[Security & JAAS/JBoss] - DatabaseServerLoginModule failing after success?...confused - jboss-user

Monday, 17 August 2009

I am using jboss-5.0.0.GA.  I have tried to use the DatabaseServerLoginModule.  Please see
the following configuration and audit.log.  Everything seems to work until redirect back
to original requested resource.  I am at my wits end.  Please... Any help would be much
appreciated.

I changed the default ports in 
bindings.xml

| 
  |             <bean
class="org.jboss.services.binding.ServiceBindingMetadata">
  |                <property
name="serviceName">jboss.web:service=WebServer</property>
  |                <property name="port">80</property>
  | 
  |                
  |                <property
name="serviceBindingValueSourceConfig"><inject
bean="JBossWebConnectorXSLTConfig"/></property>
  |             </bean>
  | 
  |             
  |             <bean
class="org.jboss.services.binding.ServiceBindingMetadata">
  |                <property
name="serviceName">jboss.web:service=WebServer</property>
  |                <property
name="bindingName">HttpsConnector</property>
  |                <property name="port">443</property>
  |             </bean>
  | 
  |

lt4-mysql-ds.xml

  | <datasources>
  | 	<local-tx-datasource>
  | 		<jndi-name>jdbc/lt4DS</jndi-name>
  | 		<connection-url>jdbc:mysql://localhost:3306/lt4</connection-url>
  | 		<driver-class>com.mysql.jdbc.Driver</driver-class>
  | 		<user-name>lt4_db_user</user-name>
  | 		<password>lt4_db_user</password>
  |
		<transaction-isolation>TRANSACTION_READ_COMMITTED</transaction-isolation>
  | 		<min-pool-size>5</min-pool-size>
  | 		<max-pool-size>20</max-pool-size>
  | 		<idle-timeout-minutes>15</idle-timeout-minutes>
  | 		<metadata>
  | 			<type-mapping>mySQL</type-mapping>
  | 		</metadata>
  | 	</local-tx-datasource>
  | </datasources>
  | 
lt4-jboss-beans.xml

  | <?xml version="1.0" encoding="UTF-8"?>
  | <deployment xmlns="urn:jboss:bean-deployer:2.0">
  | 	<application-policy xmlns="urn:jboss:security-beans:1.0"
name="lt4-security-domain">
  | 		<authentication>
  | 			<login-module
code="org.jboss.security.auth.spi.DatabaseServerLoginModule"
flag="required">
  | 				<module-option
name="unauthenticatedIdentity">guest</module-option>
  | 				<module-option
name="dsJndiName">java:/jdbc/lt4DS</module-option>
  | 				<module-option name="principalsQuery">SELECT a.userpass FROM
lt4._auth_user a where a.username=?</module-option>
  | 				<module-option name="rolesQuery">SELECT a.role,'rolegroup'
FROM lt4._auth_userrole a where a.username=?</module-option>
  | 			</login-module>
  | 		</authentication>
  | 	</application-policy>
  | </deployment>
  | 
jboss-app

  | <?xml version="1.0" encoding="UTF-8"?>
  | <!DOCTYPE jboss-app PUBLIC
  | 	"-//JBoss//DTD J2EE Application 1.4//EN"
  | 	"http://www.jboss.org/j2ee/dtd/jboss-app_4_2.dtd">
  | <jboss-app>
  | 	<module-order>strict</module-order>
  | 	<security-domain>java:/jaas/lt4-security-domain</security-domain>
  | 	<loader-repository>com.devj2ee:loader=lt4Ear.ear</loader-repository>
  | </jboss-app>
  | 
application.xml

  | <?xml version="1.0" encoding="UTF-8"?>
  | <!DOCTYPE application PUBLIC
  | 	"-//Sun Microsystems, Inc.//DTD J2EE Application 1.3//EN"
  | 	"http://java.sun.com/dtd/application_1_3.dtd">
  | <application>
  |   <display-name>lt4</display-name>
  |   <description>This is the lt4 ear.</description>
  |   <module>
  |     <web>
  |       <web-uri>lt4WebApp.war</web-uri>
  |       <context-root>/main</context-root>
  |     </web>
  |   </module>
  | </application>
  | 
jboss-web

  | <?xml version="1.0" encoding="UTF-8"?>
  | <!DOCTYPE jboss-web PUBLIC "-//JBoss//DTD Web Application 5.0//EN"
"http://www.jboss.org/j2ee/dtd/jboss-web_5_0.dtd" >
  | <jboss-web>
  | 	<security-domain>java:/jaas/lt4-security-domain</security-domain>
  | 
  | 	<context-root>/main</context-root>
  | 	
  | 	<virtual-host>lt4webapp.com</virtual-host>
  | 	<resource-ref>
  | 		<res-ref-name>jdbc/lt4DS</res-ref-name>
  | 		<jndi-name>java:/jdbc/lt4DS</jndi-name>
  | 	</resource-ref>
  | </jboss-web>
  | 
web.xml

  | <?xml version="1.0" encoding="UTF-8"?>
  | <web-app version="2.4" xmlns="http://java.sun.com/xml/ns/j2ee"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="http://java.sun.com/xml/ns/j2ee
http://java.sun.com/xml/ns/j2ee/web-app_2_4.xsd">
  | 
  | 	<display-name>Lt4 Web App</display-name>
  | 
  | 	<login-config>
  | 		<auth-method>FORM</auth-method>
  | 		<realm-name>Lt4</realm-name>
  | 		<form-login-config>
  | 			<form-login-page>/login.jsp</form-login-page>
  | 			<form-error-page>/fail_login.html</form-error-page>
  | 		</form-login-config>
  | 	</login-config>
  | 
  | 	<security-constraint>
  | 		<web-resource-collection>
  | 			<web-resource-name>SecurityRestriction</web-resource-name>
  | 			<description>Lt4 security</description>
  | 			<url-pattern>/app/*</url-pattern>
  | 			<http-method>GET</http-method>
  | 			<http-method>POST</http-method>
  | 		</web-resource-collection>
  | 		<auth-constraint>
  | 			<role-name>lt4_app_admin</role-name>
  | 		</auth-constraint>
  | 		<user-data-constraint>
  | 			<transport-guarantee>CONFIDENTIAL</transport-guarantee>
  | 		</user-data-constraint>
  | 	</security-constraint>
  | 
  | 	<security-role>
  | 		<description>Lt4 User</description>
  | 		<role-name>lt4_app_admin</role-name>
  | 	</security-role>
  | 
  | 	<resource-ref>
  | 		<res-ref-name>jdbc/lt4DS</res-ref-name>
  | 		<res-type>javax.sql.DataSource</res-type>
  | 		<res-auth>Container</res-auth>
  | 	</resource-ref>
  | 
  | </web-app>
  | 

