Weblogic server BASIC Authentication not prompting for username

I created a very simple Weblogic 10.3.5 web application with BASIC Authentication that for some reason doesn't prompt for the username and password. I believe the web.xml and weblogic.xml are created properly. The entire application is below.
It consists of two files:
index.html -- that anyone should be able to load
remoteuser.jsp -- that only people in 'group' should be able to load
I added an <auth-constraint> for all JSPs (*.jsp), such that only users in 'group' should be able to load them. However, when I load the url "/remoteuser.jsp", it displays "The remote user is null", and doesn't prompt for a username and password. The causes the JSP to also print out null instead of the remote user's name.
The <auth-method> is, of course, set to BASIC.
I currently don't even have any groups defined in Weblogic's Security Realm, because I want to watch it fail first.
According to this Weblogic documentation (http://docs.oracle.com/cd/E15051_01/wls/docs103/security/thin_client.html#wp1037337), I believe that I'm doing everything correctly.
Do I have to modify the Weblogic Security Realm's Authentication Provider? Or some other setting?
I know that I'm doing something silly, but can't see it. Please help!
SOURCE FILES
web.xml
<web-app>
<welcome-file-list>
<welcome-file>index.html</welcome-file>
</welcome-file-list>
<security-constraint>
<web-resource-collection>
<web-resource-name>JSPs</web-resource-name>
<url-pattern>*.jsp</url-pattern>
</web-resource-collection>
<auth-constraint>
<role-name>group</role-name>
</auth-constraint>
</security-constraint>
<login-config>
<auth-method>BASIC</auth-method>
</login-config>
<security-role>
<role-name>group</role-name>
</security-role>
</web-app>
weblogic.xml
<weblogic-web-app>
<security-role-assignment>
<role-name>group</role-name>
<principal-name>group</principal-name>
</security-role-assignment>
</weblogic-web-app>
remoteuser.jsp
<%@ page language="java" contentType="text/html; charset=ISO-8859-1"
pageEncoding="ISO-8859-1"%>
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
<title>Remote User</title>
</head>
<body>
<p>
Only users in "group" should be able to load this page.
</p>
<p>
The remote user is <%= request.getRemoteUser() %>
</p>
</body>
</html>
index.html
<html>
<head><title>WebLogic Test</title></head>
<body>
Everyone should be able to see this.
</body>
</html>

Hi,
Before deploying, have you changed:
Application properties -> Deployment
Remove the selection from "Auto Generate and Syncronize weblogic-jdc.xml ....."
Kind Regards

Similar Messages

  • 11G Modplsql Basic Authentication not working for globally identified database users

    I have a modplsql dad that uses Basic authentication.  When I supply a username and password where the database user is locally defined in the database using the "identified by" syntax the authentication works perfectly and the modplsql app works.  When I try to authenticate a database user that is defined in the database using the "identified globally" syntax authentication fails.  Any idea on how to get modplsql app to work with users identified via OID?
    Thanks,
    Phil

    Hi,
    Before deploying, have you changed:
    Application properties -> Deployment
    Remove the selection from "Auto Generate and Syncronize weblogic-jdc.xml ....."
    Kind Regards

  • Basic authentication not working for portal application

    HI All,
    i have a portal application where I have a servlet. i want to use basic authentication for this servlet.
    to archive this i have followed http://docs.oracle.com/cd/E14571_01/web.1111/b31974/adding_security.htm
    and configured basic authentication, also add web-resource in web.xml for the url to access the servlet.
    my web.xml look like (copied is only security section from web.xml)
    <security-constraint>
        <web-resource-collection>
          <web-resource-name>adfAuthentication</web-resource-name>
          <url-pattern>/adfAuthentication</url-pattern>
        </web-resource-collection>
        <web-resource-collection>
          <web-resource-name>All</web-resource-name>
          <url-pattern>/faces/Auto-connect</url-pattern>
        </web-resource-collection>
        <auth-constraint>
          <role-name>valid-users</role-name>
        </auth-constraint>
      </security-constraint>
      <login-config>
        <auth-method>BASIC</auth-method>
      </login-config>
      <security-role>
        <role-name>valid-users</role-name>
      </security-role>
    this works when in run the application in JDeveloper i.e. when i try to access http://localhost:7101/MyApp/faces/Auto-connect it ask for basic authentication (the popup) and when i access http://localhost:7101/MyApp/ it takes me to home page for login , but doesn't work when i deploy the application in weblogic 11g.(deployment done using Enterprise Manager console (EM console) (for both URL no popup).
    i tried Google around it but didn't get any solution please provide your input and guide me.
    thanks
    -somesh

