I'm trying to get my custom login module to work without success all this weekend and it's getting ridiculous now. I've got the whole thing set up as near as perfect as I can tell. I'm following the docs as best I can, but I'm extending AbstractServerLoginModule which I haven't found an example for. JBossSx calls my LoginModule's initialize and login methods OK, and I follow the instructions to make JBoss realize the login succeeded, but no joy. Can anybody out there tell me: does AbstractServerLoginModule require any special module-option settings in the login-config.xml? what class should I implement Principal with? (It's abstract, but JAAS requires it) must it be a different class for the user identity and the roles? how can I switch on the logging for AbstractServerLoginModule in my log4j.xml settings? The straight org.jboss.security.auth.spi.AbstractServerLoginModule name doesn't work. Thanks! Adam
I have seen things you people would not believe, attack ships on fire off the shoulder of Orion, c-beams sparkling in the dark near the Tennhauser Gate. All these moments will be lost in time, like tears in the rain.
Joined: Oct 09, 2001
Got the logging working after removing a stupid config mistake in my log4j.xml. Got the login to succeed, but somehow the roles are not functioning, since my protected page is giving me a 403 access denied error. Hmmm. Some sort of jboss-tomcat misconfiguration I suppose.
I would call myself a guru either, but I have posted snippets of important information when I was dealing with a simular problem They are at Problems with FORM Authentication. Hopefully, between the 2 sites you will be able to solve your problem.
I too need a JAAS/JBoss guru's attention. I am trying to do simple form-based authentication using an Oracle database. I am using JBoss 3.2.3. Details of what I have done so far are in the following post: http://www.coderanch.com/t/88863/JBoss/Simple-form-based-authentication-JAAS I have followed the example in the JAAS HOW-TO, as well as what is contained in Griffing's posting (my setup is even simpler) -- still no joy. The log4j.xml entry didn't help me a bit (and where can I find the log with the trace messages ?), and I have done everything else (I think) to make this work. I am gettting no exceptions, just a failed login and then a redirection to my login error page. I will certainly be grateful to anyone who can help me with this !
Joined: Sep 12, 2003
The bug has been found -- see the above referenced posting for details.