audit.log

2009-08-17 14:33:28,708 INFO  [org.jboss.bootstrap.microcontainer.ServerImpl] (main:)
JBoss (Microcontainer) [5.0.0.GA (build: SVNTag=JBoss_5_0_0_GA date=200812041714)] Started
in 39s:953ms
2009-08-17 14:33:30,313 DEBUG [com.arjuna.ats.arjuna.logging.arjLogger] (Thread-12:)
Periodic recovery - second pass <Mon, 17 Aug 2009 14:33:30>
2009-08-17 14:33:30,320 DEBUG [com.arjuna.ats.arjuna.logging.arjLogger] (Thread-12:)
AtomicActionRecoveryModule: Second pass 
2009-08-17 14:33:30,320 DEBUG [com.arjuna.ats.txoj.logging.txojLoggerI18N] (Thread-12:)
[com.arjuna.ats.internal.txoj.recovery.TORecoveryModule_6] - TORecoveryModule - second
pass
2009-08-17 14:33:30,320 DEBUG [com.arjuna.ats.jta.logging.loggerI18N] (Thread-12:)
[com.arjuna.ats.internal.jta.recovery.info.secondpass] Local XARecoveryModule - second
pass
2009-08-17 14:33:40,849 DEBUG [org.apache.catalina.connector.MapperListener]
(http-127.0.0.1-80-1:) Handle
jboss.web:type=RequestProcessor,worker=http-127.0.0.1-80,name=HttpRequest1 type :
JMX.mbean.registered
2009-08-17 14:33:40,850 DEBUG [org.apache.catalina.connector.MapperListener]
(http-127.0.0.1-80-1:) Handle
jboss.web:type=RequestProcessor,worker=http-127.0.0.1-80,name=HttpRequest1 type :
JMX.mbean.registered
2009-08-17 14:33:40,850 DEBUG [org.apache.catalina.connector.MapperListener]
(http-127.0.0.1-80-1:) Handle
jboss.web:type=RequestProcessor,worker=http-127.0.0.1-80,name=HttpRequest1 type :
JMX.mbean.registered
2009-08-17 14:33:40,885 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-80-1:) REQUEST URI       =/main/app/
2009-08-17 14:33:40,888 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-80-1:)           authType=null
2009-08-17 14:33:40,892 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-80-1:)  characterEncoding=null
2009-08-17 14:33:40,895 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-80-1:)      contentLength=-1
2009-08-17 14:33:40,898 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-80-1:)        contentType=null
2009-08-17 14:33:40,900 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-80-1:)        contextPath=/main
2009-08-17 14:33:40,905 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-80-1:)             header=accept=image/gif, image/jpeg, image/pjpeg,
application/x-ms-application, application/vnd.ms-xpsdocument, application/xaml+xml,
application/x-ms-xbap, application/x-shockwave-flash, */*
2009-08-17 14:33:40,907 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-80-1:)             header=accept-language=en-us
2009-08-17 14:33:40,909 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-80-1:)             header=user-agent=Mozilla/4.0 (compatible; MSIE 8.0;
Windows NT 6.0; WOW64; Trident/4.0; Comcast Install 1.0; SLCC1; .NET CLR 2.0.50727; Media
Center PC 5.0; .NET CLR 3.5.30729; .NET CLR 3.0.30618)
2009-08-17 14:33:40,912 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-80-1:)             header=accept-encoding=gzip, deflate
2009-08-17 14:33:40,914 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-80-1:)             header=host=lt4webapp.com
2009-08-17 14:33:40,917 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-80-1:)             header=connection=Keep-Alive
2009-08-17 14:33:40,919 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-80-1:)             locale=en_US
2009-08-17 14:33:40,922 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-80-1:)             method=GET
2009-08-17 14:33:40,926 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-80-1:)           pathInfo=null
2009-08-17 14:33:40,929 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-80-1:)           protocol=HTTP/1.1
2009-08-17 14:33:40,931 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-80-1:)        queryString=null
2009-08-17 14:33:40,933 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-80-1:)         remoteAddr=127.0.0.1
2009-08-17 14:33:40,936 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-80-1:)         remoteHost=127.0.0.1
2009-08-17 14:33:40,938 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-80-1:)         remoteUser=null
2009-08-17 14:33:40,940 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-80-1:) requestedSessionId=null
2009-08-17 14:33:40,943 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-80-1:)             scheme=http
2009-08-17 14:33:40,946 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-80-1:)         serverName=lt4webapp.com
2009-08-17 14:33:40,950 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-80-1:)         serverPort=80
2009-08-17 14:33:40,952 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-80-1:)        servletPath=/app/
2009-08-17 14:33:40,955 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-80-1:)           isSecure=false
2009-08-17 14:33:40,957 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-80-1:) ---------------------------------------------------------------
2009-08-17 14:33:40,968 TRACE [org.jboss.security.SecurityRolesAssociation]
(http-127.0.0.1-80-1:) Setting threadlocal:{}
2009-08-17 14:33:40,969 TRACE [org.jboss.web.tomcat.security.JaccContextValve]
(http-127.0.0.1-80-1:)
MetaData:org.jboss.metadata.web.jboss.JBossWebMetaData@1f:principalToRoleSetMap{}
2009-08-17 14:33:40,970 DEBUG [org.apache.catalina.authenticator.AuthenticatorBase]
(http-127.0.0.1-80-1:) Security checking request GET /main/app/
2009-08-17 14:33:40,971 DEBUG [org.apache.catalina.realm.RealmBase] (http-127.0.0.1-80-1:)
  Checking constraint 'SecurityConstraint[SecurityRestriction]' against GET /app/
--> true
2009-08-17 14:33:40,971 DEBUG [org.apache.catalina.realm.RealmBase] (http-127.0.0.1-80-1:)
  Checking constraint 'SecurityConstraint[SecurityRestriction]' against GET /app/
--> true
2009-08-17 14:33:40,971 DEBUG [org.apache.catalina.authenticator.AuthenticatorBase]
(http-127.0.0.1-80-1:)  Calling hasUserDataPermission()
2009-08-17 14:33:40,971 DEBUG [org.apache.catalina.realm.RealmBase] (http-127.0.0.1-80-1:)
  Redirecting to https://lt4webapp.com/main/app/
2009-08-17 14:33:40,971 DEBUG [org.apache.catalina.authenticator.AuthenticatorBase]
(http-127.0.0.1-80-1:)  Failed hasUserDataPermission() test
2009-08-17 14:33:40,972 TRACE [org.jboss.security.SecurityRolesAssociation]
(http-127.0.0.1-80-1:) Setting threadlocal:null
2009-08-17 14:33:40,972 TRACE [org.jboss.security.SecurityRolesAssociation]