    Hi,
    Before deploying, have you changed:
    Application properties -> Deployment
    Remove the selection from "Auto Generate and Syncronize weblogic-jdc.xml ....."
    Kind Regards

  • Windows not prompting for username/password

    I'm trying to access my NAS200 via a Windows Vista Home Premium computer. It sees the drive but when I open it I can only access what's made available to 'guest'. I'm trying to login with the admin credentials so I can see shared folders that only admin has access to. 
    I tried mapping the drive and using the admin user/pass but that doesn't work either. If I try to access a folder directly such as \\nas200\private - windows says it doesn't exist when it clearly does. The only way I'm able to access my files at this point is through the web interface which is not good enough since I need to perform backups to a private folder.

    I went to edit a user and it wouldn't let me, so I powercycled and it worked. Now I want to change permissions on the folder for that user but when I click save the permissions do not save.
    When I updated the username to match my windows user profile name, it gave me share access based on the username in the NAS settings. It didn't ask for a password or anything. So in theory if I change my windows profile to admin then I'll have admin rights on the NAS.
    What the hell is going on here?

  • How to make dyn/admin not to prompt for username and password?

    Hello all
    How to make dyn/admin not to prompt for username and password? I am writing a selenium job to automate cache invalidation to load test a production issue we are facing. Selenium is opening a fresh firefox session and prompting for username and password every time. I am also trying to modify my script such that it will use the same session again and not prompt for username and password. But I thought of asking this question in the group.
    Your inputs will help a lot.
    Thanks,
    Sundar

    Hi,
    You can set enabled property of /atg/dynamo/servlet/adminpipeline/AuthenticationServlet/ to false. It will not prompt for authentication.
    Gopi

  • Outlook 2013 - Exchange 2013 - Prompts for username and password when EWS basic authentication is enabled

    So we have an Exchange 2013 environment, and a CRM solution that requires basic authentication to EWS internally.  Problem is, after a reboot of our Exchange server, all of our Outlook clients begin prompting for username and password (which nothing
    works) which also starts locking users AD accounts out due to failed login attempts (somehow).  If I disabled basic authentication on EWS, Outlook authenticates as normal using NTLM and there are no issues.  Once Outlook has authenticated, I can
    turn back on basic authentication, and Outlook will be fine until the next time the Exchange server is rebooted.
    Any ideas?

    Hi,
    According to your description, I understand that Outlook client prompted for username and password when Exchange server restart and basic authentication is enabled for EWS.
    If I misunderstand your concern, please do not hesitate to let me know.
    It’s normal. This caused by the difference between basic authentication and NTML authentication:
    Basic, with any version of Outlook prior to 2010, results in a pop up dialog asking for creds. Outlook 2010 makes the 'save this password' actually work, so in an Outlook 2010 or later world, Basic can mean no need to authenticate every time you open/reconnect,
    but in all earlier versions, you will have to enter creds every time.
    NTLM, when used by a client that is domain joined and logged in with cached creds, results in the client simply sending the cached in creds to the server, resulting in what looks like a pretty seamless single sign on experience. However, if you want to do pre-authentication
    at something like TMG, and not let the traffic go all the way to CAS, you need to configure TMG for this.
    Thanks
    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]
    Allen Wang
    TechNet Community Support

  • Report Manager 2008 r2 - prompts for username/password & does not accept

    Hi all,
    I am dealing with an extremely frustrating problem with Reporting Services 2008 r2, Report Manager, and would greatly appreciate any help.
    I have installed Reporting Services, with Report Manager, onto a Windows Server 2008 r2 install. 
    When loading Report Manager (http://server/reports), I get prompted for a username/password.
    No matter what I type in, I get prompted a 2nd time, then a 3rd time, then a blank screen loads up.
    @#$@#??!?!!
    How can I get past this username/password challenge - remember this is SQL 2008 r2 so IIS-based solutions are not relevant.
    Thanks again,
    Jason

