Unable to specify web application Login Module

HI all,
i have the following problem with JDev11Tech Preview R2:
I have jazn login module which i specify under the Tools -> Embedded OC4J preferences -> Authentication -> Login Configuration
The login module data is filled into the system-jazn-data.xml under the:
\jdevstudio1111_TechnPreview2\system11.1.1.0.20.46.84\o.j2ee\embedded-oc4j\config:
<jazn-loginconfig>
<application>
<name>Insis</name>
<login-modules>
<login-module>
<class>com.fadata.insis.security.InsisLoginModule</class>
<control-flag>required</control-flag>
<options>
<option>
<name>debug</name>
<value>false</value>
</option>
</options>
</login-module>
</login-modules>
</application>
</jazn-loginconfig>
But when i try to obtain the LoginContext i receive an exception
"No LoginModules configured for Insis"
I have that configuration working in JDev 10.1.3
Thank you very much in advance!
Krasimir

Krasimir,
in JDeveloper 11 the LoginModule is no longer configured in system-jazn-data.xml but in jps-config.xml (which also has a different format for creating it). So you can look at the jps-config.xml and figure it out yourself or wait for us to document how it works (which is a how-to I am planning to write but with very low priority for now).
Frank

Similar Messages

Unable to load web application

Hello everyone,
I have created a web application with a login.html page using the configure ADF Security Wizard. When i run the application from my computer, it runs perfectly. However, when i try running it from another host i get the following error after i enter the credentials in the login page (before redirecting to the welcome page):
Error 403--Forbidden
From RFC 2068 Hypertext Transfer Protocol -- HTTP/1.1:
10.4.4 403 Forbidden
The server understood the request, but is refusing to fulfill it. Authorization will not help and the request SHOULD NOT be repeated. If the request method was not HEAD and the server wishes to make public why the request has not been fulfilled, it SHOULD describe the reason for the refusal in the entity. This status code is commonly used when the server does not wish to reveal exactly why the request has been refused, or when no other response is applicable.
Any thoughts?
Mohamed.

Post to the appropriate developers forum under OS X Technologies.

Pl/sql web application login and logout problem

Hi, every expert.
I am making a web application with pl/sql, and I focus on the login and logout recently.
I make use of owa_cookie to login and logout, it works wonder in login process as the cookie values are sent to the page successfully, and cookie info was killed successfully when logging out, but the problem is when i click the back button on the browser it can still go back to the previous page, only if i refresh it again it can work propely

As far as I know, there is only Java API for managing the application. You might need to look into making some java web services to handle this.

Unable to Deply Web Application - Error

Hello Guys,
I have created a Web Application in Eclipse 3.2 and now I am trying to Deploy the Application in OAS 10g R3
I am getting the below error
Nov 22, 2008 5:59:43 PM http://orcl.DEMOSRV home Application Deployer for TEST STARTS.
Nov 22, 2008 5:59:43 PM http://orcl.DEMOSRV home Copy the archive to D:\product\10.1.3.1\OracleAS_1\j2ee\home\applications\TEST.ear
Nov 22, 2008 5:59:43 PM http://orcl.DEMOSRV home Initialize D:\product\10.1.3.1\OracleAS_1\j2ee\home\applications\TEST.ear begins...
Nov 22, 2008 5:59:43 PM http://orcl.DEMOSRV home Unpacking TEST.ear
Nov 22, 2008 5:59:44 PM http://orcl.DEMOSRV home Done unpacking TEST.ear
Nov 22, 2008 5:59:44 PM http://orcl.DEMOSRV home Unpacking TEST.war
Nov 22, 2008 5:59:46 PM http://orcl.DEMOSRV home Done unpacking TEST.war
Nov 22, 2008 5:59:46 PM http://orcl.DEMOSRV home Initialize D:\product\10.1.3.1\OracleAS_1\j2ee\home\applications\TEST.ear ends...
Nov 22, 2008 5:59:46 PM http://orcl.DEMOSRV home Starting application : TEST
Nov 22, 2008 5:59:46 PM http://orcl.DEMOSRV home Initializing ClassLoader(s)
Nov 22, 2008 5:59:46 PM http://orcl.DEMOSRV home Initializing EJB container
Nov 22, 2008 5:59:46 PM http://orcl.DEMOSRV home Loading connector(s)
Nov 22, 2008 5:59:46 PM http://orcl.DEMOSRV home Starting up resource adapters
Nov 22, 2008 5:59:46 PM http://orcl.DEMOSRV home Initializing EJB sessions
Nov 22, 2008 5:59:46 PM http://orcl.DEMOSRV home Committing ClassLoader(s)
Nov 22, 2008 5:59:46 PM http://orcl.DEMOSRV home Initialize TEST begins...
Nov 22, 2008 5:59:46 PM http://orcl.DEMOSRV home application : TEST is in failed state
Nov 22, 2008 5:59:46 PM http://orcl.DEMOSRV home Operation failed with error: Error loading web-app 'TEST' at D:\product\10.1.3.1\OracleAS_1\j2ee\home\applications\TEST\TEST: Unknown filter subtag: servlet-name
Can anyone tell me if I am missing something in OAS? Or how do I fix this problem
Thanks
Satish

