simple login page (HELP!)

[DeAlton Jones]

Hi everyone!,

I am working on a simple login faces page that if the j_username and the j_password are correct navigate to a success page if not navigate to a failed page. I am using an LDAP to validate.

  public String dobtnLogin(){
String retVal = null;
String j_username = getJ_username().getLocalValue().toString();
String j_password = getJ_password().getLocalValue().toString();
URL jSecurityCheckURL = null;
HttpURLConnection jSecurityCheckURLConnection = null;
 
ExternalContext externalContext = FacesContext.getCurrentInstance().getExternalContext();
String jsessionid = ((HttpSession)externalContext.getSession(false)).getId();
System.out.println("uwername = "+ j_username);
System.out.println("password = "+ j_password);
System.out.println("Current jsessionid=" + jsessionid);
System.out.println("Submitting login details (userId: " + j_username + " & password: " + j_password + ") to /j_security_check!");
 

try {
jSecurityCheckURL = new URL("http://localhost:9080/myStuff/j_security_check;jsessionid=0000" + jsessionid + ":-1&j_username=" + j_username + "&j_password=" + j_password);
jSecurityCheckURLConnection = (HttpURLConnection)jSecurityCheckURL.openConnection();
jSecurityCheckURLConnection.setRequestMethod("POST");
jSecurityCheckURLConnection.setInstanceFollowRedirects(false);
jSecurityCheckURLConnection.connect();
System.out.println("j_security_check returned: " + jSecurityCheckURLConnection.getResponseCode()); 
//  System.out.println("Current jsessionid=" + jsessionid);
 
if (null != externalContext) { 

String remoteUser = externalContext.getRemoteUser();
System.out.println("Authenticated username1: " + remoteUser);
HttpServletRequest httpServletRequest = (HttpServletRequest)externalContext.getRequest();
System.out.println("httpSErvlet: " + httpServletRequest);
Principal principal = httpServletRequest.getUserPrincipal();
if (null != principal) {
    retVal="loggedin";
    String userName = principal.getName();
    System.out.println("Authenticated username2: " + userName);
  } 
  else {
  System.out.println("Else retVal is notloggedin: " );
  retVal="notLoggedin";  
  }
 
} else {
    System.out.println("Unable to obtain Faces ExternalContext and hence the remote user details.");
}
}
catch (MalformedURLException ex) {
System.out.println("You are in the Catch");
System.out.println(ex);
jSecurityCheckURL = null;
jSecurityCheckURLConnection = null;
retVal = "notLoggedin";
}
catch (IOException ex) {
System.out.println("You are in the IO Catch");
System.out.println(ex);
jSecurityCheckURL = null;
jSecurityCheckURLConnection = null;
retVal = "notLoggedin";
}
return retVal;  

This code is pretty generic and a lot of people have had success with it. any and all help would be appreciated.

thanks

[DeAlton Jones]

more information

I get a the following for my sysouts
I am getting my session id
What is the return code 302, shouldn't it be 200
authenticated username is null. why?

  O uwername = ccAdmin
[11/1/06 14:09:15:234 EST] 0000003f SystemOut     O password = test
[11/1/06 14:09:15:234 EST] 0000003f SystemOut     O uwername = ccAdmin
[11/1/06 14:09:15:234 EST] 0000003f SystemOut     O password = test
[11/1/06 14:09:15:234 EST] 0000003f SystemOut     O Current jsessionid=wRjXGNlfi5hdmlUfVGAYfYw
[11/1/06 14:09:15:234 EST] 0000003f SystemOut     O Submitting login details (userId: ccAdmin & password: test) to /j_security_check!
[11/1/06 14:09:15:297 EST] 0000003f SystemOut     O j_security_check returned: 302
[11/1/06 14:09:15:297 EST] 0000003f SystemOut     O Authenticated username1: null
[11/1/06 14:09:15:297 EST] 0000003f SystemOut     O httpSErvlet: com.ibm.faces.context.MultipartExternalContextImpl$MultiPartServletRequestWrapper@fdb3d1
[11/1/06 14:09:15:297 EST] 0000003f SystemOut     O Else retVal is notloggedin:    

[Ulf Dittmer]

In a URL, the parameters start with a "?", so instead of "&j_username=" it should be "?j_username=".