J_security_check causing 404 Error

Question

<b>Hello All<BR>
I am using Weblogic 8.1 SP3, I am trying to use the Active Directory as a means for Authentication via a FORM based login-module. <BR>
I have followed the directions in the Weblogic Security documentation but I am getting a 404 Error when I submit the login form. It looks like that my configuration does not recognize the j_security_check. I don't know what is missing in my configuration. It is just a plain simple Weblogic Server domain. <BR>
I have pasted my web.xml, weblogic.xml, config.xml and login.html file. I would appreciate any help in this regards.<BR>
Thanks in advance<BR>
Rajeev Bhogal <BR></b>------------------------------------------------<BR>
<b>Web.xml</b><BR>
<!DOCTYPE web-app PUBLIC "-//Sun Microsystems, Inc.//DTD Web Application 2.3//EN" "http://java.sun.com/dtd/web-app_2_3.dtd">
<web-app>
     <welcome-file-list>
          <welcome-file>welcome.jsp</welcome-file>
     </welcome-file-list>
     <security-constraint>
          <web-resource-collection>
               <web-resource-name>welcomePage</web-resource-name>
               <description>
                    The Welcome Page and all other resources
               </description>
               <url-pattern>/*</url-pattern>
               <http-method>GET</http-method>
<http-method>POST</http-method>
          </web-resource-collection>
          <auth-constraint>
               <role-name>COSTWebAppUser</role-name>
          </auth-constraint>
     </security-constraint>
     <login-config>
          <auth-method>FORM</auth-method>
          <realm-name>default</realm-name>
          <form-login-config>
               <form-login-page>login.html</form-login-page>
               <form-error-page>login-invalid.jsp</form-error-page>
          </form-login-config>
     </login-config>
     <security-role>
          <description>The Cost Web App users</description>
          <role-name>COSTWebAppUser</role-name>
     </security-role>
</web-app>
---------------------------------------------------<BR>
<b>Weblogic.xml</b><BR>
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE weblogic-web-app
PUBLIC "-//BEA Systems, Inc.//DTD Web Application 8.1//EN"
"http://www.bea.com/servers/wls810/dtd/weblogic810-web-jar.dtd" >
<weblogic-web-app>
     <security-role-assignment>
          <role-name>COSTWebAppUser</role-name>
          <principal-name>WebAppUser_group</principal-name>
     </security-role-assignment>
     <container-descriptor>
          <check-auth-on-forward/>
     </container-descriptor>
     <context-root>cost</context-root>
</weblogic-web-app>
-------------------------------------------------<BR>
<b>Config.xml</b><BR>
<?xml version="1.0" encoding="UTF-8"?>
<Domain ConfigurationVersion="8.1.3.0" Name="cost">
<Server ExpectedToRun="false" ListenAddress="" ListenPort="7002"
Name="costserver" NativeIOEnabled="true"
ReliableDeliveryPolicy="RMDefaultPolicy" ServerVersion="8.1.3.0">
<SSL Enabled="false" HostnameVerificationIgnored="false"
IdentityAndTrustLocations="KeyStores" Name="costserver"/>
</Server>
<JMSFileStore Directory="rmfilestore" Name="FileStore"/>
<WSReliableDeliveryPolicy DefaultRetryCount="10"
DefaultTimeToLive="60000" Name="RMDefaultPolicy" Store="FileStore"/>
<Security Name="cost" PasswordPolicy="wl_default_password_policy"
Realm="wl_default_realm" RealmSetup="true">
<weblogic.security.providers.authentication.DefaultAuthenticator
ControlFlag="SUFFICIENT"
Name="Security:Name=myrealmDefaultAuthenticator" Realm="Security:Name=myrealm"/>