(http-127.0.0.1-80-1:) Setting threadlocal:null
2009-08-17 14:33:40,975 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-80-1:) ---------------------------------------------------------------
2009-08-17 14:33:40,977 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-80-1:)           authType=null
2009-08-17 14:33:40,980 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-80-1:)      contentLength=-1
2009-08-17 14:33:40,982 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-80-1:)        contentType=null
2009-08-17 14:33:40,985 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-80-1:)             header=Pragma=No-cache
2009-08-17 14:33:40,987 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-80-1:)             header=Cache-Control=no-cache
2009-08-17 14:33:40,989 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-80-1:)             header=Expires=Wed, 31 Dec 1969 19:00:00 EST
2009-08-17 14:33:40,991 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-80-1:)             header=Location=https://lt4webapp.com/main/app/
2009-08-17 14:33:40,993 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-80-1:)            message=null
2009-08-17 14:33:40,996 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-80-1:)         remoteUser=null
2009-08-17 14:33:40,999 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-80-1:)             status=302
2009-08-17 14:33:41,002 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-80-1:) ===============================================================
2009-08-17 14:33:41,127 DEBUG [org.apache.catalina.connector.MapperListener]
(http-127.0.0.1-443-1:) Handle
jboss.web:type=RequestProcessor,worker=http-127.0.0.1-443,name=HttpRequest1 type :
JMX.mbean.registered
2009-08-17 14:33:41,128 DEBUG [org.apache.catalina.connector.MapperListener]
(http-127.0.0.1-443-1:) Handle
jboss.web:type=RequestProcessor,worker=http-127.0.0.1-443,name=HttpRequest1 type :
JMX.mbean.registered
2009-08-17 14:33:41,128 DEBUG [org.apache.catalina.connector.MapperListener]
(http-127.0.0.1-443-1:) Handle
jboss.web:type=RequestProcessor,worker=http-127.0.0.1-443,name=HttpRequest1 type :
JMX.mbean.registered
2009-08-17 14:33:41,150 DEBUG [org.apache.catalina.connector.CoyoteAdapter]
(http-127.0.0.1-443-1:)  Requested cookie session id is 4E04EB2A54D9C8FE9705AA5024EFACCD
2009-08-17 14:33:41,150 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:) REQUEST URI       =/main/app/
2009-08-17 14:33:41,152 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)           authType=null
2009-08-17 14:33:41,154 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)  characterEncoding=null
2009-08-17 14:33:41,157 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)      contentLength=-1
2009-08-17 14:33:41,159 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)        contentType=null
2009-08-17 14:33:41,163 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)        contextPath=/main
2009-08-17 14:33:41,166 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)             cookie=JSESSIONID=4E04EB2A54D9C8FE9705AA5024EFACCD
2009-08-17 14:33:41,169 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)             header=accept=image/gif, image/jpeg, image/pjpeg,
application/x-ms-application, application/vnd.ms-xpsdocument, application/xaml+xml,
application/x-ms-xbap, application/x-shockwave-flash, */*
2009-08-17 14:33:41,172 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)             header=accept-language=en-us
2009-08-17 14:33:41,175 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)             header=user-agent=Mozilla/4.0 (compatible; MSIE 8.0;
Windows NT 6.0; WOW64; Trident/4.0; Comcast Install 1.0; SLCC1; .NET CLR 2.0.50727; Media
Center PC 5.0; .NET CLR 3.5.30729; .NET CLR 3.0.30618)
2009-08-17 14:33:41,179 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)             header=accept-encoding=gzip, deflate
2009-08-17 14:33:41,181 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)             header=host=lt4webapp.com
2009-08-17 14:33:41,183 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)             header=connection=Keep-Alive
2009-08-17 14:33:41,185 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)            
header=cookie=JSESSIONID=4E04EB2A54D9C8FE9705AA5024EFACCD
2009-08-17 14:33:41,188 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)             locale=en_US
2009-08-17 14:33:41,190 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)             method=GET
2009-08-17 14:33:41,192 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)           pathInfo=null
2009-08-17 14:33:41,194 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)           protocol=HTTP/1.1
2009-08-17 14:33:41,196 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)        queryString=null
2009-08-17 14:33:41,199 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)         remoteAddr=127.0.0.1
2009-08-17 14:33:41,202 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)         remoteHost=127.0.0.1
2009-08-17 14:33:41,204 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)         remoteUser=null
2009-08-17 14:33:41,206 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:) requestedSessionId=4E04EB2A54D9C8FE9705AA5024EFACCD
2009-08-17 14:33:41,209 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)             scheme=https
2009-08-17 14:33:41,211 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)         serverName=lt4webapp.com
2009-08-17 14:33:41,214 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)         serverPort=443
2009-08-17 14:33:41,216 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)        servletPath=/app/
2009-08-17 14:33:41,218 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)           isSecure=true
2009-08-17 14:33:41,221 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:) ---------------------------------------------------------------
2009-08-17 14:33:41,224 TRACE [org.jboss.security.SecurityRolesAssociation]
(http-127.0.0.1-443-1:) Setting threadlocal:{}
2009-08-17 14:33:41,224 TRACE [org.jboss.web.tomcat.security.JaccContextValve]
(http-127.0.0.1-443-1:)
MetaData:org.jboss.metadata.web.jboss.JBossWebMetaData@1f:principalToRoleSetMap{}
2009-08-17 14:33:41,225 DEBUG [org.apache.catalina.authenticator.AuthenticatorBase]
