Combining '10.1.3 OC4J Java Single Sign-On' and 'Oracle (mod_o)SSO'

Question

OC4J as of 10.1.3 supports java SSO which doesn't require the whole infrastructure stack. I'm wondering whether one could create a solution that transparently provides SSO behavior whether you're coming from mod_osso or from OC4J Java SSO. So basically;
When I configure my (Java) app to leverage OC4J Java SSO, can I use this information to transparently log me in in my Forms/Portal application, hosted on the same domain/server using mod_osso - obviously without a login challenge - and vice versa?

Answer 1

I did a JAD (Decompile) on the "oracle.security.jazn.login.module.db.DBTableOraDataSourceLoginModule" and found the BUG. In the system-jazn file has to be defined columns for pk and the column with the username. These has to be the same according to these lines:
if(_userPk.equals(username))
break MISSING_BLOCK_LABEL_364;
if(LOGGER.isLoggable(Level.FINE))
LOGGER.log(Level.FINE, "[DBTableOraDataSourceLoginModule]User not authenticated: username or password mismatch");
In my original table I had an userid and a username, where userid was primary key. If I use Username as primary key.. voila It works, and very well indeed.
Oracle.. thank you for this new facility.
<- Holger ->