<weblogic.security.providers.authentication.DefaultIdentityAsserter
ActiveTypes="AuthenticatedUser"
Name="Security:Name=myrealmDefaultIdentityAsserter" Realm="Security:Name=myrealm"/>
<weblogic.security.providers.authorization.DefaultRoleMapper
Name="Security:Name=myrealmDefaultRoleMapper" Realm="Security:Name=myrealm"/>
<weblogic.security.providers.authorization.DefaultAuthorizer
Name="Security:Name=myrealmDefaultAuthorizer" Realm="Security:Name=myrealm"/>
<weblogic.security.providers.authorization.DefaultAdjudicator
Name="Security:Name=myrealmDefaultAdjudicator" Realm="Security:Name=myrealm"/>
<weblogic.security.providers.credentials.DefaultCredentialMapper
Name="Security:Name=myrealmDefaultCredentialMapper" Realm="Security:Name=myrealm"/>
<weblogic.management.security.authentication.UserLockoutManager
Name="Security:Name=myrealmUserLockoutManager" Realm="Security:Name=myrealm"/>
<weblogic.management.security.Realm
Adjudicator="Security:Name=myrealmDefaultAdjudicator"
AuthenticationProviders="Security:Name=myrealmActiveDirectoryAuthenticator|Security:Name=myrealmDefaultAuthenticator|Security:Name=myrealmDefaultIdentityAsserter"
Authorizers="Security:Name=myrealmDefaultAuthorizer"
CredentialMappers="Security:Name=myrealmDefaultCredentialMapper"
DefaultRealm="true" DisplayName="myrealm"
Name="Security:Name=myrealm"
RoleMappers="Security:Name=myrealmDefaultRoleMapper" UserLockoutManager="Security:Name=myrealmUserLockoutManager"/>
<weblogic.security.providers.authentication.ActiveDirectoryAuthenticator
ControlFlag="SUFFICIENT"
Credential="{3DES}wC2qC6JGP2Ejslt9YBUQXA=="
GroupBaseDN="OU=WebApp Testing,DC=dna,DC=tcorp,DC=cibcwm,DC=com"
Host="10.127.30.77"
Name="Security:Name=myrealmActiveDirectoryAuthenticator"
Principal="CN=costadmin,CN=Users,DC=dna,DC=tcorp,DC=cibcwm,DC=com"
Realm="Security:Name=myrealm" UserBaseDN="CN=Users,DC=dna,DC=tcorp,DC=cibcwm,DC=com"/>
</Security>
<EmbeddedLDAP
Credential="{3DES}itnOzBVUKKxXTwrsE0931yGJo8kr/c/yoacbH+aqD78=" Name="cost"/>
<SecurityConfiguration
Credential="{3DES}UAu57FhReq0paDOgNlRBxIhitxG70lwKu8FLhEvrneZRBFWCPi0gViZCPB3Qx5h09H7cef7V6Y9MXlPAv9Zgx9lz/j2w8BXL"
Name="cost" RealmBootStrapVersion="1"/>
<Realm FileRealm="wl_default_file_realm" Name="wl_default_realm"/>
<FileRealm Name="wl_default_file_realm"/>
<PasswordPolicy Name="wl_default_password_policy"/>
<JMSServer Name="WSStoreForwardInternalJMSServercostserver"
Store="FileStore" Targets="costserver">
<JMSQueue CreationTime="1153845019403"
JNDIName="jms.internal.queue.WSStoreForwardQueue"
JNDINameReplicated="false" Name="WSInternaljms.internal.queue.WSStoreForwardQueuecostserver"/>
<JMSQueue CreationTime="1153845019840"
JNDIName="jms.internal.queue.WSDupsEliminationHistoryQueue"
JNDINameReplicated="false" Name="WSInternaljms.internal.queue.WSDupsEliminationHistoryQueuecostserver"/>
</JMSServer>
<Application Name="cost" Path="H:\eclipse\workspace\cost"
StagingMode="nostage" TwoPhase="true">
<WebAppComponent Name="WebRoot" Targets="costserver" URI="WebRoot"/>
</Application>
</Domain>

Answer 1

Hi Brian;
From the error we see " http://server:7001/coolapp/messagebroker/amf'". It seems you are trying to access the flex app over https but access the backend remote servce via http.
If that is the case, I have an old blog post that may help in that situation. http://blogs.adobe.com/lin/archives/2008/04/how_to_access_f.html
If  that is not what you are trying to do, or your issue is more compilcated, please open a support case if you have a support contract.