(http-127.0.0.1-443-1:) Security checking request GET /main/app/
2009-08-17 14:33:41,225 DEBUG [org.apache.catalina.realm.RealmBase]
(http-127.0.0.1-443-1:)   Checking constraint
'SecurityConstraint[SecurityRestriction]' against GET /app/ --> true
2009-08-17 14:33:41,225 DEBUG [org.apache.catalina.realm.RealmBase]
(http-127.0.0.1-443-1:)   Checking constraint
'SecurityConstraint[SecurityRestriction]' against GET /app/ --> true
2009-08-17 14:33:41,225 DEBUG [org.apache.catalina.authenticator.AuthenticatorBase]
(http-127.0.0.1-443-1:)  Calling hasUserDataPermission()
2009-08-17 14:33:41,225 DEBUG [org.apache.catalina.realm.RealmBase]
(http-127.0.0.1-443-1:)   User data constraint already satisfied
2009-08-17 14:33:41,256 DEBUG [org.jboss.security.integration.JNDIBasedSecurityManagement]
(http-127.0.0.1-443-1:) Creating SDC for domain=lt4-security-domain
2009-08-17 14:33:41,257 TRACE [org.jboss.security.plugins.JaasSecurityManager]
(http-127.0.0.1-443-1:) Constructing
2009-08-17 14:33:41,257 DEBUG
[org.jboss.security.plugins.auth.JaasSecurityManagerBase.lt4-security-domain]
(http-127.0.0.1-443-1:) CallbackHandler:
org.jboss.security.auth.callback.JBossCallbackHandler@180406e
2009-08-17 14:33:41,257 DEBUG
[org.jboss.security.plugins.auth.JaasSecurityManagerBase.lt4-security-domain]
(http-127.0.0.1-443-1:) CachePolicy set to: org.jboss.util.TimedCachePolicy@10624b0
2009-08-17 14:33:41,257 DEBUG [org.jboss.security.integration.JNDIBasedSecurityManagement]
(http-127.0.0.1-443-1:) setCachePolicy, c=org.jboss.util.TimedCachePolicy@10624b0
2009-08-17 14:33:41,270 TRACE
[org.jboss.security.plugins.authorization.JBossAuthorizationContext]
(http-127.0.0.1-443-1:) Control flag for
entry:org.jboss.security.authorization.config.AuthorizationModuleEntry{org.jboss.security.authorization.modules.DelegatingAuthorizationModule:{}REQUIRED}is:[REQUIRED]
2009-08-17 14:33:41,289 DEBUG [org.apache.catalina.authenticator.AuthenticatorBase]
(http-127.0.0.1-443-1:)  Calling authenticate()
2009-08-17 14:33:41,311 TRACE [org.jboss.web.tomcat.security.SecurityFlushSessionListener]
(http-127.0.0.1-443-1:) Session Created with id=B5D938082F5D18ECCEFEC25033F36DB3
2009-08-17 14:33:41,313 DEBUG [org.apache.catalina.authenticator.FormAuthenticator]
(http-127.0.0.1-443-1:) Save request in session
'B5D938082F5D18ECCEFEC25033F36DB3'
2009-08-17 14:33:41,341 TRACE [org.apache.catalina.core.StandardWrapper]
(http-127.0.0.1-443-1:)   Returning non-STM instance
2009-08-17 14:33:41,342 TRACE [org.jboss.web.tomcat.security.RunAsListener]
(http-127.0.0.1-443-1:) jsp, runAs: null
2009-08-17 14:33:41,342 TRACE [org.jboss.web.tomcat.security.RunAsListener]
(http-127.0.0.1-443-1:) jsp, runAs: null
2009-08-17 14:33:42,651 TRACE [org.jboss.web.tomcat.security.RunAsListener]
(http-127.0.0.1-443-1:) jsp, runAs: null
2009-08-17 14:33:42,651 TRACE [org.jboss.web.tomcat.security.RunAsListener]
(http-127.0.0.1-443-1:) jsp, runAs: null
2009-08-17 14:33:42,652 DEBUG
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com].[/main].[jsp]]
(http-127.0.0.1-443-1:)  Disabling the response for futher output
2009-08-17 14:33:42,662 DEBUG [org.apache.catalina.authenticator.AuthenticatorBase]
(http-127.0.0.1-443-1:)  Failed authenticate() test
2009-08-17 14:33:42,662 TRACE [org.jboss.security.SecurityRolesAssociation]
(http-127.0.0.1-443-1:) Setting threadlocal:null
2009-08-17 14:33:42,662 TRACE [org.jboss.security.SecurityRolesAssociation]
(http-127.0.0.1-443-1:) Setting threadlocal:null
2009-08-17 14:33:42,666 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:) ---------------------------------------------------------------
2009-08-17 14:33:42,668 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)           authType=null
2009-08-17 14:33:42,671 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)      contentLength=-1
2009-08-17 14:33:42,673 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)        contentType=text/html;charset=ISO-8859-1
2009-08-17 14:33:42,676 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)             cookie=JSESSIONID=B5D938082F5D18ECCEFEC25033F36DB3;
domain=null; path=/main
2009-08-17 14:33:42,678 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)             header=Pragma=No-cache
2009-08-17 14:33:42,681 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)             header=Cache-Control=no-cache
2009-08-17 14:33:42,684 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)             header=Expires=Wed, 31 Dec 1969 19:00:00 EST
2009-08-17 14:33:42,687 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)            
header=Set-Cookie=JSESSIONID=B5D938082F5D18ECCEFEC25033F36DB3; Path=/main; Secure
2009-08-17 14:33:42,689 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)            message=null
2009-08-17 14:33:42,691 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)         remoteUser=null
2009-08-17 14:33:42,694 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)             status=200
2009-08-17 14:33:42,696 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:) ===============================================================
2009-08-17 14:33:48,438 TRACE
[org.jboss.security.plugins.auth.JaasSecurityManagerBase.HsqlDbRealm]
(JBossEJB3QuartzScheduler_QuartzSchedulerThread:) Begin isValid, principal:null, cache
info:
org.jboss.security.plugins.auth.JaasSecurityManagerBase$DomainInfo@1e85fc7[Subject(3379044).principals=org.jboss.security.SimplePrincipal(a)448291(sa),credential.class=null,expirationTime=1250535803641]
2009-08-17 14:33:48,439 TRACE
[org.jboss.security.plugins.auth.JaasSecurityManagerBase.HsqlDbRealm]
(JBossEJB3QuartzScheduler_QuartzSchedulerThread:) Begin validateCache,
info=org.jboss.security.plugins.auth.JaasSecurityManagerBase$DomainInfo@1e85fc7[Subject(3379044).principals=org.jboss.security.SimplePrincipal(a)448291(sa),credential.class=null,expirationTime=1250535803641];credential.class=null
2009-08-17 14:33:48,439 TRACE
[org.jboss.security.plugins.auth.JaasSecurityManagerBase.HsqlDbRealm]
(JBossEJB3QuartzScheduler_QuartzSchedulerThread:) End validateCache, isValid=true
2009-08-17 14:33:48,440 TRACE
[org.jboss.security.plugins.auth.JaasSecurityManagerBase.HsqlDbRealm]
(JBossEJB3QuartzScheduler_QuartzSchedulerThread:) End isValid, true
2009-08-17 14:33:52,390 DEBUG [org.apache.catalina.connector.CoyoteAdapter]
