG [NegotiateExtLoginModule] ntlmChallenge:sf-x8zïy 11:13:10,287 DEBUG [NegotiateExtLoginModule] will call callbackHandler ... 11:13:10,287 DEBUG [AdvancedWebCallbackHandler] Got NegotiateCallback: [B@151a7 11:13:10,287 DEBUG [AdvancedWebCallbackHandler] Token was Type 3 NTLM 11:13:10,287 DEBUG [NegotiateExtLoginModule] have called callbackHandler, will validate all of callback 11:13:10,287 DEBUG [NegotiateExtLoginModule] Found NTLM token in SPNEGO: NTLMSSP ? ? ? î ? ? ñ ? ? H ? ? Z ? ? t + ?? ???+ ? ¤A S F I L E N E T A d m i n i s t r a t o r F I L E N E T - T E S T 8¦?#?3?fS£+El?µê +nGƒë?D8¦?#?3?fS£+El?µê +nGƒë?D 11:13:10,287 DEBUG [NegotiateExtLoginModule] doNtlmAuth() is begin, dc:0.0.0.0<00>/192.168.10.1 principal:ASFILENET\Administrator 11:13:10,365 DEBUG [NegotiateExtLoginModule] SmbSession logon sucessful 11:13:10,365 DEBUG [NegotiateExtLoginModule] _principal:ASFILENET\Administrator 11:13:10,365 DEBUG [NegotiateExtLoginModule] getRoleSets() begin... 11:13:10,381 DEBUG [HttpServletRequestResponseValve] principal.getName():1212462790287 11:13:10,381 DEBUG [HttpServletRequestResponseValve] UserId:ASFILENET\Administrator 11:13:10,381 DEBUG [NegotiateExtLoginModule] login() begin 11:13:10,381 DEBUG [NegotiateExtLoginModule] ntlmChallenge:sf-x8zïy 11:13:10,381 DEBUG [NegotiateExtLoginModule] will call callbackHandler ... 11:13:10,381 DEBUG [AdvancedWebCallbackHandler] Got NegotiateCallback: [B@1ef37d6 11:13:10,381 DEBUG [AdvancedWebCallbackHandler] Token was Type 3 NTLM 11:13:10,381 DEBUG [NegotiateExtLoginModule] have called callbackHandler, will validate all of callback 11:13:10,381 DEBUG [NegotiateExtLoginModule] Found NTLM token in SPNEGO: NTLMSSP ? ? ? î ? ? ñ ? ? H ? ? Z ? ? t + ?? ???+ ? ¤A S F I L E N E T A d m i n i s t r a t o r F I L E N E T - T E S T 8¦?#?3?fS£+El?µê +nGƒë?D8¦?#?3?fS£+El?µê +nGƒë?D 11:13:10,381 DEBUG [NegotiateExtLoginModule] doNtlmAuth() is begin, dc:0.0.0.0<00>/192.168.10.1 principal:ASFILENET\Administrator 11:13:10,381 DEBUG [NegotiateExtLoginModule] SmbSession logon sucessful 11:13:10,381 DEBUG [NegotiateExtLoginModule] _principal:ASFILENET\Administrator 11:13:10,381 DEBUG [NegotiateExtLoginModule] getRoleSets() begin... 11:13:10,381 DEBUG [HttpServletRequestResponseValve] principal.getName(): ASFILENET\Administrator 11:13:10,381 DEBUG [AuthenticatorBase] Calling accessControl() 11:13:10,381 DEBUG [AuthenticatorBase] Calling accessControl() 11:13:10,381 DEBUG [AuthenticatorBase] Successfully passed all security constraints 11:13:10,381 DEBUG [AuthenticatorBase] Successfully passed all security constraints 11:13:10,381 INFO [STDOUT] now Principal is:ASFILENET\Administrator,principal Name is ASFILENET\Administrator 11:13:10,396 DEBUG [JspServlet] JspEngine --> /containerSecured/Return.jsp 11:13:10,396 DEBUG [JspServlet] ServletPath: /containerSecured/Return.jsp 11:13:10,396 DEBUG [JspServlet] PathInfo: null 11:13:10,396 DEBUG [JspServlet] RealPath: C:\jboss-4.0.5.GA\server\filenetsso\.\deploy\Workplace.war\containerSecured\Return .jsp 11:13:10,396 DEBUG [JspServlet] RequestURI: /Workplace/containerSecured/Return.jsp 11:13:10,396 DEBUG [JspServlet] QueryString: returnUrl=http%3A%2F%2Ffilenet-test.asfilenet.com%3A8080%2FWorkplace%2F 11:13:10,396 DEBUG [JspServlet] Request Params: 11:13:10,396 DEBUG [JspServlet] returnUrl = http://filenet-test.asfilenet.com:8080/Workplace/ 11:13:10,552 DEBUG [HttpServletRequestResponseValve] super.invoke(request, response) is over 11:13:10,568 DEBUG [CoyoteAdapter] Requested cookie session id is 097FDA5D8722CEE1F93F50825F06E732 11:13:10,568 DEBUG [HttpServletRequestResponseValve] store Request and Response ojbects and call super.invoke(request, response) 11:13:10,568 DEBUG [AuthenticatorBase] Security checking request GET /Workplace/ 11:13:10,568 DEBUG [AuthenticatorBase] Security checking request GET /Workplace/ 11:13:10,568 DEBUG [RealmBase] Checking constraint 'SecurityConstraint[action]' against GET /WcmDefault.jsp --> false 11:13:10,568 DEBUG [RealmBase] Checking constraint 'SecurityConstraint[action]' against GET /WcmDefault.jsp --> false 11:13:10,568 DEBUG [RealmBase] Checking constraint 'SecurityConstraint[action]' against GET /WcmDefault.jsp --> false 11:13:10,568 DEBUG [RealmBase] Checking constraint 'SecurityConstraint[action]' against GET /WcmDefault.jsp --> false 11:13:10,568 DEBUG [RealmBase] No applicable constraint located 11:13:10,568 DEBUG [AuthenticatorBase] Not subject to any constraint 11:13:10,568 DEBUG [AuthenticatorBase] Not subject to any constraint 11:13:10,568 INFO [STDOUT] Could not get User Principal from request.getUserPrincipal(),use session instead. 11:13:10,568 INFO [STDOUT] Try Insert User Principal To Request............ 11:13:10,568 INFO [STDOUT] now Principal is:ASFILENET\Administrator,principal Name is ASFILENET\Administrator 11:13:10,568 DEBUG [JspServlet] JspEngine --> /WcmDefault.jsp 11:13:10,568 DEBUG [JspServlet] ServletPath: /WcmDefault.jsp 11:13:10,568 DEBUG [JspServlet] PathInfo: null 11:13:10,568 DEBUG [JspServlet] RealPath: C:\jboss-4.0.5.GA\server\filenetsso\.\deploy\Workplace.war\WcmDefault.jsp 11:13:10,568 DEBUG [JspServlet] RequestURI: /Workplace/WcmDefault.jsp 11:13:10,568 DEBUG [JspServlet] QueryString: null 11:13:10,568 DEBUG [JspServlet] Request Params: 11:13:11,659 INFO [STDOUT] Using Java API config file: jndi:/localhost/Workplace/WEB-INF/WcmApiConfig.properties. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4155211#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...