[jboss-user] [Security & JAAS/JBoss] - Re: Programmatic Login Advice

pander do-not-reply at jboss.com
Fri Dec 1 10:17:16 EST 2006


Hi,

ok, I did what Q3 in the security FAQ suggested and put in the following entry within my authentication realm


  | <!-- Add this line to your login-config.xml to include the ClientLoginModule propogation -->      
  |       <login-module code="org.jboss.security.ClientLoginModule" flag="required" />
  | 

Unfortunately this did not seem to make any difference. Here is some debug from the server log. It's the following 2 lines which I think are a hint that something is still not right.


  | [org.apache.catalina.core.ApplicationDispatcher]  Disabling the response for futher output
  | 2006-12-01 15:03:47,174 DEBUG [org.apache.catalina.authenticator.AuthenticatorBase]  Failed authenticate() test
  | 

Here is the full debug output I've taken it from the redirect to "/homePage.do" in "test.jsp" (which is performing the programmatic login) . 

Any ideas?


  | 2006-12-01 15:03:47,157 INFO  [org.apache.catalina.core.ContainerBase.[jboss.web].[localhost]] ---------------------------------------------------------------
  | 2006-12-01 15:03:47,157 INFO  [org.apache.catalina.core.ContainerBase.[jboss.web].[localhost]]           authType=null
  | 2006-12-01 15:03:47,157 INFO  [org.apache.catalina.core.ContainerBase.[jboss.web].[localhost]]      contentLength=-1
  | 2006-12-01 15:03:47,157 INFO  [org.apache.catalina.core.ContainerBase.[jboss.web].[localhost]]        contentType=text/html;charset=UTF-8
  | 2006-12-01 15:03:47,158 INFO  [org.apache.catalina.core.ContainerBase.[jboss.web].[localhost]]             header=Pragma=No-cache
  | 2006-12-01 15:03:47,158 INFO  [org.apache.catalina.core.ContainerBase.[jboss.web].[localhost]]             header=Cache-Control=no-cache
  | 2006-12-01 15:03:47,158 INFO  [org.apache.catalina.core.ContainerBase.[jboss.web].[localhost]]             header=Expires=Thu, 01 Jan 1970 01:00:00 GMT
  | 2006-12-01 15:03:47,158 INFO  [org.apache.catalina.core.ContainerBase.[jboss.web].[localhost]]             header=X-Powered-By=Servlet 2.4; JBoss-4.0.5.GA (build: CVSTag=Branch_4_0 date=200610162339)/Tomcat-5.5
  | 2006-12-01 15:03:47,158 INFO  [org.apache.catalina.core.ContainerBase.[jboss.web].[localhost]]             header=Location=https://ami-test.livewire.cc/AMI/homePage.do
  | 2006-12-01 15:03:47,158 INFO  [org.apache.catalina.core.ContainerBase.[jboss.web].[localhost]]            message=null
  | 2006-12-01 15:03:47,158 INFO  [org.apache.catalina.core.ContainerBase.[jboss.web].[localhost]]         remoteUser=null
  | 2006-12-01 15:03:47,158 INFO  [org.apache.catalina.core.ContainerBase.[jboss.web].[localhost]]             status=302
  | 2006-12-01 15:03:47,158 INFO  [org.apache.catalina.core.ContainerBase.[jboss.web].[localhost]] ===============================================================
  | 2006-12-01 15:03:47,168 DEBUG [org.apache.catalina.connector.CoyoteAdapter]  Requested cookie session id is 9DE0C12CF880EEFBDB9282AD73EB67FA
  | 2006-12-01 15:03:47,168 INFO  [org.apache.catalina.core.ContainerBase.[jboss.web].[localhost]] REQUEST URI       =/AMI/homePage.do
  | 2006-12-01 15:03:47,168 INFO  [org.apache.catalina.core.ContainerBase.[jboss.web].[localhost]]           authType=null
  | 2006-12-01 15:03:47,168 INFO  [org.apache.catalina.core.ContainerBase.[jboss.web].[localhost]]  characterEncoding=null
  | 2006-12-01 15:03:47,168 INFO  [org.apache.catalina.core.ContainerBase.[jboss.web].[localhost]]      contentLength=-1
  | 2006-12-01 15:03:47,168 INFO  [org.apache.catalina.core.ContainerBase.[jboss.web].[localhost]]        contentType=null
  | 2006-12-01 15:03:47,168 INFO  [org.apache.catalina.core.ContainerBase.[jboss.web].[localhost]]        contextPath=/AMI
  | 2006-12-01 15:03:47,168 INFO  [org.apache.catalina.core.ContainerBase.[jboss.web].[localhost]]             cookie=JSESSIONID=9DE0C12CF880EEFBDB9282AD73EB67FA
  | 2006-12-01 15:03:47,168 INFO  [org.apache.catalina.core.ContainerBase.[jboss.web].[localhost]]             header=accept=image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, */*
