Roles and .wars in WebLogic

Question

          I have a .war file whose web.xml file defines a security role of LoggingRole. No
          matter what I do, I cannot successfully login and access the web-app. I am running
          on WebLogic 7.0 on Windows 2000.
          I tried going into the admin console and defining a role named LoggingRole then
          adding the Administrators group to it. Then I make sure there are some users in
          the Administrators group. Everytime I try to use those users to login, it fails.
          If I delete the secuirty constraints from the web-app it works fine. if I install
          the web-app on other servlet engines wit hthe security, it works. Any ideas?
          Here is the relevant snippet of the web.xml:
               <security-constraint>
                    <web-resource-collection>
                         <web-resource-name>System Viewer</web-resource-name>
                         <url-pattern>/menu2</url-pattern>
                    </web-resource-collection>
                    <auth-constraint>
                         <role-name>LoggingRole</role-name>
                    </auth-constraint>
               </security-constraint>
               <security-role>
                    <role-name>LoggingRole</role-name>
               </security-role>
          Thanks,
          brian
          

Answer 1

          In WL6, normally you should have something like <security-role-assignment>
          <role-name>developer</role-name>
          <principal-name>developer</principal-name>
          <principal-name>customer</principal-name>
          </security-role-assignment>
          in your weblogic.xml. I never try this in WL7 and hope it will work.
          The alternative is, open your weblogic admin console, following the following
          steps: (Left pane) Deployment->Web Applications->YourWebApplication, then (right
          pane)Edit web application descriptors. On the next screen, (Left pane)Web AppExt->Security
          role assignment->.... If you don't have Web AppExt, you should be able to create
          one when you see this screen. After you assign tghe roles, click persistent and
          a new web.xml and a new weblogic.xml will be generated and you can use them for
          future use.
          "Brian Pipa" <[email protected]> wrote:
          >
          >I have a .war file whose web.xml file defines a security role of LoggingRole.
          >No
          >matter what I do, I cannot successfully login and access the web-app.
          >I am running
          >on WebLogic 7.0 on Windows 2000.
          >
          >I tried going into the admin console and defining a role named LoggingRole
          >then
          >adding the Administrators group to it. Then I make sure there are some
          >users in
          >the Administrators group. Everytime I try to use those users to login,
          >it fails.
          >If I delete the secuirty constraints from the web-app it works fine.
          >if I install
          >the web-app on other servlet engines wit hthe security, it works. Any
          >ideas?
          >
          >Here is the relevant snippet of the web.xml:
          >     <security-constraint>
          >          <web-resource-collection>
          >               <web-resource-name>System Viewer</web-resource-name>
          >               <url-pattern>/menu2</url-pattern>
          >          </web-resource-collection>
          >          <auth-constraint>
          >               <role-name>LoggingRole</role-name>
          >          </auth-constraint>
          >     </security-constraint>
          >
          >     <security-role>
          >          <role-name>LoggingRole</role-name>
          >     </security-role>
          >
          >Thanks,
          >brian