Custom Authentication Provider and User Manage like SQLAuthenticator, How?

Question

Hi everyone,
I faced a problem with login function of my portal (Webcenter Application). The Problem is:
- Allow the users logging in by user that store in another system. I must communicate using low level of socket. This really is not a problem.
- If user logged in, for first time of logging in, i must store them in some identity store (Maybe tables database).
- View Users in Weblogic Console. To do that, i known that i must implemeted something that i dont what that are.
Here are my work:
- I Created a Custom Authentication Provider. And configuration in Admin Console. But i don't know what are that i should implementing to View user & group in Admin Console.
- I Cannot logging in: After i created simple application for testing, i cannot logging in even i tested with SQLAuthenticator Provider and original DefaultProvider. In Logging Console, I saw every I Printed In The Code of Login Module.
Here are my Code:
<?xml version="1.0" ?>
<MBeanType Name = "OrkitVASPortal" DisplayName = "OrkitVASPortal"
           Package = "orkit"
           Extends = "weblogic.management.security.authentication.Authenticator"
           PersistPolicy = "OnUpdate">
    <MBeanAttribute
        Name        = "ProviderClassName"
        Type        = "java.lang.String"
        Writeable   = "false"
        Default     = "&quot;orkit.OrkitVASPortalProviderImpl&quot;"
/>
    <MBeanAttribute
        Name        = "Description"
        Type        = "java.lang.String"
        Writeable   = "false"
        Default     = "&quot;WebLogic Simple Sample Audit Provider&quot;"
/>
    <MBeanAttribute
        Name        = "Version"
        Type        = "java.lang.String"
        Writeable   = "false"
        Default     = "&quot;1.0&quot;"
/>
    <MBeanAttribute
        Name        = "LogFileName"
        Type        = "java.lang.String"
        Default     = "&quot;SimpleSampleAuditor.log&quot;"
/>
</MBeanType>
package orkit;
import java.util.HashMap;
import javax.security.auth.login.AppConfigurationEntry;
import javax.security.auth.login.AppConfigurationEntry.LoginModuleControlFlag;
import weblogic.management.security.ProviderMBean;
import weblogic.security.provider.PrincipalValidatorImpl;
import weblogic.security.spi.*;
public final class OrkitVASPortalProviderImpl implements AuthenticationProviderV2 {
    private String description;
    private LoginModuleControlFlag controlFlag;
    public OrkitVASPortalProviderImpl() {
        System.out.println("The Orkit VASPortal Provider Implemented!!!!!");
    @Override
    public IdentityAsserterV2 getIdentityAsserter() {
        return null;
    // Our mapping of users to passwords/groups, instead of being in LDAP or in a
    // database, is represented by a HashMap of MyUserDetails objects..
    public class MyUserDetails {
        String pw;
        String group;
        // We use this to represent the user's groups and passwords
        public MyUserDetails(String pw, String group) {
            this.pw = pw;
            this.group = group;
        public String getPassword() {
            return pw;
        public String getGroup() {
            return group;
    // This is our database
    private HashMap userGroupMapping = null;
    public void initialize(ProviderMBean mbean, SecurityServices services) {
        System.out.println("The Orkit VASPortal Provider is intializing......");
        OrkitVASPortalMBean myMBean = (OrkitVASPortalMBean) mbean;
        description = myMBean.getDescription() + "\n" + myMBean.getVersion();
        System.err.println("#In realm:" + myMBean.getRealm().wls_getDisplayName());
        // We would typically use the realm name to find the database
        // we want to use for authentication. Here, we just create one.
        userGroupMapping = new HashMap();
        userGroupMapping.put("a", new MyUserDetails("passworda", "g1"));
        userGroupMapping.put("b", new MyUserDetails("passwordb", "g2"));
        userGroupMapping.put("system", new MyUserDetails("12341234",
                "Administrators"));
        String flag = myMBean.getControlFlag();
        if (flag.equalsIgnoreCase("REQUIRED")) {
            controlFlag = LoginModuleControlFlag.REQUIRED;
        } else if (flag.equalsIgnoreCase("OPTIONAL")) {
            controlFlag = LoginModuleControlFlag.OPTIONAL;
        } else if (flag.equalsIgnoreCase("REQUISITE")) {
            controlFlag = LoginModuleControlFlag.REQUISITE;
        } else if (flag.equalsIgnoreCase("SUFFICIENT")) {
            controlFlag = LoginModuleControlFlag.SUFFICIENT;
        } else {
            throw new IllegalArgumentException("Invalid control flag " + flag);
    public AppConfigurationEntry getLoginModuleConfiguration() {
        HashMap options = new HashMap();