  | 2006-12-01 15:03:47,168 INFO  [org.apache.catalina.core.ContainerBase.[jboss.web].[localhost]]             header=accept-language=en-us
  | 2006-12-01 15:03:47,168 INFO  [org.apache.catalina.core.ContainerBase.[jboss.web].[localhost]]             header=ua-cpu=x86
  | 2006-12-01 15:03:47,168 INFO  [org.apache.catalina.core.ContainerBase.[jboss.web].[localhost]]             header=accept-encoding=gzip, deflate
  | 2006-12-01 15:03:47,168 INFO  [org.apache.catalina.core.ContainerBase.[jboss.web].[localhost]]             header=user-agent=Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.0.3705; .NET CLR 1.1.4322; Media Center PC 4.0; InfoPath.1; .NET CLR 2.0.50727)
  | 2006-12-01 15:03:47,169 INFO  [org.apache.catalina.core.ContainerBase.[jboss.web].[localhost]]             header=host=ami-test.livewire.cc
  | 2006-12-01 15:03:47,169 INFO  [org.apache.catalina.core.ContainerBase.[jboss.web].[localhost]]             header=connection=Keep-Alive
  | 2006-12-01 15:03:47,169 INFO  [org.apache.catalina.core.ContainerBase.[jboss.web].[localhost]]             header=cookie=JSESSIONID=9DE0C12CF880EEFBDB9282AD73EB67FA
  | 2006-12-01 15:03:47,169 INFO  [org.apache.catalina.core.ContainerBase.[jboss.web].[localhost]]             locale=en_US
  | 2006-12-01 15:03:47,169 INFO  [org.apache.catalina.core.ContainerBase.[jboss.web].[localhost]]             method=GET
  | 2006-12-01 15:03:47,169 INFO  [org.apache.catalina.core.ContainerBase.[jboss.web].[localhost]]           pathInfo=null
  | 2006-12-01 15:03:47,169 INFO  [org.apache.catalina.core.ContainerBase.[jboss.web].[localhost]]           protocol=HTTP/1.1
  | 2006-12-01 15:03:47,169 INFO  [org.apache.catalina.core.ContainerBase.[jboss.web].[localhost]]        queryString=null
  | 2006-12-01 15:03:47,169 INFO  [org.apache.catalina.core.ContainerBase.[jboss.web].[localhost]]         remoteAddr=192.168.85.1
  | 2006-12-01 15:03:47,169 INFO  [org.apache.catalina.core.ContainerBase.[jboss.web].[localhost]]         remoteHost=192.168.85.1
  | 2006-12-01 15:03:47,169 INFO  [org.apache.catalina.core.ContainerBase.[jboss.web].[localhost]]         remoteUser=null
  | 2006-12-01 15:03:47,169 INFO  [org.apache.catalina.core.ContainerBase.[jboss.web].[localhost]] requestedSessionId=9DE0C12CF880EEFBDB9282AD73EB67FA
  | 2006-12-01 15:03:47,169 INFO  [org.apache.catalina.core.ContainerBase.[jboss.web].[localhost]]             scheme=https
  | 2006-12-01 15:03:47,169 INFO  [org.apache.catalina.core.ContainerBase.[jboss.web].[localhost]]         serverName=ami-test.livewire.cc
  | 2006-12-01 15:03:47,169 INFO  [org.apache.catalina.core.ContainerBase.[jboss.web].[localhost]]         serverPort=443
  | 2006-12-01 15:03:47,169 INFO  [org.apache.catalina.core.ContainerBase.[jboss.web].[localhost]]        servletPath=/homePage.do
  | 2006-12-01 15:03:47,169 INFO  [org.apache.catalina.core.ContainerBase.[jboss.web].[localhost]]           isSecure=true
  | 2006-12-01 15:03:47,169 INFO  [org.apache.catalina.core.ContainerBase.[jboss.web].[localhost]] ---------------------------------------------------------------
  | 2006-12-01 15:03:47,170 TRACE [org.jboss.web.tomcat.security.FormAuthValve] Enter, j_username=null
  | 2006-12-01 15:03:47,170 DEBUG [org.apache.catalina.authenticator.AuthenticatorBase] Security checking request GET /AMI/homePage.do
  | 2006-12-01 15:03:47,170 DEBUG [org.apache.catalina.realm.RealmBase]   Checking constraint 'SecurityConstraint[Common Resources]' against GET /homePage.do --> false
  | 2006-12-01 15:03:47,170 DEBUG [org.apache.catalina.realm.RealmBase]   Checking constraint 'SecurityConstraint[Legal Stuff]' against GET /homePage.do --> false
  | 2006-12-01 15:03:47,170 DEBUG [org.apache.catalina.realm.RealmBase]   Checking constraint 'SecurityConstraint[Secure Content]' against GET /homePage.do --> false
  | 2006-12-01 15:03:47,170 DEBUG [org.apache.catalina.realm.RealmBase]   Checking constraint 'SecurityConstraint[Secure Content]' against GET /homePage.do --> true