(http-127.0.0.1-443-1:)  Requested cookie session id is B5D938082F5D18ECCEFEC25033F36DB3
2009-08-17 14:33:52,390 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:) REQUEST URI       =/main/app/j_security_check
2009-08-17 14:33:52,392 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)           authType=null
2009-08-17 14:33:52,396 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)  characterEncoding=null
2009-08-17 14:33:52,398 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)      contentLength=37
2009-08-17 14:33:52,401 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)        contentType=application/x-www-form-urlencoded
2009-08-17 14:33:52,404 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)        contextPath=/main
2009-08-17 14:33:52,407 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)             cookie=JSESSIONID=B5D938082F5D18ECCEFEC25033F36DB3
2009-08-17 14:33:52,409 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)             header=accept=image/gif, image/jpeg, image/pjpeg,
application/x-ms-application, application/vnd.ms-xpsdocument, application/xaml+xml,
application/x-ms-xbap, application/x-shockwave-flash, */*
2009-08-17 14:33:52,412 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)             header=referer=https://lt4webapp.com/main/app/
2009-08-17 14:33:52,415 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)             header=accept-language=en-us
2009-08-17 14:33:52,421 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)             header=user-agent=Mozilla/4.0 (compatible; MSIE 8.0;
Windows NT 6.0; WOW64; Trident/4.0; Comcast Install 1.0; SLCC1; .NET CLR 2.0.50727; Media
Center PC 5.0; .NET CLR 3.5.30729; .NET CLR 3.0.30618)
2009-08-17 14:33:52,423 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)             header=content-type=application/x-www-form-urlencoded
2009-08-17 14:33:52,425 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)             header=accept-encoding=gzip, deflate
2009-08-17 14:33:52,428 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)             header=host=lt4webapp.com
2009-08-17 14:33:52,431 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)             header=content-length=37
2009-08-17 14:33:52,433 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)             header=connection=Keep-Alive
2009-08-17 14:33:52,436 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)             header=cache-control=no-cache
2009-08-17 14:33:52,439 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)            
header=cookie=JSESSIONID=B5D938082F5D18ECCEFEC25033F36DB3
2009-08-17 14:33:52,441 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)             locale=en_US
2009-08-17 14:33:52,443 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)             method=POST
2009-08-17 14:33:52,447 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)          parameter=j_username=lt4_app_user
2009-08-17 14:33:52,449 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)          parameter=j_password=lt4_app_user
2009-08-17 14:33:52,460 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)           pathInfo=null
2009-08-17 14:33:52,462 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)           protocol=HTTP/1.1
2009-08-17 14:33:52,464 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)        queryString=null
2009-08-17 14:33:52,468 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)         remoteAddr=127.0.0.1
2009-08-17 14:33:52,471 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)         remoteHost=127.0.0.1
2009-08-17 14:33:52,474 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)         remoteUser=null
2009-08-17 14:33:52,476 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:) requestedSessionId=B5D938082F5D18ECCEFEC25033F36DB3
2009-08-17 14:33:52,479 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)             scheme=https
2009-08-17 14:33:52,483 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)         serverName=lt4webapp.com
2009-08-17 14:33:52,486 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)         serverPort=443
2009-08-17 14:33:52,488 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)        servletPath=/app/j_security_check
2009-08-17 14:33:52,491 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)           isSecure=true
2009-08-17 14:33:52,494 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:) ---------------------------------------------------------------
2009-08-17 14:33:52,497 TRACE [org.jboss.security.SecurityRolesAssociation]
(http-127.0.0.1-443-1:) Setting threadlocal:{}
2009-08-17 14:33:52,497 TRACE [org.jboss.web.tomcat.security.JaccContextValve]
(http-127.0.0.1-443-1:)
MetaData:org.jboss.metadata.web.jboss.JBossWebMetaData@1f:principalToRoleSetMap{}
2009-08-17 14:33:52,497 DEBUG [org.apache.catalina.authenticator.AuthenticatorBase]
(http-127.0.0.1-443-1:) Security checking request POST /main/app/j_security_check
2009-08-17 14:33:52,497 DEBUG [org.apache.catalina.authenticator.FormAuthenticator]
(http-127.0.0.1-443-1:) Authenticating username 'lt4_app_user'
2009-08-17 14:33:52,497 TRACE [org.jboss.web.tomcat.security.JBossWebRealm]
(http-127.0.0.1-443-1:) Begin authenticate, username=lt4_app_user
2009-08-17 14:33:52,509 TRACE
[org.jboss.security.plugins.auth.JaasSecurityManagerBase.lt4-security-domain]
(http-127.0.0.1-443-1:) Begin isValid, principal:lt4_app_user, cache info: null
2009-08-17 14:33:52,509 TRACE
[org.jboss.security.plugins.auth.JaasSecurityManagerBase.lt4-security-domain]
(http-127.0.0.1-443-1:) defaultLogin, principal=lt4_app_user
2009-08-17 14:33:52,509 TRACE [org.jboss.security.auth.login.XMLLoginConfigImpl]
(http-127.0.0.1-443-1:) Begin getAppConfigurationEntry(lt4-security-domain), size=11
2009-08-17 14:33:52,509 TRACE [org.jboss.security.auth.login.XMLLoginConfigImpl]
(http-127.0.0.1-443-1:) End getAppConfigurationEntry(lt4-security-domain),
authInfo=AppConfigurationEntry[]:
[0]
LoginModule Class: org.jboss.security.auth.spi.DatabaseServerLoginModule
ControlFlag: LoginModuleControlFlag: required
Options:
name=principalsQuery, value=SELECT a.userpass FROM lt4._auth_user a where a.username=?
name=unauthenticatedIdentity, value=guest
name=dsJndiName, value=java:/jdbc/lt4DS
name=rolesQuery, value=SELECT a.role,'rolegroup' FROM lt4._auth_userrole a where
a.username=?

