Form Based Auth Scheme on IIS not working

Question

Hi All
I am facing some issues while using Form Based Authentication scheme to protect a resource which is on IIS 6.0. The problem comes only when the action URL is other than "/access/oblix/apps/webgate/bin/webgate.dll".
The form reappears even after submitting the correct credentials. The login form also having a same action URL as of Authentication scheme and also it (action URL) has been protected with Anonymous Authentication scheme.
The same scenario works when there is GET in the login form. But when I use POST, it does not work. I have also made sure that the registry entry HKEY_LOCAL_MACHINE\SOFTWARE\Oblix\Oblix COREid\version\WebGate\postdata="yes" has been correctly set. Policy Manager and WebGate have been installed in the same folder.
Any suggestion on what I might be missing in the configuration?

Answer 1

Hi,
Thank you very much for your valuable inputs on this topic. I tried the changes to my web service configuration as per your suggestions & also made the remote web application adhere to form based authentication but i still see the login page everytime i create a new session with the portal. My web.xml file for remote web app looks like this now:
<web-app>
<security-constraint>
<display-name>Example Security Constraint</display-name>
<web-resource-collection>
<web-resource-name>Protected Area</web-resource-name>
<url-pattern>/protected/*</url-pattern>
     <http-method>DELETE</http-method>
<http-method>GET</http-method>
<http-method>POST</http-method>
     <http-method>PUT</http-method>
</web-resource-collection>
<auth-constraint>
<role-name>admin</role-name>
</auth-constraint>
<user-data-constraint><transport-guarantee>NONE</transport-guarantee></user-data-constraint>
</security-constraint>
<!-- Default login configuration uses form-based authentication -->
<login-config>
<auth-method>FORM</auth-method>
<realm-name>Example Form-Based Authentication Area</realm-name>
<form-login-config>
<form-login-page>/login.jsp</form-login-page>
<form-error-page>/error.jsp</form-error-page>
</form-login-config>
</login-config>
<security-role>
<description> An administrator </description>
<role-name>
manager
</role-name>
</security-role>
</web-app>
Now, my portlet url is http://pc:8080/TestLoginApp/protected/index.jsp
& login & post urls are:
http://pc:8080/TestLoginApp/login.jsp &
http://pc:8080/TestLoginApp/protected/index.jsp respectively.
What is it that i am still missing? Any help in resolving this would be greatly appreciated.
Thanks
Ankur