    Hi Jason,
    Did you follow the solution i mentioned at another your thread
    http://social.technet.microsoft.com/Forums/en-US/sqlreportingservices/thread/4f3651cb-c608-4460-a45a-9337df2ab88a ? This is very common issue in SSRS 2008 and the solutons have been summarized at this blog
    http://blogs.msdn.com/b/lukaszp/archive/2008/03/26/solving-the-reporting-services-login-issue-in-the-february-ctp-of-sql-server-2008.aspx , and also applies to SSRS 2008 R2.
    Note:by using the default installation, the rsreportserver.config file is stored at C:\Program Files\Microsoft SQL Server\MSRS10_50.instance\Reporting Services\ReportServer
    please let us know the result.
    thanks,
    Jerry

  • OVM Server 2.1.2 does not prompt for Networking

    OVM Server 2.1.2 does not prompt for a network setup (ie DHCP or static IPs).
    - I tried re-installing this several times
    This same machine works with native Enterprise Linux 5.2 x86-64 networking.
    The motherboard has two onboard Realtek 8111C chips (10/100/1000 Mbit)
    http://www.gigabyte.com.tw/Products/Motherboard/Products_Overview.aspx?ProductID=2842
    Will setting up networking by hand work with OVM Server 2.1.2?

    OK I finaly made my Realtek Semiconductor Co., Ltd. RTL8111/8168B PCI Express Gigabit Ethernet controller to work.
    First install an Ethernet card in your box that OVM supports. This to make the OVM installation run smoothly.
    When OVM is up and running follow the steps in [Mini-HOWTO] RPMs needed to compile a kernel-module on / for VM Server to get a working environment to compile modules.
    Now get the driver for the unsupported card from ftp://61.56.86.122/cn/nic/r8168-8.008.00.tar.bz2 .
    Unpack the file by running;:
    tar -jxvf r8168-8.008.00.tar.bz2
    Now follow the steps in the included readme file to compile and install the driver.
    After this I edited the file /etc/modules.conf and changed the line
    alias eth0 xxx
    to
    alias eth0 r8168
    I then turned of the machine and removed my temporary network card.
    When booted I ran system-config-network to configure the network once more to the original values I entered when I installed.

  • Word 2010 prompts for username and password when opening a document on trusted website

    Hi Guys,
    We have a website (not sure if the site is a sharepoint site) on our trusted domain that asked for username and password when trying to access it. I added the site to our trusted sites zone and this resolved the issue however when I try to open word documents
    I get prompted for usernames and password again if I cancel the credentials box the document opens with no issues. 
    Below is some of the steps i have taken
    - Tried opening other non office documents (e.g. PDF, JPEG) and they open with no issues
    - Tried to opening the word documents with a system that only had word pad install and not Office 2010 and the documents open with no issues so it looks like it's an office 2010 problem 
    Can you please advise how I can resolve this issue and if this is a client issue or an issue on the web server thanks

    Hi,
    This issue is caused by the Office suit itself. When Internet Explorer opens an Office document, the appropriate Office application is started with the path of the document. The Office application then tries to access the document directly from
    the server. This differs from other browsers and other file types. Most browsers download the file and call the application to open the file from the local cache. However, when this occurs, if the opened file is changed and saved,
    the changes are only made to the local copy and not to the server copy.
    To establish the richest experience possible, the first thing that the Office application does is communicate with the server to determine the server type and what web authoring protocol is available. The application does this by making
    an OPTIONS request directly to the server.
    As a new process accessing the server, the Office application is required to renegotiate authentication. This method is more secure than a method in which the new process uses an existing authentication that was established by the browser. 
    Please try the following methods:
    An alternative with full functionality but with a calculated risk
    Client approaches that can reduce the impact
    Alternative configurations when the web server does not support DAV or reduced functionality is acceptable
    For more detail information, please refer to the following link:
    http://support.microsoft.com/kb/2019105/en-us
    Thanks
    George Zhao
    Forum Support
    Come back and mark the replies as answers if they help and unmark them if they provide no help.
    If you have any feedback on our support, please click "[email protected]"

  • MS access database prompting for username and  password

    Hello,
      When I try to run a crystal report that is connected to a (Access Database) from crystal server 2013, I get prompted for a username and password. Im not sure what im doing wrong, Ive tried creating a ODBC connection, change the SAP service to run under a domain user account, recreated the report with a different file path.  but still no luck, please help im at a lose.
    Thank you

    Hello,
    Refer please to the following kbas, probably this can help you :
    http://service.sap.com/sap/support/notes/1270997
    http://service.sap.com/sap/support/notes/1661997
    Regards,
    Asma

  • Network printers prompting for username and password

    With the more recent OS upgrades I can now see my printers on my home network. Very cool.  When I select one to print, I am prompted for a username and password. I have tried my network keys with no luck and cannot set a password on my printers. Is this unusual and if not, what should I be using?