2009-08-17 14:33:52,533 TRACE [org.jboss.security.auth.spi.DatabaseServerLoginModule]
(http-127.0.0.1-443-1:) initialize
2009-08-17 14:33:52,533 TRACE [org.jboss.security.auth.spi.DatabaseServerLoginModule]
(http-127.0.0.1-443-1:) Security domain: lt4-security-domain
2009-08-17 14:33:52,533 TRACE [org.jboss.security.auth.spi.DatabaseServerLoginModule]
(http-127.0.0.1-443-1:) Saw unauthenticatedIdentity=guest
2009-08-17 14:33:52,534 TRACE [org.jboss.security.auth.spi.DatabaseServerLoginModule]
(http-127.0.0.1-443-1:) DatabaseServerLoginModule, dsJndiName=java:/jdbc/lt4DS
2009-08-17 14:33:52,534 TRACE [org.jboss.security.auth.spi.DatabaseServerLoginModule]
(http-127.0.0.1-443-1:) principalsQuery=SELECT a.userpass FROM lt4._auth_user a where
a.username=?
2009-08-17 14:33:52,534 TRACE [org.jboss.security.auth.spi.DatabaseServerLoginModule]
(http-127.0.0.1-443-1:) rolesQuery=SELECT a.role,'rolegroup' FROM
lt4._auth_userrole a where a.username=?
2009-08-17 14:33:52,534 TRACE [org.jboss.security.auth.spi.DatabaseServerLoginModule]
(http-127.0.0.1-443-1:) suspendResume=true
2009-08-17 14:33:52,537 TRACE [org.jboss.security.auth.spi.DatabaseServerLoginModule]
(http-127.0.0.1-443-1:) login
2009-08-17 14:33:52,537 TRACE [org.jboss.security.auth.spi.DatabaseServerLoginModule]
(http-127.0.0.1-443-1:) suspendAnyTransaction
2009-08-17 14:33:52,753 TRACE [org.jboss.security.auth.spi.DatabaseServerLoginModule]
(http-127.0.0.1-443-1:) Excuting query: SELECT a.userpass FROM lt4._auth_user a where
a.username=?, with username: lt4_app_user
2009-08-17 14:33:52,772 TRACE [org.jboss.security.auth.spi.DatabaseServerLoginModule]
(http-127.0.0.1-443-1:) Obtained user password
2009-08-17 14:33:52,772 TRACE [org.jboss.security.auth.spi.DatabaseServerLoginModule]
(http-127.0.0.1-443-1:) resumeAnyTransaction
2009-08-17 14:33:52,772 TRACE [org.jboss.security.auth.spi.DatabaseServerLoginModule]
(http-127.0.0.1-443-1:) User 'lt4_app_user' authenticated, loginOk=true
2009-08-17 14:33:52,772 TRACE [org.jboss.security.auth.spi.DatabaseServerLoginModule]
(http-127.0.0.1-443-1:) commit, loginOk=true
2009-08-17 14:33:52,772 TRACE [org.jboss.security.auth.spi.DatabaseServerLoginModule]
(http-127.0.0.1-443-1:) getRoleSets using rolesQuery: SELECT a.role,'rolegroup'
FROM lt4._auth_userrole a where a.username=?, username: lt4_app_user
2009-08-17 14:33:52,778 TRACE [org.jboss.security.auth.spi.DatabaseServerLoginModule]
(http-127.0.0.1-443-1:) suspendAnyTransaction
2009-08-17 14:33:52,779 TRACE [org.jboss.security.auth.spi.DatabaseServerLoginModule]
(http-127.0.0.1-443-1:) Excuting query: SELECT a.role,'rolegroup' FROM
lt4._auth_userrole a where a.username=?, with username: lt4_app_user
2009-08-17 14:33:52,783 TRACE [org.jboss.security.auth.spi.DatabaseServerLoginModule]
(http-127.0.0.1-443-1:) Assign user to role lt4_app_admin
2009-08-17 14:33:52,784 TRACE [org.jboss.security.auth.spi.DatabaseServerLoginModule]
(http-127.0.0.1-443-1:) resumeAnyTransaction
2009-08-17 14:33:52,788 TRACE
[org.jboss.security.plugins.auth.JaasSecurityManagerBase.lt4-security-domain]
(http-127.0.0.1-443-1:) defaultLogin, lc=javax.security.auth.login.LoginContext@203340,
subject=Subject(311360).principals=org.jboss.security.SimplePrincipal@448291(lt4_app_user)org.jboss.security.SimpleGroup@4427726(rolegroup(members:lt4_app_admin))
2009-08-17 14:33:52,788 TRACE
[org.jboss.security.plugins.auth.JaasSecurityManagerBase.lt4-security-domain]
(http-127.0.0.1-443-1:) updateCache,
inputSubject=Subject(311360).principals=org.jboss.security.SimplePrincipal@448291(lt4_app_user)org.jboss.security.SimpleGroup@4427726(rolegroup(members:lt4_app_admin)),
cacheSubject=Subject(26625151).principals=org.jboss.security.SimplePrincipal@448291(lt4_app_user)org.jboss.security.SimpleGroup@4427726(rolegroup(members:lt4_app_admin))
2009-08-17 14:33:52,788 TRACE
[org.jboss.security.plugins.auth.JaasSecurityManagerBase.lt4-security-domain]
(http-127.0.0.1-443-1:) Inserted cache info:
org.jboss.security.plugins.auth.JaasSecurityManagerBase$DomainInfo@6b22fa[Subject(26625151).principals=org.jboss.security.SimplePrincipal@448291(lt4_app_user)org.jboss.security.SimpleGroup@4427726(rolegroup(members:lt4_app_admin)),credential.class=java.lang.String@9175756,expirationTime=1250535821257]
2009-08-17 14:33:52,788 TRACE
[org.jboss.security.plugins.auth.JaasSecurityManagerBase.lt4-security-domain]
(http-127.0.0.1-443-1:) End isValid, true
2009-08-17 14:33:52,788 TRACE [org.jboss.web.tomcat.security.JBossWebRealm]
(http-127.0.0.1-443-1:) User: lt4_app_user is authenticated
2009-08-17 14:33:52,796 TRACE
[org.jboss.security.plugins.auth.JaasSecurityManagerBase.lt4-security-domain]
(http-127.0.0.1-443-1:) getPrincipal, cache info:
org.jboss.security.plugins.auth.JaasSecurityManagerBase$DomainInfo@6b22fa[Subject(26625151).principals=org.jboss.security.SimplePrincipal@448291(lt4_app_user)org.jboss.security.SimpleGroup@4427726(rolegroup(members:lt4_app_admin)),credential.class=java.lang.String@9175756,expirationTime=1250535821257]
2009-08-17 14:33:52,796 TRACE [org.jboss.web.tomcat.security.JBossWebRealm]
(http-127.0.0.1-443-1:) Mapped from input principal: lt4_app_userto: lt4_app_user
2009-08-17 14:33:52,807 TRACE [org.jboss.web.tomcat.security.JBossWebRealm]
(http-127.0.0.1-443-1:) End authenticate, principal=GenericPrincipal[lt4_app_user()]
2009-08-17 14:33:52,807 DEBUG [org.apache.catalina.authenticator.FormAuthenticator]
(http-127.0.0.1-443-1:) Authentication of 'lt4_app_user' was successful