        options.put("usermap", userGroupMapping);
        System.out.println("UserMap: " + options);
        return new AppConfigurationEntry(
                "orkit.OrkitVASPortalLoginModule",
                controlFlag, options);
    public String getDescription() {
        return description;
    public PrincipalValidator getPrincipalValidator() {
        return new PrincipalValidatorImpl();
    public AppConfigurationEntry getAssertionModuleConfiguration() {
        return null;
//    public IdentityAsserter getIdentityAsserter() {
//        return null;
    public void shutdown() {
* To change this template, choose Tools | Templates
* and open the template in the editor.
package orkit;
import orkit.OrkitVASPortalProviderImpl;
import java.io.IOException;
import java.util.*;
import javax.security.auth.Subject;
import javax.security.auth.callback.*;
import javax.security.auth.login.*;
import javax.security.auth.spi.LoginModule;
import weblogic.security.principal.WLSGroupImpl;
import weblogic.security.principal.WLSUserImpl;
* This login module will be called by our Authentication Provider. It assumes
* that the option, usermap, will be passed which contains the map of users to
* passwords and groups.
public class OrkitVASPortalLoginModule implements LoginModule {
    private Subject subject;
    private CallbackHandler callbackHandler;
    private HashMap userMap;
    // Authentication status
    private boolean loginSucceeded;
    private boolean principalsInSubject;
    private Vector principalsBeforeCommit = new Vector();
    public void initialize(Subject subject, CallbackHandler callbackHandler,
            Map sharedState, Map options) {
        this.subject = subject;
        this.callbackHandler = callbackHandler;
        // Fetch user/password map that should be set by the authenticator
        userMap = (HashMap) options.get("usermap");
     * Called once after initialize to try and log the person in
    public boolean login() throws LoginException {
        // First thing we do is create an array of callbacks so that
        // we can get the data from the user
        Callback[] callbacks;
        callbacks = new Callback[2];
        callbacks[0] = new NameCallback("username: ");
        callbacks[1] = new PasswordCallback("password: ", false);
        try {
            callbackHandler.handle(callbacks);
        } catch (IOException eio) {
            throw new LoginException(eio.toString());
        } catch (UnsupportedCallbackException eu) {
            throw new LoginException(eu.toString());
        String username = ((NameCallback) callbacks[0]).getName();
        System.out.println("Username: " + username);
        char[] pw = ((PasswordCallback) callbacks[1]).getPassword();
        String password = new String(pw);
        System.out.println("PASSWORD: " + password);
        if (username.length() > 0) {
            if (!userMap.containsKey(username)) {
                throw new FailedLoginException("Authentication Failed: Could not find user:" + username);
            }else{
                System.out.println("Contstainded Username");
            String realPassword = ((OrkitVASPortalProviderImpl.MyUserDetails) userMap.get(username)).getPassword();
            if (realPassword == null || !realPassword.equals(password)) {
                throw new FailedLoginException("Authentication Failed: Password incorrect for user" + username);
            }else{
                System.out.println("Everyitng OKIE");
        } else {
            // No Username, so anonymous access is being attempted
        loginSucceeded = true;
        // We collect some principals that we would like to add to the user
        // once this is committed.
        // First, we add his username itself
        principalsBeforeCommit.add(new WLSUserImpl(username));
        // Now we add his group
        principalsBeforeCommit.add(new WLSGroupImpl(((OrkitVASPortalProviderImpl.MyUserDetails) userMap.get(username)).getGroup()));
        return loginSucceeded;
    public boolean commit() throws LoginException {
        if (loginSucceeded) {
            subject.getPrincipals().removeAll(principalsBeforeCommit);
            principalsInSubject = true;
            return true;
        } else {
            return false;
    public boolean abort() throws LoginException {
        if (principalsInSubject) {
            subject.getPrincipals().removeAll(principalsBeforeCommit);
            principalsInSubject = false;
        return true;
    public boolean logout() throws LoginException {
        return true;
}and OrkitVASPortalMBean & OrkitVASPortalImpl class created by MBeanMaker tool.
Can someome help.
Thanks in advance!

Answer 1

Hi ,
SQLAuthenticator is not yet supported with UCM 11g due to some JPS Provider limitations .
Currently there is an Enhancement request for this .
Thanks
Srinath