[AM7.1][Liberty] Authorize a WSC

Question

Hi all,
I try to authenticate a user using the Liberty authentification with AM7.1 (http://localhost:8080/amserver/Liberty/authsvc). The problem is that into the logs, it throws a access exception (cf end of the post). I use the following code, according to the samples :
public SASLResponse authenticate(
        String userName,
        String password,
        String authurl) throws Exception {
        SASLRequest saslReq =
                        new SASLRequest(AuthnSvcConstants.MECHANISM_PLAIN);
        saslReq.setAuthzID(userName);
        SASLResponse saslResp = AuthnSvcClient.sendRequest(saslReq, authurl)
        String statusCode = saslResp.getStatusCode();
        if (!statusCode.equals(SASLResponse.CONTINUE)) {
                return null;
        String serverMechanism = saslResp.getServerMechanism();
        saslReq  = new SASLRequest(serverMechanism);
        String dataStr = userName + "\0" + userName + "\0" + password;
        saslReq.setData(dataStr.getBytes("UTF-8"));
        saslReq.setRefToMessageID(saslResp.getMessageID());
        saslResp = AuthnSvcClient.sendRequest(saslReq, authurl);
        statusCode = saslResp.getStatusCode();
        //here the status code is equal to "abort"
        if (!statusCode.equals(SASLResponse.OK)) {
            return null;
        return saslResp;
    } So is there a specific configuration to do into AM to authorize a Web Service ? What must I provide for the AuthzID ??? I check into the debug files, there are an AuthzID and AuthnID... what is the difference ?
Thank you & Best regards
ps. The error :
11/02/2006 01:23:06:812 AM CET: Thread[httpWorkerThread-8080-0,10,Grizzly]
AuthnSvcRequestHanderImpl constructor.
11/02/2006 01:23:07:250 AM CET: Thread[httpWorkerThread-8080-0,10,Grizzly]
messageID=s63542cd1e5d8cc1e322d86dc27fb209e067872b5, mechanism=PLAIN, authzID=ctabin, advisoryAuthnID=null
11/02/2006 01:23:07:250 AM CET: Thread[httpWorkerThread-8080-0,10,Grizzly]
AuthnSvcRequestHanderImpl.processSASLRequest: mechanismHandler = class com.sun.identity.liberty.ws.authnsvc.mechanism.PlainMechanismHandler
11/02/2006 01:23:07:250 AM CET: Thread[httpWorkerThread-8080-0,10,Grizzly]
PlainMechanismHandler.processSASLRequest:
11/02/2006 01:23:07:250 AM CET: Thread[httpWorkerThread-8080-0,10,Grizzly]
PlainMechanismHandler.processSASLRequest: refToMessageID = null
11/02/2006 01:23:07:265 AM CET: Thread[Thread-69,10,Grizzly]
CramMD5MechanismHandler.CleanUpThread.run: challengeMap size = 0
11/02/2006 01:23:07:328 AM CET: Thread[httpWorkerThread-8080-1,10,Grizzly]
messageID=s0a247184a500800235298042a3c7cb6fabc1d2e8, mechanism=PLAIN, authzID=null, advisoryAuthnID=null
11/02/2006 01:23:07:328 AM CET: Thread[httpWorkerThread-8080-1,10,Grizzly]
AuthnSvcRequestHanderImpl.processSASLRequest: mechanismHandler = class com.sun.identity.liberty.ws.authnsvc.mechanism.PlainMechanismHandler
11/02/2006 01:23:07:328 AM CET: Thread[httpWorkerThread-8080-1,10,Grizzly]
PlainMechanismHandler.processSASLRequest:
11/02/2006 01:23:07:328 AM CET: Thread[httpWorkerThread-8080-1,10,Grizzly]
PlainMechanismHandler.processSASLRequest: refToMessageID = sf23c7f4472c897214f29320c58376ae07bf2cded
11/02/2006 01:23:07:328 AM CET: Thread[httpWorkerThread-8080-1,10,Grizzly]
PlainMechanismHandler.authenticate: authzID = ctabin, authnID = ctabin
11/02/2006 01:23:07:406 AM CET: Thread[httpWorkerThread-8080-1,10,Grizzly]
ERROR: PlainMechanismHandler.authenticate:
com.sun.identity.authentication.spi.AuthLoginException: Authentication Module Denied|module_denied.jsp
     at com.sun.identity.authentication.service.AMLoginContext.processIndexType(AMLoginContext.java:1610)
     at com.sun.identity.authentication.service.AMLoginContext.executeLogin(AMLoginContext.java:255)
