JSP protected pages are "forbidden" when request passed with access URL

Question

Dear All,
I am encountering a very strange problem. Let me know if you have any solution for this issue:
Setup:
1. Dedicated OpenSSO idp (different domain)
2. Service Provider - contains a portal which in turn uses a webservice.
Both the portal and web services are installed on the Tomcat server.
3. OpenSSO agent for Tomcat is also installed on the SP machine.
Now, when I deploy my client portal and the web service, I am not able to access:
1. wsdl (like, http://localhost:8080/Service?wsdl)
2. Any jsp page to which I pass request parameters through URL. (like, http://localhost:8080/test.jsp?test=1
I get a message indication - resource is forbidden. (Note, I have already done a OpenSSO login prior to this. Also access is granted to the above mentioned URLs for the logged in user).
Let me know if I am missing out something.
Thanks,
tarak

Answer 1

Hi All,
I got a solution to this problem.
Refer: http://blogs.sun.com/JohnD/entry/opensso_wildcards_and_handling_resources
Extract:
Handling Resources That Contain Query Strings:
Some resources use a query string, which is the part of a URL that contains data to be passed to web applications. The following is a feasible example of a URL that contains a query string: http://AgentHost/path/app?query-string. The question mark (?) is the separator. It is not part of the query string. Many scenarios exist in which query strings might be used. They can be used for personalization of the user's session. Sometimes an application might add some locale information for a page request. The following example demonstrates the use of such locale information:
http://AgentHost.com:8080/sampleapp/main.jsp?language=en&country=US.
Neither the multi-level wildcard (*) nor the one-level wildcard (--) match the question mark. Therefore, to define a policy resource that can handle the question mark, use the multi-level wildcard on both sides of a question mark, as follows: ?* (asterisk-question mark-asterisk).