  | 2006-12-01 15:03:47,170 DEBUG [org.apache.catalina.realm.RealmBase]   Checking constraint 'SecurityConstraint[Common Resources]' against GET /homePage.do --> false
  | 2006-12-01 15:03:47,170 DEBUG [org.apache.catalina.realm.RealmBase]   Checking constraint 'SecurityConstraint[Legal Stuff]' against GET /homePage.do --> false
  | 2006-12-01 15:03:47,170 DEBUG [org.apache.catalina.realm.RealmBase]   Checking constraint 'SecurityConstraint[Secure Content]' against GET /homePage.do --> false
  | 2006-12-01 15:03:47,170 DEBUG [org.apache.catalina.realm.RealmBase]   Checking constraint 'SecurityConstraint[Secure Content]' against GET /homePage.do --> true
  | 2006-12-01 15:03:47,170 DEBUG [org.apache.catalina.authenticator.AuthenticatorBase]  Calling hasUserDataPermission()
  | 2006-12-01 15:03:47,170 DEBUG [org.apache.catalina.realm.RealmBase]   User data constraint already satisfied
  | 2006-12-01 15:03:47,170 DEBUG [org.apache.catalina.authenticator.AuthenticatorBase]  Calling authenticate()
  | 2006-12-01 15:03:47,170 DEBUG [org.apache.catalina.authenticator.FormAuthenticator] Save request in session '9DE0C12CF880EEFBDB9282AD73EB67FA'
  | 2006-12-01 15:03:47,170 DEBUG [org.apache.catalina.core.ApplicationDispatcher] servletPath=/login.jsp, pathInfo=null, queryString=null, name=null
  | 2006-12-01 15:03:47,170 DEBUG [org.apache.catalina.core.ApplicationDispatcher]  Path Based Forward
  | 2006-12-01 15:03:47,170 TRACE [org.jboss.web.tomcat.security.RunAsListener] jsp, runAs: null
  | 2006-12-01 15:03:47,170 TRACE [org.jboss.web.tomcat.security.RunAsListener] jsp, runAs: null
  | 2006-12-01 15:03:47,174 TRACE [org.jboss.web.tomcat.security.RunAsListener] jsp, runAs: null
  | 2006-12-01 15:03:47,174 TRACE [org.jboss.web.tomcat.security.RunAsListener] jsp, runAs: null
  | 2006-12-01 15:03:47,174 DEBUG [org.apache.catalina.core.ApplicationDispatcher]  Disabling the response for futher output
  | 2006-12-01 15:03:47,174 DEBUG [org.apache.catalina.authenticator.AuthenticatorBase]  Failed authenticate() test
  | 2006-12-01 15:03:47,174 TRACE [org.jboss.web.tomcat.security.FormAuthValve] SessionID: 9DE0C12CF880EEFBDB9282AD73EB67FA
  | 2006-12-01 15:03:47,174 TRACE [org.jboss.web.tomcat.security.FormAuthValve] SecurityAssociation.exception: null
  | 2006-12-01 15:03:47,174 TRACE [org.jboss.web.tomcat.security.FormAuthValve] Exit, username: null
  | 2006-12-01 15:03:47,174 TRACE [org.jboss.security.SecurityAssociation] clear, server=true
  | 2006-12-01 15:03:47,174 INFO  [org.apache.catalina.core.ContainerBase.[jboss.web].[localhost]] ---------------------------------------------------------------
  | 2006-12-01 15:03:47,174 INFO  [org.apache.catalina.core.ContainerBase.[jboss.web].[localhost]]           authType=null
  | 2006-12-01 15:03:47,174 INFO  [org.apache.catalina.core.ContainerBase.[jboss.web].[localhost]]      contentLength=-1
  | 2006-12-01 15:03:47,174 INFO  [org.apache.catalina.core.ContainerBase.[jboss.web].[localhost]]        contentType=text/html;charset=UTF-8
  | 2006-12-01 15:03:47,174 INFO  [org.apache.catalina.core.ContainerBase.[jboss.web].[localhost]]             header=Pragma=no-cache
  | 2006-12-01 15:03:47,175 INFO  [org.apache.catalina.core.ContainerBase.[jboss.web].[localhost]]             header=Cache-Control=no-cache
  | 2006-12-01 15:03:47,175 INFO  [org.apache.catalina.core.ContainerBase.[jboss.web].[localhost]]             header=Expires=Wed, 31 Dec 1969 23:59:59 GMT
  | 2006-12-01 15:03:47,175 INFO  [org.apache.catalina.core.ContainerBase.[jboss.web].[localhost]]            message=null
  | 2006-12-01 15:03:47,175 INFO  [org.apache.catalina.core.ContainerBase.[jboss.web].[localhost]]         remoteUser=null
  | 2006-12-01 15:03:47,175 INFO  [org.apache.catalina.core.ContainerBase.[jboss.web].[localhost]]             status=200
  | 2006-12-01 15:03:47,175 INFO  [org.apache.catalina.core.ContainerBase.[jboss.web].[localhost]] ===============================================================
  | 




View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3990463#3990463

Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3990463



More information about the jboss-user mailing list