How to use rdbms as users data store in a form authentication webapp?

Question

Hi,ALL!
WLS 10.3
This is part of web.xml:
<security-constraint>
     <web-resource-collection>
          <web-resource-name>secureweb</web-resource-name>
          <url-pattern>/secureweb/*</url-pattern>
     </web-resource-collection>
     <auth-constraint>
          <role-name>Users</role-name>
     </auth-constraint>
</security-constraint>
<login-config>
     <auth-method>FORM</auth-method>
     <form-login-config>
          <form-login-page>/login.htm</form-login-page>
          <form-error-page>/login_fail.jsp</form-error-page>
     </form-login-config>
</login-config>
Every time I want to access web page in /secureweb/,it takes me to /login.htm,and when I want to login on from /login.htm,it takes me to /login_fail.jsp,so I think there is nothing wrong with web.xml but WLS's configuration.
There is only one Security Realm called "myrealm" in my domain,and besides the DefaultAuthenticator and DefaultIdentityAsserter,I created a new SQL Authencator called sql_auth in front of them,after that,I created tables(USERS,GROUPS,GROUPMEMBERS) in my Oracle database accordding to the configurations in sql_auth,and insert some user data.
But it never successed when I used the data in the database to test the authentication,it allways go to the /login_fail.jsp page...
What's wrong there?
Best Regards!
Edited by: Linyin.Huang on Jun 18, 2009 5:02 AM

Answer 1

Hello,these are the SQLs from the "provider specific" configuration tab in my SQLAuthenticator,in fact,it's provided by WLS,and I have never modified them:
SQL Get Users Password:SELECT U_PASSWORD FROM USERS WHERE U_NAME = ?
SQL Set User Password:UPDATE USERS SET U_PASSWORD = ? WHERE U_NAME = ?
SQL User Exists:SELECT U_NAME FROM USERS WHERE U_NAME = ?
SQL List Users:SELECT U_NAME FROM USERS WHERE U_NAME LIKE ?
SQL Create User:INSERT INTO USERS VALUES ( ? , ? , ? )
SQL Remove User:DELETE FROM USERS WHERE U_NAME = ?
SQL List Groups:SELECT G_NAME FROM GROUPS WHERE G_NAME LIKE ?
SQL Group Exists:SELECT G_NAME FROM GROUPS WHERE G_NAME = ?
SQL Create Group:INSERT INTO GROUPS VALUES ( ? , ? )
SQL Remove Group:DELETE FROM GROUPS WHERE G_NAME = ?
SQL Is Member:SELECT G_MEMBER FROM GROUPMEMBERS WHERE G_NAME = ? AND G_MEMBER = ?
SQL List Member Groups:SELECT G_NAME FROM GROUPMEMBERS WHERE G_MEMBER = ?
SQL List Group Members:SELECT G_MEMBER FROM GROUPMEMBERS WHERE G_NAME = ? AND G_MEMBER LIKE ?
SQL Remove Group Memberships:DELETE FROM GROUPMEMBERS WHERE G_MEMBER = ? OR G_NAME = ?
SQL Add Member To Group:INSERT INTO GROUPMEMBERS VALUES( ?, ?)
SQL Remove Member From Group:DELETE FROM GROUPMEMBERS WHERE G_NAME = ? AND G_MEMBER = ?
SQL Remove Group Member:DELETE FROM GROUPMEMBERS WHERE G_NAME = ?
SQL Get User Description:SELECT U_DESCRIPTION FROM USERS WHERE U_NAME = ?
SQLSet User Description:UPDATE USERS SET U_DESCRIPTION = ? WHERE U_NAME = ?
SQL Get Group Description:SELECT G_DESCRIPTION FROM GROUPS WHERE G_NAME = ?
SQL Set Group Description:UPDATE GROUPS SET G_DESCRIPTION = ? WHERE G_NAME = ?
And these are the SQLs for creating tables(Oracle 11G):
CREATE TABLE USERS(
U_NAME VARCHAR2(50) PRIMARY KEY,
U_PASSWORD VARCHAR2(50) NOT NULL,
U_DESCRIPTION VARCHAR2(50) NOT NULL);
CREATE TABLE GROUPS(
G_NAME VARCHAR2(50) PRIMARY KEY,
G_DESCRIPTION VARCHAR2(50) NOT NULL);
CREATE TABLE GROUPMEMBERS(
G_NAME VARCHAR2(50) NOT NULL,
G_MEMBER VARCHAR2(50) NOT NULL,
CONSTRAINT PK_GROUPMEMBERS PRIMARY KEY(G_NAME,G_MEMBER));
INSERT INTO USERS(U_NAME,U_PASSWORD,U_DESCRIPTION)VALUES('usera','passworda','userdesa');
INSERT INTO GROUPS(G_NAME,G_DESCRIPTION)VALUES('groupa','groupdesa');
INSERT INTO GROUPMEMBERS(G_NAME,G_MEMBER)VALUES('groupa','usera');
COMMIT;
I still can't see any users or groups in my SQLAuthenticator...
Thank you!
Edited by: Linyin.Huang on Jun 18, 2009 1:39 PM