Oh yes, thank you for reminding me. It is the library. We needed space on the hard drive for some HD video while on vacation and the only way to make room was to burn some DVDs of my photos. I did it all nice and neat so I could put it back when I got home, but then I forgot. Probably not the safest way to do it!
Time to update to a 500GB hard drive I guess! Thanks for your help.

Web application, packages (module)

Hi, i'm new at JSF and i want to know which package distribution i should use for my web application. When i made desktop applications i had different packages (in order to use MVC pattern) like a
beanPackage where i stored my POJOS,
a businessPackage where i stored the logic of the business,
a viewPackage where i stored the gui,
and the daoPackage for my data access objects.
Now in a web application using JSF what package shoud i use? there are backing Beans, where do i put them? do they keep (business logic) what kind of package distribution should i use for my web application?.

hm, its not good when two different projects have bidirectional dependencies - in my opinion that means they should be part of the same code base and thus the same project.
A possible solution I see is:
- take the part that the 'bean' project depends on in the web project out of the web project and put it in the bean project itself
- add the bean project as a project dependency to the web project (thus bringing back the logic you just moved to the bean project)
You can manage library and project dependencies in the project properties. Right click on the project name in the tree view to get a menu that holds the function to do that (cannot remember its exact name right now and I don't have Netbeans handy).

PCP2 web application login message

Hello,
I have an xserve with pcp2 activated and when you want to connect to the web pcp application you arrive to an https web page http://youserver:8170/podcastproducer/capture/login. When you come for the fisrt time to this page your web browser give you a warming :
this connection is not certified
You have to validate the self-signed certificate to continue. You get this message only once but i would like to go through. I suppose it's possible to set a valid certificate into the server and i would like to know how to do so.
Franck

Podcast Producer, which depends on OSX Server, has its own forum here:
http://discussions.apple.com/forum.jspa?forumID=1355
where hopefully you can get answers from people with experience of this.

How to install a war file as a Web Application Bundle (WAB) in CQ 5.5?

How to install a war file as a Web Application Bundle (WAB) using CQSE and embedded OSGi Felix container? OSGi R4.2 specification specified Web application bundles which allows deploying war files as WABs insie OSGi containers. How do we do this in Felix container embedded in CQ 5.5?

i m sorry, i intentionally wanted to post it in EJB forum, mistakenly i posted it in Servlets forum, anyways, if anyone of u know the ans, plz share it with me too.
Thanx
Nisha

Full craw issue with specific web application

We are using SharePoint 2013 Enterprise (15.0.4569.1000). We have public facing (publishing site) with anonymous access enabled on it. While crawling this site we are using default Content Source called "Local SharePoint sites" where we have following
settings.
Start Addresses - http://SP2013APPSRV
Crawl Settings - Crawl everything under the hostname for each start address
Crawl Schedules - Enable Incremental Crawls
With this configuration we try to perform Full Crawl of this content source. the status of this content source goes to "Starting" then to "Crawling Full" and after some time then to "Idle" state. The overall crawl duration never
goes beyond 3-4 minutes. With this if we check the "Crawl Log" screen then except for "Successes" = 1 every other column shows 0 even the "Errors" or "Top Level Errors" column shows no record. Getting into the Success
items we found that the crawling was only done for the single item which is nothing but the start address that was specified into the content source settings (http://sp2013appsrv). Because of this it seems the crawling is not working correctly to pull all
the sub contents of the given host URl, instead it only pulls the top level link. There is nothing helpful in Verbose - ULS logs or event viewer either.
With further analysis of this we found that this issue only exists with single web application only. Because adding another web application URL into the same Content Source does crawls all the contents properly of that web application but still shows single
index item for problematic web application.
Could someone please help us with this issue ?

