Using JAZN in forms 9i

Question

Is it possible to do basic authentication using JAZN LDAP on forms application?
I have modified the application.xml to include the following:
<jazn provider="LDAP" default-realm="coname.com" location="ldap://localhost:389" />
<security-role-mapping name="sr_manager">
<group name="managers" />
</security-role-mapping>
=======================================
and modified the web.xml found on
$ORA9iAS\forms90\j2ee\forms90app\forms90web\WEB-INF
<security-role>
<role-name>sr_manager</role-name>
</security-role>
<security-constraint>
<web-resource-collection>
<web-resource-name>f90servlet</web-resource-name>
<url-pattern>/f90servlet*</url-pattern>
</web-resource-collection>
<auth-constraint>
<role-name>sr_manager</role-name>
</auth-constraint>
</security-constraint>
<login-config>
<auth-method>BASIC</auth-method>
</login-config>
====================
I've created the user 'manager' and defined it to belong to 'managers' group in OID under the realm 'coname.com'.
when accessing the forms application using
http://localhost:8888/forms90/f90servlet?config=myadmin
the authentication screen pops up but does not seem to recognize the username/pwd specified.
when doing the same configurations on ordinary web app, everything works fine, the pop up login screen correctly authenticates the same username/pwd specified.
Are there other configurations that has to set for basic authentication to work on forms?

Answer 1

Grace,
did you modify the correct application.xml file? Also did you try to first run thie against the jazn-data.xml file to see if this works? I usually prefer to test the most basic functionality before testing the big picture.
This one worked for me
<security-constraint>
<web-resource-collection>
<web-resource-name>forms90servlets</web-resource-name>
<url-pattern>/f90servlet*</url-pattern>
</web-resource-collection>
<auth-constraint>
<role-name>users</role-name>
</auth-constraint>
<user-data-constraint>
<transport-guarantee>NONE</transport-guarantee>
</user-data-constraint>
</security-constraint>
<login-config>
<auth-method>BASIC</auth-method>
<realm-name>jazn.com</realm-name>
</login-config>
<security-role>
<role-name>users</role-name>
</security-role>
Note that I used the jazn.com default realm, but this shouldn't be too much of a difference.
May I ask you why you prefer the jazn based authentication over Oracle9i Forms single sign-on? Your approach requires to do the same for the Reports Servlet if you want to call authenticated Reports from Forms.
Since you are access restricting the complete Forms URL to be used by sr_manager there isn't even a finer grained access control that you get out of this. Also, if not specifying teh database connectstring in teh formsweb.cfg file, your users will have to connect twice.
Don't get me wrong, I don't want to talk you this out, I am just interested in why you want to do this. Maybe its a good idea worth to share with the community on OTN.
Fran