Hi all, I still have problems with OpenSSO. I'm running JBoss Portal 2.6.4 (clustered) on JBoss 4.2.2.GA (all config). I followed the instructions on http://blog.jboss-portal.org/2007/10/jboss-portal-with-opensso-and-opends... and installed OpenSSO V1 Build 4 and OpenDS. I had to add following to the users stored in OpenDS: | dn: uid=user.0,ou=People,dc=opensso,dc=java,dc=net | changetype: modify | add: objectclass | objectclass: sunFMSAML2NameIdentifier | Now, I'm forwarded to the OpenSSO-Login-page as soon as I call http://myjbossserver.com:8080/portal without clicking on the login-link. I really would like to see the first portal-page without being logged in, and I don't know how to do that... My config changes are as follows: server/all/jboss-web.deployer/server.xml: | <Valve className="org.jboss.web.tomcat.service.sso.ClusteredSingleSignOn" /> | server/all/portal-server.war/WEB-INF/context.xml: | <Valve className="org.jboss.portal.identity.sso.opensso.OpenSSOAuthenticationValve" | loginURL="http://myjbossserver.com:8080/opensso" | logoutURL="http://myjbossserver.com:8080/opensso/UI/Logout" | appendLoginGoto="true" | appendLogoutGoto="true" | authType="FORM" | /> | server/all/conf/AMConfig.properties: | com.iplanet.services.debug.level=message | com.iplanet.services.debug.directory=/tmp | com.iplanet.am.serverMode=false | com.iplanet.am.sdk.caching.enabled=false | com.sun.identity.idm.cache.enabled=false | com.sun.identity.sm.cache.enabled=true | com.sun.identity.sm.sms_object_class_name=com.sun.identity.sm.jaxrpc.SMSJAXRPCObject | com.iplanet.am.naming.url=http://myjbossserver.com:8080/opensso/namingservice | com.iplanet.am.notification.url=@NOTIFICATION_URL@ | com.sun.identity.agents.app.username=amadmin | com.iplanet.am.service.password= | com.iplanet.am.service.secret=AQIC5wM2LY4SfcyImS3T1DzgtBnOSHf5p9Ab | am.encryption.pwd= | com.sun.identity.client.encryptionKey= | com.iplanet.security.encryptor=com.iplanet.services.util.JCEEncryption | com.sun.identity.idm.remote.notification.enabled=true | com.iplanet.am.sdk.remote.pollingTime=1 | com.sun.identity.sm.notification.enabled=true | com.sun.identity.sm.cacheTime=1 | com.iplanet.am.server.protocol=http | com.iplanet.am.server.host=myjbossserver.com | com.iplanet.am.server.port=8080 | com.iplanet.am.services.deploymentDescriptor=/opensso | com.iplanet.am.console.protocol=@CONSOLE_PROTOCOL@ | com.iplanet.am.console.host=@CONSOLE_HOST@ | com.iplanet.am.console.port=@CONSOLE_PORT@ | com.iplanet.am.console.deploymentDescriptor=@CONSOLE_DEPLOY_URI@ | com.iplanet.am.console.remote=@CONSOLE_REMOTE@ | com.iplanet.am.cookie.name=iPlanetDirectoryPro | com.iplanet.am.session.client.polling.enable=true | com.iplanet.am.session.client.polling.period=180 | com.iplanet.am.admin.cli.certdb.dir=@CONTAINER_CERTDB_DIR@ | com.iplanet.am.admin.cli.certdb.prefix=@CONTAINER_CERTDB_PREFIX@ | com.iplanet.am.admin.cli.certdb.passfile=@BASEDIR@/@PRODUCT_DIR(a)/config/.wtpass | com.iplanet.am.jssproxy.trustAllServerCerts=false | com.iplanet.am.jssproxy.checkSubjectAltName=false | com.iplanet.am.jssproxy.resolveIPAddress=false | com.iplanet.am.jssproxy.SSLTrustHostList=false | com.sun.identity.agents.server.log.file.name=amRemotePolicyLog | com.sun.identity.agents.logging.level=NONE | com.sun.identity.agents.notification.enabled=false | com.sun.identity.agents.notification.url=@NOTIFICATION_URL@ | com.sun.identity.agents.polling.interval=3 | com.sun.identity.policy.client.cacheMode=subtree | com.sun.identity.policy.client.clockSkew=10 | com.sun.identity.monitoring=off | com.sun.identity.urlconnection.useCache=false | com.sun.identity.plugin.configuration.class=com.sun.identity.plugin.configuration.impl.ConfigurationInstanceImpl | com.sun.identity.plugin.datastore.class.default=com.sun.identity.plugin.datastore.impl.IdRepoDataStoreProvider | com.sun.identity.plugin.session.class=com.sun.identity.plugin.session.impl.FMSessionProvider | com.sun.identity.saml.xmlsig.signatureprovider.class=com.sun.identity.saml.xmlsig.AMSignatureProvider | com.sun.identity.saml.xmlsig.keyprovider.class=com.sun.identity.saml.xmlsig.JKSKeyProvider | com.sun.identity.saml.xmlsig.keystore=/Users/carsten/Documents/workspace3/Genloop.generator/lib/runtime/dist-lib/jboss-4.2.2.GA_Genloop_Portal/server/all/deploy/fam-client-jdk15-exp.war/keystore.jks | com.sun.identity.saml.xmlsig.storepass=/Users/carsten/Documents/workspace3/Genloop.generator/lib/runtime/dist-lib/jboss-4.2.2.GA_Genloop_Portal/server/all/deploy/fam-client-jdk15-exp.war/.storepass | com.sun.identity.saml.xmlsig.keypass=/Users/carsten/Documents/workspace3/Genloop.generator/lib/runtime/dist-lib/jboss-4.2.2.GA_Genloop_Portal/server/all/deploy/fam-client-jdk15-exp.war/.keypass | com.sun.identity.saml.xmlsig.certalias=test | com.sun.identity.saml.checkcert=on | com.sun.identity.saml.xmlsig.c14nMethod=http://www.w3.org/2001/10/xml-exc... | com.sun.identity.saml.xmlsig.xmlSigAlgorithm= | com.sun.identity.saml.xmlsig.transformAlg=http://www.w3.org/2001/10/xml-e... | com.sun.identity.saml2.xmlenc.EncryptionProvider=com.sun.identity.saml2.xmlenc.FMEncProvider | com.sun.identity.saml2.xmlsig.SignatureProvider=com.sun.identity.saml2.xmlsig.FMSigProvider | com.sun.identity.saml2.crl.check=false | com.sun.identity.saml2.crl.check.ca=false | com.sun.identity.liberty.ws.soap.certalias= | com.sun.identity.liberty.ws.soap.staleTimeLimit=300000 | com.sun.identity.liberty.ws.soap.messageIDCacheCleanupInterval=60000 | com.sun.identity.liberty.ws.soap.supportedActors=http://schemas.xmlsoap.o... | com.sun.identity.liberty.ws.jaxb.namespacePrefixMappingList=S=http://sche... | com.sun.identity.liberty.ws.jaxb.packageList= | com.sun.identity.liberty.ws.wsc.certalias= | com.sun.identity.liberty.ws.ta.certalias= | com.sun.identity.liberty.ws.trustedca.certaliases= | com.sun.identity.liberty.ws.security.TokenProviderImpl=com.sun.identity.liberty.ws.security.LibSecurityTokenProvider | com.sun.identity.liberty.interaction.wspRedirectHandler=http://myjbossserver.com:8080/opensso/WSPRedirectHandler | com.sun.identity.liberty.interaction.wscSpecifiedInteractionChoice=interactIfNeeded | com.sun.identity.liberty.interaction.wscWillInlcudeUserInteractionHeader=yes | com.sun.identity.liberty.interaction.wscWillRedirect=yes | com.sun.identity.liberty.interaction.wscSpecifiedMaxInteractionTime=80 | com.sun.identity.liberty.interaction.wscWillEnforceHttpsCheck=no | com.sun.identity.loginurl=http://myjbossserver.com:8080/opensso/UI/Login | com.sun.identity.liberty.authnsvc.url=http://myjbossserver.com:8080/opensso/Liberty/authnsvc | View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4147908#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...