Hi Ajay,
Based on your description, you have some problems in doing full crawl of a specify web application.
1. Check if the crawl account has 'full read' access to affected web application.
2. Check if allow this site to appear in search results in the search and offline availability in the site setting.
3. Check if you have
opened the urlMappings in SharePoint that will hinder the search function crawls. If you add the code as below into the web.config to open the
urlMappings, it will not crawl the web application.
<urlMappings
enabled="true">
<clear
/>
<add
url="~/Home.aspx"
mappedUrl="~/Default.aspx?tab=home"
/>
<remove
url="~/Home2.aspx"
/>
</urlMappings>
4. Try to reset your search index and then do a full crawl.
The article gives you the details about how to reset your search index.
Best regards,
Victoria
Victoria Xia
TechNet Community Support

Assigning a login module to a Web Dynpro application

Hi everybody,
I would like a Web Dynpro application to use a custom login module for authentication. How can I do this?
What I found is the Security Provider (in the Visual Administrator tool) where I can add a login module to the "form" authentication mechanism for example. But if I do this I think all applications using this mechanism have to use my custom login module, right?
I wonder if I have to add my Web Dynpro application as a component to the Security Provider so that I can assign login modules to it. Am I on the right way? If yes, how can I do this? If I choose "Add" from the "Policy Configurations" tab a popup appears where I can enter the name for a new component. How do I specify my application there?
Thanks in advance for all answers,
Torben

Hi,
Web Dynpro applications use the ticket authentication template. U wud need to add your login module to the ticket template's login stack.
Incase you are accessing the Web Dynpro applications thru the EP u wud need to make changes to the authschemes.xml file too.
regards,
Vishal

SOAP Web Service + Custom Login Module issue

Hi Guys,
We faced an authentication issue in our project. Could you please give any advice how the issue could be resolved.
Environment: A simple SOAP Web Service on top of POJO class created in a Web Application. The web application deployed to the SAP NetWeaver 7.10 Application Server in the Enterprise Application Archive.
Configuration:
      Single Service Administration Application(NetWeaver Administration -> SOA Management -> Application and Scenario Communication -> Single Service Administration)
       The web service endpoint has authentication configured to use User ID/Password HTTP Authentication.
    Authentication Application(NetWeaver Administration-> Configuration Management->Security->Authentication)
      The application(<vendorName>/<earName>*<vendor>~<webAppName>) has Authentication Stack configured to use our custom login module.
Issue: BasicPasswordLoginModule used by the J2EE when we are trying to execute the web service using Web Service Navigator(checked in debug mode). It seems that we missed something in configuration.
Idea: The main Idea is to use our custom login module when we are executing a web service.
Could you help me to resolve the issue.
Thanks,
Dmitry
Edited by: Dmitry Eidin on Jul 17, 2009 3:46 PM

> The web service endpoint has authentication configured to use User ID/Password HTTP Authentication.
That's the point.

JAAS login module configuration in Oracle application server

I have a LDAP login module implementing javax.security.auth.spi.LoginModule. This login module works well with tomcat and weblogic, if I configure the JVM arguments -Djava.security.auth.login.config and -Djava.security.policy to pont to the login.conf and access.policy files. The login.conf file has the below content
FREEWAY_SERV
com.wipro.freeway.security.LdapLoginModule required debug=true portal=false;
FREEWAY_PORT
com.wipro.freeway.security.LdapLoginModule required debug=true portal=true;
The application uses these login modules by passing Name of the JAAS configuration (FREEWAY_SERV or FREEWAY_PORT).
I would like to use the same login modules and code in Oracle application sever 10.1.3 and I haven't got any success yet.
Could anybody please help me to get this right?
Thanks in advance.
Message was edited by:
vinayalva

Hi,
in OracleAs bet is to use Enterprise Manager to configure the login module. The LoginModule needs to be configured in the system-jazn-data.xml file, which is located in teh j2ee/home/config directory of the OC4J you use. Enterprise Manager does this all for you.
In your application deployment the orion-application.xml file needs to specify that a custom LoginModule should be used. Again ENterprise Manager does it for you.
To use the LoginModule e.d. for J2EE authentication, just make sure that the application name of the J2EE deployment matches the name of the LoginModule configuration
If you want to use pure JAAS you may have to change the OC4J properties file in the j2ee/home/config directory. Best suggestion to give is to get the online documentation for OC4J security
Frank