     at com.sun.identity.authentication.server.AuthContextLocal.login(AuthContextLocal.java:327)
     at com.sun.identity.authentication.server.AuthContextLocal.login(AuthContextLocal.java:291)
     at com.sun.identity.authentication.AuthContext.runLogin(AuthContext.java:590)
     at com.sun.identity.authentication.AuthContext.login(AuthContext.java:498)
     at com.sun.identity.authentication.AuthContext.login(AuthContext.java:356)
     at com.sun.identity.liberty.ws.authnsvc.mechanism.PlainMechanismHandler.authenticate(PlainMechanismHandler.java:158)
     at com.sun.identity.liberty.ws.authnsvc.mechanism.PlainMechanismHandler.processSASLRequest(PlainMechanismHandler.java:119)
     at com.sun.identity.liberty.ws.authnsvc.AuthnSvcRequestHandlerImpl.processSASLRequest(AuthnSvcRequestHandlerImpl.java:180)
     at com.sun.identity.liberty.ws.authnsvc.AuthnSvcRequestHandlerImpl.processRequest(AuthnSvcRequestHandlerImpl.java:98)
     at com.sun.identity.liberty.ws.soapbinding.SOAPReceiver.onMessage(SOAPReceiver.java:227)
     at com.sun.identity.liberty.ws.soapbinding.SOAPReceiver.doPost(SOAPReceiver.java:114)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:727)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:820)
     at org.apache.catalina.core.ApplicationFilterChain.servletService(ApplicationFilterChain.java:397)
     at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:303)
     at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:184)
     at com.sun.identity.setup.AMSetupFilter.doFilter(AMSetupFilter.java:86)
     at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:216)
     at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:184)
     at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:276)
     at org.apache.catalina.core.StandardPipeline.doInvoke(StandardPipeline.java:566)
     at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:536)
     at org.apache.catalina.core.StandardContextValve.invokeInternal(StandardContextValve.java:240)
     at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:179)
     at org.apache.catalina.core.StandardPipeline.doInvoke(StandardPipeline.java:566)
     at com.sun.enterprise.web.WebPipeline.invoke(WebPipeline.java:73)
     at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:182)
     at org.apache.catalina.core.StandardPipeline.doInvoke(StandardPipeline.java:566)
     at com.sun.enterprise.web.VirtualServerPipeline.invoke(VirtualServerPipeline.java:120)
     at org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:939)
     at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:137)
     at org.apache.catalina.core.StandardPipeline.doInvoke(StandardPipeline.java:566)
     at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:536)
     at org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:939)
     at org.apache.coyote.tomcat5.CoyoteAdapter.service(CoyoteAdapter.java:239)
     at com.sun.enterprise.web.connector.grizzly.ProcessorTask.invokeAdapter(ProcessorTask.java:667)
     at com.sun.enterprise.web.connector.grizzly.ProcessorTask.processNonBlocked(ProcessorTask.java:574)
     at com.sun.enterprise.web.connector.grizzly.ProcessorTask.process(ProcessorTask.java:844)
     at com.sun.enterprise.web.connector.grizzly.ReadTask.executeProcessorTask(ReadTask.java:287)
     at com.sun.enterprise.web.connector.grizzly.ReadTask.doTask(ReadTask.java:212)
     at com.sun.enterprise.web.connector.grizzly.TaskBase.run(TaskBase.java:252)
     at com.sun.enterprise.web.connector.grizzly.WorkerThread.run(WorkerThread.java:75)

Answer 1

Hi all,
I found out the solution : into the authentication module, I add a JDBC module named "LDAP" and it works ! :)
@++