[jboss-user] [Security & JAAS/JBoss] - j_security_check not working in LDAP based Authentication

jbosexplorer do-not-reply at jboss.com
Thu Dec 6 07:12:22 EST 2007


Hi There,

I'm using JBoss 4.2.1. In our application, we have the following snippet in login.jsp.
<form action="j_security_check" method="post">
  | <input name="j_username" type="text" class="input" id="j_username" size="20">
  | <input name="j_password" type="password" class="input" id="j_password" size="20">

And, the web.xml has 
 <security-constraint>
  | 	<web-resource-collection>
  | 	  <web-resource-name>Login Page</web-resource-name>
  |   	  <url-pattern>/logonNoSSO.jsp</url-pattern>
  | 	  <http-method>POST</http-method>
  | 	  <http-method>GET</http-method>
  | 	</web-resource-collection>
  | 	<user-data-constraint>
  | 	  <transport-guarantee>NONE</transport-guarantee>
  | 	 </user-data-constraint>
  | 	</security-constraint>
  |   <login-config>
  |     <auth-method>FORM</auth-method>
  |     <realm-name>myrealm</realm-name>
  |     <form-login-config>
  |     <form-login-page>/login.jsp</form-login-page> 
  |     </form-login-config>
  |   </login-config>
  |   <security-role>
  |     <description>ADMIN Role</description>
  |     <role-name>adminRole</role-name>
  |   </security-role>

The Jboss-web.xml has the following
<security-domain>java:/jaas/myrealm</security-domain>
  |   <security-role>
  |     <role-name>adminRole</role-name>
  |     <principal-name>Admin</principal-name>
  |   </security-role>


When I try to login with correct user name / pwd I'm getting 
Access to the specified resource (Access to the requested resource has been denied) has been forbidden

Could somebody help me to solve this issue?

Thanks

View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4110819#4110819

Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4110819



More information about the jboss-user mailing list