Automatic Login into Portal 7.0

Question

Hello, ive got a problem using the loginFramework.jar from the code share library.
Ive opnened a support case, but noone seems willing to help me.
In a nutshell, ive got a servlet that is the entry point to a 7.0 portal app.
That servlet checks PKI certs and IDs against an LDAP, then once authorized, sets
a session attribute that is used as the username and pass for the portal realm,
then forwards to /application. what i want to do is have the servlet forward to
<jsp:forward page="/application?namespace=security&event=button.login/> to simply
bypass the login.jsp form and log the user in based in the aforementioned session
param. ive written a custome login helper class that extends the LoginHelper and
ive implemented all the changes prescribed in the loginFramework.jar patch available
on the dev2dev site. what i get is this: the portal, regardless of the event="button.login",
sends me to the form. however, once the form is filled in an submitted, it uses
my custom loginhelper??? how do i get the <jsp:forward/> to sinply execute the
"button.login" event???

Answer 1

Hi JP,
I have few questions for you and a few suggestions.
Why did you decide to use a servlet instead of a CertAuthenticator?
You can find out more about CertAuthenticators at http://e-docs.bea.com/wls/docs61/security/prog.html#1024576.
Information on using them in 7.0 is under the heading "Using CertAuthenticator
in Compatibility Security" at http://e-docs.bea.com/wls/docs70/upgrade/upgrade6xto70.html#1041313.
Why aren't you using an implicit login processor to accomplish your login?
I think you could accomplish your goals by using a CertAuthenticator in conjunction
with an implicit login processor. The heading in the LoginFramework doc called
"Mutual Authentication With The WebLogic Portal Login Framework" covers this approach.
Please explain why this won't work if it won't.
Good luck!
-John
"jp" <[email protected]> wrote:
>
Hello, ive got a problem using the loginFramework.jar from the code share
library.
Ive opnened a support case, but noone seems willing to help me.
In a nutshell, ive got a servlet that is the entry point to a 7.0 portal
app.
That servlet checks PKI certs and IDs against an LDAP, then once authorized,
sets
a session attribute that is used as the username and pass for the portal
realm,
then forwards to /application. what i want to do is have the servlet
forward to
<jsp:forward page="/application?namespace=security&event=button.login/>
to simply
bypass the login.jsp form and log the user in based in the aforementioned
session
param. ive written a custome login helper class that extends the LoginHelper
and
ive implemented all the changes prescribed in the loginFramework.jar
patch available
on the dev2dev site. what i get is this: the portal, regardless of the
event="button.login",
sends me to the form. however, once the form is filled in an submitted,
it uses
my custom loginhelper??? how do i get the <jsp:forward/> to sinply execute
the
"button.login" event???