No AuthenticationEntryPoint could be established

[Mat Anthony]

Hi All,
every time I deploy my application war, the following error appears:-

Internal error raised tyring to instantiate web-application: SportsDemo defined in web site OC4J 10g (10.1.3) Default Web Site. Configuration problem: No AuthenticationEntryPoint could be established. Please make sure you have a login mechanism configured through the namespace (such as form-login) or specify a custom AuthenticationEntryPoint with the 'entry-point-ref' attribute

My applicationContext_security.xml file contains the following:-

<?xml version="1.0" encoding="UTF-8"?> <beans xmlns="http://www.springframework.org/schema/beans" xmlns:sec="http://www.springframework.org/schema/security" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:context="http://www.springframework.org/schema/context" xmlns:jee="http://www.springframework.org/schema/jee" xmlns:p="http://www.springframework.org/schema/p" xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-3.0.xsd http://www.springframework.org/schema/context http://www.springframework.org/schema/context/spring-context-3.0.xsd http://www.springframework.org/schema/jee http://www.springframework.org/schema/jee/spring-jee-3.0.xsd http://www.springframework.org/schema/security http://www.springframework.org/schema/security/spring-security-3.1.xsd"> <sec:debug /> <!-- We must now tell Spring to use our accessDecisionManager bean, instead of creating the default --> <sec:global-method-security access-decision-manager-ref="accessDecisionManager" secured-annotations="enabled" jsr250-annotations="enabled"/> <sec:http auto-config="true" access-denied-page="/accessDenied.xhtml"> <sec:intercept-url pattern="/faces/admin/**" access="PERM_SPORT_1" /> <sec:intercept-url pattern="/**" access="IS_AUTHENTICATED_ANONYMOUSLY" /> <sec:form-login login-processing-url="/j_spring_security_check" login-page="/faces/login.xhtml" default-target-url="/" authentication-failure-url="/faces/login.xhtml" /> <sec:logout logout-url="/j_spring_security_logout" logout-success-url="/"/> </sec:http> <sec:authentication-manager alias="authenticationManager"> <sec:authentication-provider user-service-ref="userDetailsService" /> </sec:authentication-manager> <bean id="authenticatedVoter" class="org.springframework.security.access.vote.AuthenticatedVoter" /> <bean id="roleVoter" class="org.springframework.security.access.vote.RoleVoter "> <property name="rolePrefix" value="" /> </bean> <bean id="accessDecisionManager" class="org.springframework.security.access.vote.AffirmativeBased"> <property name="decisionVoters"> <list> <ref bean="roleVoter" /> <ref bean="authenticatedVoter" /> </list> </property> </bean> <sec:http access-decision-manager-ref="accessDecisionManager" /> </beans>

Has anbody seen this error before and how to resolve it

Mat

[Mat Anthony]

Hi All,
I have updated applicationContext_security.xml to contain an entry-point-ref
<sec:http auto-config="false" entry-point-ref="myAuthenticationEntryPoint"> <sec:intercept-url pattern="/faces/admin/**" access="PERM_SPORT_1" /> <sec:intercept-url pattern="/**" access="IS_AUTHENTICATED_ANONYMOUSLY" /> <sec:logout logout-url="/j_spring_security_logout" logout-success-url="/"/> </sec:http> <bean id="myAuthenticationEntryPoint" class="org.demo.security.CustomAuthenticationEntryPoint"> <property name="loginFormUrl" value="/login.xhtml"/> </bean>

But I still keep getting the following error:-

Configuration problem: No AuthenticationEntryPoint could be established. Please make sure you have a login mechanism configured through the namespace (such as form-login) or specify a custom AuthenticationEntryPoint with the 'entry-point-ref' attribute

I'm new to spring 3 security, has anybody seen this problem before.

Mat

[Mat Anthony]

Ok I solved this problem with the following:-
<?xml version="1.0" encoding="UTF-8"?> <beans xmlns="http://www.springframework.org/schema/beans" xmlns:sec="http://www.springframework.org/schema/security" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:context="http://www.springframework.org/schema/context" xmlns:jee="http://www.springframework.org/schema/jee" xmlns:p="http://www.springframework.org/schema/p" xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-3.0.xsd http://www.springframework.org/schema/context http://www.springframework.org/schema/context/spring-context-3.0.xsd http://www.springframework.org/schema/jee http://www.springframework.org/schema/jee/spring-jee-3.0.xsd http://www.springframework.org/schema/security http://www.springframework.org/schema/security/spring-security-3.1.xsd"> <sec:debug /> <sec:global-method-security access-decision-manager-ref="accessDecisionManager" secured-annotations="enabled" jsr250-annotations="enabled"/> <sec:http use-expressions="true" access-denied-page="/accessDenied.xhtml" > <sec:intercept-url pattern="/faces/admin/**" access="PERM_SPORT_1" /> <sec:form-login login-processing-url="/j_spring_security_check" login-page="/faces/login.xhtml" default-target-url="/" authentication-failure-url="/faces/login.xhtml" /> <sec:logout logout-url="/j_spring_security_logout" logout-success-url="/"/> </sec:http> <!-- Note ref the userDetailsService that contains the code that sets's up the users roles, I think you can also do authentication here as well --> <sec:authentication-manager alias="authenticationManager"> <sec:authentication-provider user-service-ref="userDetailsService" /> </sec:authentication-manager> <bean id="authenticatedVoter" class="org.springframework.security.access.vote.AuthenticatedVoter" /> <bean id="roleVoter" class="org.springframework.security.access.vote.RoleVoter "> <property name="rolePrefix" value="" /> </bean> <bean id="accessDecisionManager" class="org.springframework.security.access.vote.AffirmativeBased"> <property name="decisionVoters"> <list> <ref bean="roleVoter" /> <ref bean="authenticatedVoter" /> </list> </property> </bean> </beans>

Mat

[Vyas Sanzgiri]

So what was wrong?