Basic Autenticaation without weblogi.xml failed

Question

Hello,
I have a problem with the Basic-Authentication, in a simple Webapp
contains with a Servlet called "servlet1", enable Security in Weblogic
7.0 and add new Role called "testrole" for the Webapp,in the
Defaultrealm. Now configuration the web.xml with Secrity:
<schnipp>
<web-app>
<servlet>
<servlet-name>servlet1</servlet-name>
<servlet-class>testweb3.Servlet1</servlet-class>
<security-role-ref>
<role-name>testrole</role-name>
<role-link>testrole</role-link>
</security-role-ref>
</servlet>
<servlet-mapping>
<servlet-name>servlet1</servlet-name>
<url-pattern>/servlet1</url-pattern>
</servlet-mapping>
<security-constraint>
<display-name>testrole</display-name>
<web-resource-collection>
<web-resource-name>Show</web-resource-name>
<url-pattern>/servlet1</url-pattern>
<http-method>GET</http-method>
<http-method>POST</http-method>
</web-resource-collection>
<auth-constraint>
<role-name>testrole</role-name>
</auth-constraint>
<user-data-constraint>
<transport-guarantee>NONE</transport-guarantee>
</user-data-constraint>
</security-constraint>
<login-config>
<auth-method>BASIC</auth-method>
<realm-name>myrealm</realm-name>
</login-config>
<security-role>
<role-name>testrole</role-name>
</security-role>
</web-app>
Deploy the application on the Appserver. Called with Webbrowser the URL,
show the Logindialog, enter the Username and Password. wrong!! not login
return Logindialog.
Now Rolemapping in Weblogic.xml
<security-role-assignment>
<role-name>testrole</role-name>
<principal-name>testgroup</principal-name>
</security-role-assignment>
enter Username and Password ,login success.
ist the Way over Weblogic.xml wrong or right? If the user, password,
groups contains in embedded LDAP mapping beetwhen user groups and roles.
and the Basic Realm is "myrealm" without the Weblogic.xml ??
Kind Regards,
Sascha Jostock

Answer 1

Keith, here are a few thoughts:
First, try running your page (spGals/China/galXml.cfm)
outside of spry. If the results show an obvous error, there's your
problem. (The xmlhttprequest expects XML, but CF and web server
come back as HTML.)
And since you have specified a relative path, your test must
use the URL to the page currently loading the XML. It may be that
your request (in the code) should be root-relative (/spGals), for
instance. The browse of the page will tell you.
It may be that the page comes back with CFML debugging turned
on. add <cfsetting showdebugoutput="no">. I discussed this
and related challenges in a blog entry at
http://carehart.org/blog/client/index.cfm/2006/7/13/spry4_unexpected_server_results
And since
http://carehart.org/blog/client/index.cfm/2006/7/13/spry4_unexpected_server_results
You should also try loading your page in the DataSetExplorer
(in the Spry samples).
Indeed, note that (as with your code) you have to load up the
page that's got the spry code from the same server against which
you'll be getting the CFM page serving the XML. You can't do
cross-browser requests.
If you are running Spry 1.2, enable the new debug feature, by
setting Spry.Data.Region.debug = true on your page with the spry
code. See the new 1.2 docs for more.
If you are not running Spry 1.2, look into using an http
proxy (like Fiddler on Windows, or Firebug on Firefox) to watch the
HTTP traffic going on between your client and server. This is
something I will blog about more later.
Let us know if any of those are the trick for you.