2009-08-17 14:33:52,807 DEBUG [org.apache.catalina.authenticator.FormAuthenticator]
(http-127.0.0.1-443-1:) Redirecting to original '/main/app/'
2009-08-17 14:33:52,807 DEBUG [org.apache.catalina.authenticator.AuthenticatorBase]
(http-127.0.0.1-443-1:)  Failed authenticate() test ??/main/app/j_security_check
2009-08-17 14:33:52,807 TRACE [org.jboss.security.SecurityRolesAssociation]
(http-127.0.0.1-443-1:) Setting threadlocal:null
2009-08-17 14:33:52,807 TRACE [org.jboss.security.SecurityRolesAssociation]
(http-127.0.0.1-443-1:) Setting threadlocal:null
2009-08-17 14:33:52,808 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:) ---------------------------------------------------------------
2009-08-17 14:33:52,811 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)           authType=null
2009-08-17 14:33:52,814 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)      contentLength=-1
2009-08-17 14:33:52,817 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)        contentType=null
2009-08-17 14:33:52,824 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)             header=Location=https://lt4webapp.com/main/app/
2009-08-17 14:33:52,826 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)            message=null
2009-08-17 14:33:52,829 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)         remoteUser=null
2009-08-17 14:33:52,831 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)             status=302
2009-08-17 14:33:52,836 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:) ===============================================================
2009-08-17 14:33:52,844 DEBUG [org.apache.catalina.connector.CoyoteAdapter]
(http-127.0.0.1-443-1:)  Requested cookie session id is B5D938082F5D18ECCEFEC25033F36DB3
2009-08-17 14:33:52,844 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:) REQUEST URI       =/main/app/
2009-08-17 14:33:52,847 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)           authType=null
2009-08-17 14:33:52,851 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)  characterEncoding=null
2009-08-17 14:33:52,854 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)      contentLength=-1
2009-08-17 14:33:52,857 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)        contentType=null
2009-08-17 14:33:52,860 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)        contextPath=/main
2009-08-17 14:33:52,862 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)             cookie=JSESSIONID=B5D938082F5D18ECCEFEC25033F36DB3
2009-08-17 14:33:52,869 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)             header=accept=image/gif, image/jpeg, image/pjpeg,
application/x-ms-application, application/vnd.ms-xpsdocument, application/xaml+xml,
application/x-ms-xbap, application/x-shockwave-flash, */*
2009-08-17 14:33:52,872 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)             header=referer=https://lt4webapp.com/main/app/
2009-08-17 14:33:52,876 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)             header=accept-language=en-us
2009-08-17 14:33:52,878 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)             header=user-agent=Mozilla/4.0 (compatible; MSIE 8.0;
Windows NT 6.0; WOW64; Trident/4.0; Comcast Install 1.0; SLCC1; .NET CLR 2.0.50727; Media
Center PC 5.0; .NET CLR 3.5.30729; .NET CLR 3.0.30618)
2009-08-17 14:33:52,880 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)             header=accept-encoding=gzip, deflate
2009-08-17 14:33:52,883 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)             header=host=lt4webapp.com
2009-08-17 14:33:52,885 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)             header=connection=Keep-Alive
2009-08-17 14:33:52,888 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)             header=cache-control=no-cache
2009-08-17 14:33:52,890 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)            
header=cookie=JSESSIONID=B5D938082F5D18ECCEFEC25033F36DB3
2009-08-17 14:33:52,892 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)             locale=en_US
2009-08-17 14:33:52,894 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)             method=GET
2009-08-17 14:33:52,897 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)           pathInfo=null
2009-08-17 14:33:52,899 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)           protocol=HTTP/1.1
2009-08-17 14:33:52,901 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)        queryString=null
2009-08-17 14:33:52,904 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)         remoteAddr=127.0.0.1
2009-08-17 14:33:52,906 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)         remoteHost=127.0.0.1
2009-08-17 14:33:52,909 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)         remoteUser=null
2009-08-17 14:33:52,911 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:) requestedSessionId=B5D938082F5D18ECCEFEC25033F36DB3
2009-08-17 14:33:52,913 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)             scheme=https
2009-08-17 14:33:52,915 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)         serverName=lt4webapp.com
2009-08-17 14:33:52,918 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)         serverPort=443
2009-08-17 14:33:52,920 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)        servletPath=/app/
2009-08-17 14:33:52,922 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)           isSecure=true