    You can try to take a fiddler trace in both scenarios and then search for the differences. This issue seems to be related with your network configuration that with the product itself.
    In fiddler you can identify what verb is requesting for credentials and from there you can go further with troubleshooting.
    You can check also this article
    http://blogs.technet.com/b/office_integration__sharepoint/archive/2014/02/24/users-are-prompted-for-username-and-password-when-opening-an-office-file-from-a-web-server.aspx
    MCITP|MCTS SharePoint| SharePoint Performance blog

  • Prompting for username and password for opening

    Hi,
      The domain of my organisation is xyz.com. So when try to access any office doc from the office network it opens the office docs without any prompt in office client. But whenever try to access them using VPN or citrix it asks for the username and password.
    Then if I give credentials or cancel it irrespective of that it opens the doc for me.
    The sites are in trusted zone. It is happening for 2010 and 2013 both. But for pdf it is not prompting.
    Why it is asking for credentials and how to mitigate this so that it opens directly from everywhere.

    You can try to take a fiddler trace in both scenarios and then search for the differences. This issue seems to be related with your network configuration that with the product itself.
    In fiddler you can identify what verb is requesting for credentials and from there you can go further with troubleshooting.
    You can check also this article
    http://blogs.technet.com/b/office_integration__sharepoint/archive/2014/02/24/users-are-prompted-for-username-and-password-when-opening-an-office-file-from-a-web-server.aspx
    MCITP|MCTS SharePoint| SharePoint Performance blog

  • Users prompted for username and password after sharing removed from servers

    Hello Community
        On Sharepoint 2010 Server using the UI in a 2 server farm with an intranet running on it and everything functions as it should.  However it was noticed that from a users computer when in "Windows Explorer" if "Network"
    is clicked the 2 servers are visible.
        The problem is that when the server are clicked on in Windows Explorer the files and folders on the hard drive of the servers are visible too.
        Subsequently I logged onto the server and when into "Properties' - "Sharing" and
    unchecked the checkbox to "Share this folder".
        That solved the problem of the users being able to see and access the files
    and folders on servers hard drives but now when the users log onto the intranet
    they are prompted for a user name and password and even when they provide the user
    name and password and the page is returned the prompt appears on the screen again(then they cancel out).
        What can be done about the user being prompted for username and password without sharing the drives on the servers ?
        Thank you
        Shabeaut

    What exactly was shared out from the SharePoint server's file system? There are certain things that are shared by default.
    Trevor Seward
    Follow or contact me at...
    &nbsp&nbsp
    This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

  • Prompt for username and password when executing servlet

    In Weblogic 5.1 when I set the username and password in weblogic.properties file, it prompts for the usertname and password when I execute the gatewayServlet
    weblogic.allow.execute.weblogic.servlet.servlets/gateway.administration=vijay
    weblogic.password.vijay=password
    But I guess this is not the way it can be implemented in 8.1. Please let me know how I can prompt for username and password when executing the servlet. I dont want it to be done programatically. Please let me know whether I can set anything on the properties file.
    Thanks
    Vijay Subramanian

    You can use Apache ACLs, http://httpd.apache.org/docs/1.3/howto/auth.html
    GoodEvening!
    I'm developing a web application using jsp
    technology.
    When the user digit:
    http://<machine address>:<port>/<applicationName>
    I would that a browser prompt login is diplayed to
    the user for enter him username and password,
    before loading the index.jsp page. Is possible
    without using awt or swing components?! using only
    the browser's prompt dialog?!
    p.s.
    sorry 4 my bad english! ;-)

  • Micrsoft Outlook somtimes prompting for username and password

    hello All ,
     I Have Exchange 2010 sp3 installed two mailbox servers & two HUB & CAS Servers  and Outlook sometimes  prompting for username and password .
    how can fix it .
    Thank you

    Hi,
    Please check the following points:
    1. Does the issue happen to your external users or internal users?
    2. For all users or some specific users?
    If the issue happens to internal users, please configure the authentication in Outlook Security tab with Negotiate Authentication to have a try.
    Thanks,
    Winnie Liang
    TechNet Community Support

Maybe you are looking for