JDEV deployment of web app with custom JAAS login module fails

For the first time, I am trying to implement a custom JAAS login module.
JDEV deployment to standalone OC4J only fails when my orion-application.xml is included. The deployment fails with a java.lang.InstantiationException.
This what I have done:
1) Wrote a custom LoginModule called com.whirlpoool.sjtc.jaas.gpa.LDAPLoginModule.
2) Put it and its dependent classes in a jar named sjtcjaas.jar.
3) Put the jar in $ORACLE_HOME\j2ee\home\lib
4) Changed library_path in $ORACLE_HOME\j2ee\home\config\application.xml to
<library path="../../home/lib/scheduler.jar;../../home/lib/sjtcjaas.jar" />
5) Added an orion-application.xml to the JDEV project. (I used an Oracle How-to as a pattern, see below.)
I think I'm close but no cigar, yet. Any help would be appreciated.
Regards,
Al Malin
=============== orion-application.xml ========================================
<?xml version="1.0"?>
<orion-application xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="http://xmlns.oracle.com/oracleas/schema/orion-application-10_0.xsd" deployment-version="10.1.3.0.0" default-data-source="jdbc/OracleDS" schema-major-version="10" schema-minor-version="0" >
<security-role-mapping name="sr_manager">
<group name="managers" />
</security-role-mapping>
<security-role-mapping name="sr_developer">
<group name="developers" />
</security-role-mapping>
<log>
<file path="application.log" />
</log>

<jazn-loginconfig>
<application>
<name>customjaas</name>
<login-modules>
<login-module>
<class>com.whirlpoool.sjtc.jaas.gpa.LDAPLoginModule</class>
<control-flag>required</control-flag>
<options>
<option>
<name>debug</name>
<value>true</value>
</option>
</options>
</login-module>
</login-modules>
</application>
</jazn-loginconfig>
</orion-application>

