NT Authentication in Weblogic 6 with Windows 2000

Question

Has anyone had success getting the Ntrealm running on W2K with weblogic 6sp1?
I set everything up according to the 6.0 docs (descibed below) and when I access
my web application (that i'm protecting) the login prompt doesn't accept my NT
login, but roles over to the fileRealm(weblogic realm), If I create the same
login there (but say with a different password just to be sure which is which,
I get accepted).
Here's how I went about it:
1) Installed WebLogic 6sp1 to run as an NT service on W2K Server sp1. Running
as the local system account.
2) Created an NTrealm (myNTRealm), set primary domain to the name of the W2k server
(myServer), since i'm going to use a local nt account (testAccount, password=nt)
to try and login. (also created a fileRealm login testAccount, password=weblogic)
3) Created a Caching realm for the NTrealm (myNTCacheRealm), turned off Case-sensitive
cache.
4) Created a web application(testApp) with a single JSP file (test.jsp).
5) Entered the following into the web.xml
<?xml version="1.0" encoding="ISO-8859-1"?>
<!DOCTYPE web-app PUBLIC "-//Sun Microsystems, Inc.//DTD Web Application 2.2//EN"
"http://java.sun.com/j2ee/dtds/web-app_2.2.dtd">
<web-app>
<display-name>testApp</display-name>
<description>NTrealm security testing app</description>
<servlet>
<servlet-name>Test</servlet-name>
<jsp-file>test.jsp</jsp-file>
</servlet>
<security-constraint>
<web-resource-collection>
<web-resource-name>EntireApp</web-resource-name>
<description>Secures the entire Application</description>
<url-pattern>/*</url-pattern>
</web-resource-collection>
<auth-constraint>
<description>Roles valid for entire site</description>
<role-name>secureUsers</role-name>
</auth-constraint>
</security-constraint>
<login-config>
<auth-method>basic</auth-method>
<realm-name>myNTRealm</realm-name>
</login-config>
<security-role>
<description>Web app security role</description>
<role-name>secureUsers</role-name>
</security-role>
</web-app>
6) And the following into the weblogic.xml file:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE weblogic-web-app PUBLIC "-//BEA Systems, Inc.//DTD Web Application 2.2//EN"
"http://www.bea.com/servers/wls600/dtd/weblogic-web-jar.dtd">
<weblogic-web-app>
<description>WebLogic Deployment Descriptor</description>
<security-role-assignment>
<role-name>secureUsers</role-name>
<principal-name>testAccount</principal-name>
</security-role-assignment>
</weblogic-web-app>
7) Everything deploys fine and when I point my browser to http://myServer:7003/testApp/test.jsp.
The login prompt has:
Site: myServer
Realm: myNTRealm
but the server doesn't accept my NT login+password testAccount+nt, but I can
entered the weblogic login+password testAccount+weblogic and got in.
Any ideas? I've spent just about all the time I care to on this one.

Answer 1

"Barrett" <[email protected]> wrote:
>
Has anyone had success getting the Ntrealm running on W2K with weblogic
6sp1?
I set everything up according to the 6.0 docs (descibed below) and when
I access
my web application (that i'm protecting) the login prompt doesn't accept
my NT
login, but roles over to the fileRealm(weblogic realm), If I create
the same
login there (but say with a different password just to be sure which
is which,
I get accepted).
Here's how I went about it:
1) Installed WebLogic 6sp1 to run as an NT service on W2K Server sp1.
Running
as the local system account.
2) Created an NTrealm (myNTRealm), set primary domain to the name of
the W2k server
(myServer), since i'm going to use a local nt account (testAccount, password=nt)
to try and login. (also created a fileRealm login testAccount, password=weblogic)
3) Created a Caching realm for the NTrealm (myNTCacheRealm), turned off
Case-sensitive
cache.
4) Created a web application(testApp) with a single JSP file (test.jsp).
5) Entered the following into the web.xml
<?xml version="1.0" encoding="ISO-8859-1"?>
<!DOCTYPE web-app PUBLIC "-//Sun Microsystems, Inc.//DTD Web Application
2.2//EN"
"http://java.sun.com/j2ee/dtds/web-app_2.2.dtd">
<web-app>
<display-name>testApp</display-name>
<description>NTrealm security testing app</description>
<servlet>
<servlet-name>Test</servlet-name>
<jsp-file>test.jsp</jsp-file>
</servlet>
<security-constraint>
<web-resource-collection>
<web-resource-name>EntireApp</web-resource-name>
<description>Secures the entire Application</description>
<url-pattern>/*</url-pattern>
</web-resource-collection>
<auth-constraint>
<description>Roles valid for entire site</description>
<role-name>secureUsers</role-name>
</auth-constraint>
</security-constraint>
<login-config>
<auth-method>basic</auth-method>
<realm-name>myNTRealm</realm-name>
</login-config>
<security-role>
<description>Web app security role</description>
<role-name>secureUsers</role-name>
</security-role>
</web-app>
6) And the following into the weblogic.xml file:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE weblogic-web-app PUBLIC "-//BEA Systems, Inc.//DTD Web Application
2.2//EN"
"http://www.bea.com/servers/wls600/dtd/weblogic-web-jar.dtd">
<weblogic-web-app>
<description>WebLogic Deployment Descriptor</description>
<security-role-assignment>
<role-name>secureUsers</role-name>
<principal-name>testAccount</principal-name>
</security-role-assignment>
</weblogic-web-app>
7) Everything deploys fine and when I point my browser to http://myServer:7003/testApp/test.jsp.
The login prompt has:
Site: myServer
Realm: myNTRealm
but the server doesn't accept my NT login+password testAccount+nt, but
I can
entered the weblogic login+password testAccount+weblogic and got in.
Any ideas? I've spent just about all the time I care to on this one.
Have you specified the Cacheing Realm on the Security tab?
i.e. Change it from '(none)' to 'myNTCacheRealm'