2009-08-17 14:33:52,925 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:) ---------------------------------------------------------------
2009-08-17 14:33:52,928 TRACE [org.jboss.security.SecurityRolesAssociation]
(http-127.0.0.1-443-1:) Setting threadlocal:{}
2009-08-17 14:33:52,929 TRACE [org.jboss.web.tomcat.security.JaccContextValve]
(http-127.0.0.1-443-1:)
MetaData:org.jboss.metadata.web.jboss.JBossWebMetaData@1f:principalToRoleSetMap{}
2009-08-17 14:33:52,929 DEBUG [org.apache.catalina.authenticator.AuthenticatorBase]
(http-127.0.0.1-443-1:) Security checking request GET /main/app/
2009-08-17 14:33:52,929 DEBUG [org.apache.catalina.realm.RealmBase]
(http-127.0.0.1-443-1:)   Checking constraint
'SecurityConstraint[SecurityRestriction]' against GET /app/ --> true
2009-08-17 14:33:52,929 DEBUG [org.apache.catalina.realm.RealmBase]
(http-127.0.0.1-443-1:)   Checking constraint
'SecurityConstraint[SecurityRestriction]' against GET /app/ --> true
2009-08-17 14:33:52,929 DEBUG [org.apache.catalina.authenticator.AuthenticatorBase]
(http-127.0.0.1-443-1:)  Calling hasUserDataPermission()
2009-08-17 14:33:52,929 DEBUG [org.apache.catalina.realm.RealmBase]
(http-127.0.0.1-443-1:)   User data constraint already satisfied
2009-08-17 14:33:52,929 TRACE
[org.jboss.security.plugins.authorization.JBossAuthorizationContext]
(http-127.0.0.1-443-1:) Control flag for
entry:org.jboss.security.authorization.config.AuthorizationModuleEntry{org.jboss.security.authorization.modules.DelegatingAuthorizationModule:{}REQUIRED}is:[REQUIRED]
2009-08-17 14:33:52,929 DEBUG [org.apache.catalina.authenticator.AuthenticatorBase]
(http-127.0.0.1-443-1:)  Calling authenticate()
2009-08-17 14:33:52,929 DEBUG [org.apache.catalina.authenticator.FormAuthenticator]
(http-127.0.0.1-443-1:) Restore request from session
'B5D938082F5D18ECCEFEC25033F36DB3'
2009-08-17 14:33:52,929 DEBUG [org.apache.catalina.authenticator.AuthenticatorBase]
(http-127.0.0.1-443-1:) Authenticated 'lt4_app_user' with type 'FORM'
2009-08-17 14:33:52,930 DEBUG [org.apache.catalina.authenticator.FormAuthenticator]
(http-127.0.0.1-443-1:) Proceed to restored request
2009-08-17 14:33:52,930 DEBUG [org.apache.catalina.authenticator.AuthenticatorBase]
(http-127.0.0.1-443-1:)  Calling accessControl()
2009-08-17 14:33:52,930 DEBUG [org.apache.catalina.realm.RealmBase]
(http-127.0.0.1-443-1:)   Checking roles GenericPrincipal[lt4_app_user()]
2009-08-17 14:33:52,930 TRACE [org.jboss.web.tomcat.security.JBossWebRealm]
(http-127.0.0.1-443-1:)
[getServletName:servletmappings=[Ljava.lang.String;@128f174:servlet.getName()=default]
2009-08-17 14:33:52,931 DEBUG [org.apache.catalina.realm.RealmBase]
(http-127.0.0.1-443-1:) Username lt4_app_user does NOT have role lt4_app_admin
2009-08-17 14:33:52,931 TRACE [org.jboss.web.tomcat.security.JBossWebRealm]
(http-127.0.0.1-443-1:) hasRole:RealmBase says:false::Authz framework
says:false:final=false
2009-08-17 14:33:52,931 DEBUG [org.apache.catalina.realm.RealmBase]
(http-127.0.0.1-443-1:) No role found:  lt4_app_admin
2009-08-17 14:33:52,931 DEBUG [org.apache.catalina.realm.RealmBase]
(http-127.0.0.1-443-1:) Checking for all roles mode: authOnly
2009-08-17 14:33:52,931 TRACE [org.jboss.web.tomcat.security.JBossWebRealm]
(http-127.0.0.1-443-1:) hasResourcePerm:RealmBase says:false::Authz framework
says:false:final=false
2009-08-17 14:33:52,931 DEBUG [org.apache.catalina.authenticator.AuthenticatorBase]
(http-127.0.0.1-443-1:)  Failed accessControl() test
2009-08-17 14:33:52,931 TRACE [org.jboss.security.SecurityRolesAssociation]
(http-127.0.0.1-443-1:) Setting threadlocal:null
2009-08-17 14:33:52,931 TRACE [org.jboss.security.SecurityRolesAssociation]
(http-127.0.0.1-443-1:) Setting threadlocal:null
2009-08-17 14:33:52,932 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:) ---------------------------------------------------------------
2009-08-17 14:33:52,934 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)           authType=FORM
2009-08-17 14:33:52,936 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)      contentLength=-1
2009-08-17 14:33:52,938 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)        contentType=text/html;charset=utf-8
2009-08-17 14:33:52,941 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)             header=Pragma=No-cache
2009-08-17 14:33:52,943 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)             header=Cache-Control=no-cache
2009-08-17 14:33:52,945 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)             header=Expires=Wed, 31 Dec 1969 19:00:00 EST
2009-08-17 14:33:52,947 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)            message=Access to the requested resource has been
denied
2009-08-17 14:33:52,949 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)         remoteUser=lt4_app_user
2009-08-17 14:33:52,951 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:)             status=403
2009-08-17 14:33:52,954 INFO 
[org.apache.catalina.core.ContainerBase.[jboss.web].[lt4webapp.com]]
(http-127.0.0.1-443-1:) ===============================================================

View the original post :
http://www.jboss.org/index.html?module=bb&op=viewtopic&p=4250008#...

Reply to the post :
http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&a...

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

[Security & JAAS/JBoss] - DatabaseServerLoginModule failing after success?...confused