Starting OC4J from c:\oc4j\j2ee\home ...
2006-09-07 13:45:28.484 NOTIFICATION JMS Router is initiating ...
06/09/07 13:45:29 Oracle Containers for J2EE 10g (10.1.3.0.0) initialized
2006-09-07 13:45:58.609 NOTIFICATION Application Deployer for aam STARTS.
2006-09-07 13:45:58.640 NOTIFICATION Copy the archive to C:\oc4j\j2ee\home\applications\aam.ear
2006-09-07 13:45:58.656 NOTIFICATION Initialize C:\oc4j\j2ee\home\applications\aam.ear begins...
2006-09-07 13:45:58.656 NOTIFICATION Auto-unpacking C:\oc4j\j2ee\home\applications\aam.ear...
2006-09-07 13:45:58.687 NOTIFICATION Unpacking aam.ear
2006-09-07 13:45:58.687 NOTIFICATION Unjar C:\oc4j\j2ee\home\applications\aam.ear in C:\oc4j\j2ee\home\applications\aam
2006-09-07 13:45:58.750 NOTIFICATION Done unpacking aam.ear
2006-09-07 13:45:58.750 NOTIFICATION Finished auto-unpacking C:\oc4j\j2ee\home\applications\aam.ear
2006-09-07 13:45:58.750 NOTIFICATION Auto-unpacking C:\oc4j\j2ee\home\applications\aam\aam.war...
2006-09-07 13:45:58.750 NOTIFICATION Unpacking aam.war
2006-09-07 13:45:58.765 NOTIFICATION Unjar C:\oc4j\j2ee\home\applications\aam\aam.war in C:\oc4j\j2ee\home\applications\aam\aam
2006-09-07 13:45:58.765 NOTIFICATION Done unpacking aam.war
2006-09-07 13:45:58.765 NOTIFICATION Finished auto-unpacking C:\oc4j\j2ee\home\applications\aam\aam.war
2006-09-07 13:45:58.812 NOTIFICATION Initialize C:\oc4j\j2ee\home\applications\aam.ear ends...
2006-09-07 13:45:58.828 NOTIFICATION Starting application : aam
2006-09-07 13:45:58.828 NOTIFICATION Initializing ClassLoader(s)
2006-09-07 13:45:58.828 NOTIFICATION Initializing EJB container
2006-09-07 13:45:58.828 NOTIFICATION Loading connector(s)
2006-09-07 13:45:58.843 NOTIFICATION application : aam is in failed state
06/09/07 13:45:58 WARNING: Application.setConfig Application: aam is in failed state as initialization failedjava.lang.InstantiationException
Sep 7, 2006 1:45:58 PM com.evermind.server.Application setConfig
WARNING: Application: aam is in failed state as initialization failedjava.lang.InstantiationException
06/09/07 13:45:58 oracle.oc4j.admin.internal.DeployerException: java.lang.InstantiationException
06/09/07 13:45:58 at oracle.oc4j.admin.internal.ApplicationDeployer.addApplication(ApplicationDeployer.java:510)
06/09/07 13:45:58 at oracle.oc4j.admin.internal.ApplicationDeployer.doDeploy(ApplicationDeployer.java:191)
06/09/07 13:45:58 at oracle.oc4j.admin.internal.DeployerBase.execute(DeployerBase.java:93)
06/09/07 13:45:58 at oracle.oc4j.admin.jmx.server.mbeans.deploy.OC4JDeployerRunnable.doRun(OC4JDeployerRunnable.java:52)
06/09/07 13:45:58 at oracle.oc4j.admin.jmx.server.mbeans.deploy.DeployerRunnable.run(DeployerRunnable.java:81)
06/09/07 13:45:58 at EDU.oswego.cs.dl.util.concurrent.PooledExecutor$Worker.run(PooledExecutor.java:814)
06/09/07 13:45:58 at java.lang.Thread.run(Thread.java:595)
06/09/07 13:45:58 Caused by: java.lang.InstantiationException
06/09/07 13:45:58 at com.evermind.server.ApplicationStateRunning.initDataSources(ApplicationStateRunning.java:1424)
06/09/07 13:45:58 at com.evermind.server.ApplicationStateRunning.initializeApplication(ApplicationStateRunning.java:195)
06/09/07 13:45:58 at com.evermind.server.Application.setConfig(Application.java:391)
06/09/07 13:45:58 at com.evermind.server.Application.setConfig(Application.java:308)
06/09/07 13:45:58 at com.evermind.server.ApplicationServer.addApplication(ApplicationServer.java:1771)
06/09/07 13:45:58 at oracle.oc4j.admin.internal.ApplicationDeployer.addApplication(ApplicationDeployer.java:507)
06/09/07 13:45:58 ... 6 more
2006-09-07 13:45:58.890 NOTIFICATION Application Deployer for aam FAILED.
2006-09-07 13:45:58.890 NOTIFICATION Application UnDeployer for aam STARTS.
2006-09-07 13:45:58.906 NOTIFICATION Removing all web binding(s) for application aam from all web site(s)
2006-09-07 13:45:59.015 NOTIFICATION Application UnDeployer for aam COMPLETES.
06/09/07 13:45:59 WARNING: DeployerRunnable.run java.lang.InstantiationExceptionoracle.oc4j.admin.internal.DeployerException: java.lang.InstantiationException
at oracle.oc4j.admin.internal.DeployerBase.execute(DeployerBase.java:126)
at oracle.oc4j.admin.jmx.server.mbeans.deploy.OC4JDeployerRunnable.doRun(OC4JDeployerRunnable.java:52)
at oracle.oc4j.admin.jmx.server.mbeans.deploy.DeployerRunnable.run(DeployerRunnable.java:81)
at EDU.oswego.cs.dl.util.concurrent.PooledExecutor$Worker.run(PooledExecutor.java:814)
at java.lang.Thread.run(Thread.java:595)
Caused by: java.lang.InstantiationException
at com.evermind.server.ApplicationStateRunning.initDataSources(ApplicationStateRunning.java:1424)
at com.evermind.server.ApplicationStateRunning.initializeApplication(ApplicationStateRunning.java:195)
at com.evermind.server.Application.setConfig(Application.java:391)
at com.evermind.server.Application.setConfig(Application.java:308)
at com.evermind.server.ApplicationServer.addApplication(ApplicationServer.java:1771)
at oracle.oc4j.admin.internal.ApplicationDeployer.addApplication(ApplicationDeployer.java:507)
at oracle.oc4j.admin.internal.ApplicationDeployer.doDeploy(ApplicationDeployer.java:191)
at oracle.oc4j.admin.internal.DeployerBase.execute(DeployerBase.java:93)
... 4 more
2006-09-07 13:45:59.031 WARNING java.lang.InstantiationException

JAAS Login Module using Deployable Web Service proxy

Hi,
We've created a JAAS Login Module that calls a deployable web service proxy to validate users on Netweaver Portal 2004 SP19. To do this the following steps were taken:
1) created a deployable web proxy named 'SGU_proxy' and uploaded it to server. This project created 2 files: 'SGU_proxy.ear' (the one uploaded) and 'SGU_proxyClientAPI.jar'.
2) created a Java project named 'AgregacaoLoginModule' with a single class to authenticate users, this is the class that calls the web service with the username and password. This project references the deployable web proxy project (Properties > Java Build Path > Projects > checkbox marked next to project SGU_proxy).
3) exported the Java project class, not including the 'SGU_proxyClientAPI.jar'.
4) created a 'J2EE Server Component' > 'Library' project named 'AgregacaoLoginModuleJ2EE'.
On the 'provider.xml' file added 2 jars: 'AgregacaoLoginModule.jar' and 'SGU_proxyClientAPI.jar'. References were made to the standard portal libraries. No references were made to the proxy 'SGU_proxy' or the 'AgregacaoLoginModule' project.
The library was uploaded to the server, everything was ok and no errors were reported.
The login module was configured on the server and is called when users try to acess Portal server.
The problem is that when trying to authenticate users: after getting a reference to the proxy using jndi I get a ClassCastException. Note that this proxy is used in a WebDyn Pro application and is working fine.
The web service client proxy generated the interface 'pt.agregacao.ws.sgu.Servicos' and from jndi I get 'class pt.agregacao.ws.sgu.ServicosImpl'. So this seems to be ok, why the exception?
Is it necessary to had a reference to 'SGU_proxy' on the 'AgregacaoLoginModuleJ2EE' project? If so, how?
Thanks in advance.
Alvaro

Hi,
We've created a JAAS Login Module that calls a deployable web service proxy to validate users on Netweaver Portal 2004 SP19. To do this the following steps were taken:
1) created a deployable web proxy named 'SGU_proxy' and uploaded it to server. This project created 2 files: 'SGU_proxy.ear' (the one uploaded) and 'SGU_proxyClientAPI.jar'.
2) created a Java project named 'AgregacaoLoginModule' with a single class to authenticate users, this is the class that calls the web service with the username and password. This project references the deployable web proxy project (Properties > Java Build Path > Projects > checkbox marked next to project SGU_proxy).
3) exported the Java project class, not including the 'SGU_proxyClientAPI.jar'.
4) created a 'J2EE Server Component' > 'Library' project named 'AgregacaoLoginModuleJ2EE'.
On the 'provider.xml' file added 2 jars: 'AgregacaoLoginModule.jar' and 'SGU_proxyClientAPI.jar'. References were made to the standard portal libraries. No references were made to the proxy 'SGU_proxy' or the 'AgregacaoLoginModule' project.
The library was uploaded to the server, everything was ok and no errors were reported.
The login module was configured on the server and is called when users try to acess Portal server.
The problem is that when trying to authenticate users: after getting a reference to the proxy using jndi I get a ClassCastException. Note that this proxy is used in a WebDyn Pro application and is working fine.
The web service client proxy generated the interface 'pt.agregacao.ws.sgu.Servicos' and from jndi I get 'class pt.agregacao.ws.sgu.ServicosImpl'. So this seems to be ok, why the exception?
Is it necessary to had a reference to 'SGU_proxy' on the 'AgregacaoLoginModuleJ2EE' project? If so, how?
Thanks in advance.
Alvaro

Autentication error in Web Service after Login Module

Hi Experts,
I am getting a failed autentication when i try to access a web service. This is my scenario:
I have developed my own login module using JAAS. When i call a web service, the login module is executed, then it validate the credencials and make the authetication true. After that the web service is called. The web Service is mark as user/password authetication. But i always get this error:
Authentication for web service UtilityService, configuration UtilityService using security policy BASIC___ws failed: Login failed.. (See SAP Note 880896 for further info).
Just for you know, the credentials taht i use in login modulo isn't the user of UME. I use user store in another user store. I fthe credential is correct pass to the Principal an user of UME. To login stack is right when pass to login module:
LOGIN.OK
User: tecbmmab
IP Address: 192.168.14.48
Authentication Stack: tridmen.com.br/pegasus~ear*pegasus
Login Module                                                               Flag        Initialize Login      Commit     Abort      Details
1. com.sap.engine.services.security.server.jaas.BasicPasswordLoginModule   SUFFICIENT ok          false      false
2. br.com.tridmen.login.ERPCEHeaderLoginModule                             REQUISITE   ok          true       true
        #1 Client = 800
        #2 Destination_reference = CUSTOM_DEST
        #3 SysId = DE1
        #4 SysNum = 00
        #5 TargetHost = tecs220
        #6 TrATicket = TRATICKETCTRL
Central Checks                                                                                true
After this, the error mention above, of web service happen.
As my knowledge, when i call the web service i already have the session autenticate with login module. But this is not happen.
Could someone help with this question?
Best regards
Marcos Brandã

Hi,
in what order did you specify your login modules? In that error message it looks like it's in wrong order. Your custom module should be first with SUFFICIENT and then standard user name/password with REQUISITE.
Cheers

Login module for the J2EE application

Hi ,
I am trying to use the BasicPasswordLoginModule for my J2EE application which will be deployed in the SAP J2EE engine.My application will not be accessed through the portal.
I am having a login screen in my application for which i want to use the already avaliable login module. ie.. BasicPasswordLoginModule.
When i am trying to get the login(). i am getting the following the error.
"javax.security.auth.login.LoginException: No LoginModules configured for BasicPasswordLoginModule".
Please let me know what needs to be done.
PS: The version environment is CE 7.1
Regards
Abu Bakar

Hi Julius
I am totally confused, my application is a pure J2EE application which has only one screen which just displays the details. And i want only the login screen to be implemented. I have gone through a couple of dec from sap which tells to created a custom login module if requiredl but i want to user the FORM based authentication and use the BasicPasswordLoginModule(in-built in WAS)
All that i am doing is written a web.xml with the following information:
<login-config>
   <auth-method>FORM</auth-method>
   <form-login-config>
   <form-login-page>/home.jsp</form-login-page>
   <form-error-page>/relogin.jsp</form-error-page>
   </form-login-config>
</login-config>
<security-role>
    <role-name>App_Viewer</role-name>
</security-role>
web-j2ee-engine with following information:
<security-role-map>
          <role-name>App_Viewer</role-name>
           <server-role-name>Administrator</server-role-name>
     </security-role-map>
     <login-module-configuration>
     <login-module-stack>
     
          <login-module>
          
               <login-module-name>BasicPasswordLoginModule</login-module-name>
               <flag>SUFFICIENT</flag>
               <options>
                    <option>
                    
                    <name>UserNamePrefix</name>
                    <value>Admin</value>
                    </option>
               </options>
          </login-module>
     </login-module-stack>
     <security-policy-domain></security-policy-domain>
</login-module-configuration>
And I am not sure, if the above mentioned details are enough. My implementation code is as follows:
try {
          HttpServletRequest request = (HttpServletRequest) FacesContext.getCurrentInstance().getExternalContext().getRequest();
          HttpServletResponse response = (HttpServletResponse) FacesContext.getCurrentInstance().getExternalContext().getResponse();
          request.setAttribute(ILoginConstants.LOGON_UID_ALIAS, this.getUserName());
          request.setAttribute(ILoginConstants.LOGON_PWD_ALIAS, this.getPassword());
          UMFactory.getLogonAuthenticator().logon(request, response, "BasicPasswordLoginModule");
          status = success;
     } catch (Exception e) {
          e.printStackTrace();
          status = e.toString();
In the NWA i have just configured the UserNamePrefix with Admin, thats all . Since the form login authentication method is already configure with the BasicPasswordLoginModule, I left it untouched.
I also implemented a custom login module and deployed it but not sure how to use it in my code.
Please let me know if i am in the rite track. Correct me if i am wrong. At the end of the day i want to use the login screen just to get authenticated. I am also not bothered about the password changing etc.. As the users who are going to use my application are the users in the Identity Management. Few portions of my screen should be allowed to be displayed based on the roles.
PS: My application is not configured in the portal. Its an independent application deployed on the WAS(CE 7.1).
Please advice
Regards
Abu Bakar

Unable to specify web application Login Module

Similar Messages

Maybe you are looking for