Win a copy of Getting started with Java on the Raspberry Pi this week in the Raspberry Pi forum!
  • Post Reply Bookmark Topic Watch Topic
  • New Topic
programming forums Java Mobile Certification Databases Caching Books Engineering Micro Controllers OS Languages Paradigms IDEs Build Tools Frameworks Application Servers Open Source This Site Careers Other Pie Elite all forums
this forum made possible by our volunteer staff, including ...
  • Campbell Ritchie
  • Ron McLeod
  • Paul Clapham
  • Tim Cooke
  • Jeanne Boyarsky
  • Rob Spoor
  • Devaka Cooray
  • Liutauras Vilda
Saloon Keepers:
  • Stephan van Hulst
  • Tim Holloway
  • Carey Brown
  • Tim Moores
  • Mikalai Zaikin
  • Piet Souris

Sharing jboss httpsession between https to http, how to enable shared httpsession between https/http

Posts: 1
  • Mark post as helpful
  • send pies
    Number of slices to send:
    Optional 'thank-you' note:
  • Quote
  • Report post to moderator

Hi I have successfully configured SSL with JBOSS 4.2.0 GA. and I can execute secure applications successfully, I have configured the application with acegi security framework.

I am getting problem while switching https page to http page in application.

I have enabled the the login page as secure page and am trying to redirect non secure page after successful login, but am getting following error while redirecting https page to http page.

[org.acegisecurity.ui.ExceptionTranslationFilter] Access is denied (user is anonymous); redirecting to authentication entry point
org.acegisecurity.AccessDeniedException: Access is denied
at org.acegisecurity.intercept.AbstractSecurityInterceptor.beforeInvocation(
at org.acegisecurity.intercept.web.FilterSecurityInterceptor.invoke(
at org.acegisecurity.intercept.web.FilterSecurityInterceptor.doFilter(
at org.acegisecurity.util.FilterChainProxy$VirtualFilterChain.doFilter(
at org.acegisecurity.ui.ExceptionTranslationFilter.doFilter(
at org.acegisecurity.util.FilterChainProxy$VirtualFilterChain.doFilter(
at org.acegisecurity.providers.anonymous.AnonymousProcessingFilter.doFilter(
at org.acegisecurity.util.FilterChainProxy$VirtualFilterChain.doFilter(
at org.acegisecurity.wrapper.SecurityContextHolderAwareRequestFilter.doFilter(
at org.acegisecurity.util.FilterChainProxy$VirtualFilterChain.doFilter(
at org.acegisecurity.securechannel.ChannelProcessingFilter.doFilter(
at org.acegisecurity.util.FilterChainProxy$VirtualFilterChain.doFilter(
at org.acegisecurity.ui.AbstractProcessingFilter.doFilter(
at org.acegisecurity.util.FilterChainProxy$VirtualFilterChain.doFilter(
at org.acegisecurity.context.HttpSessionContextIntegrationFilter.doFilter(
at org.acegisecurity.util.FilterChainProxy$VirtualFilterChain.doFilter(
at org.acegisecurity.util.FilterChainProxy.doFilter(
at org.acegisecurity.util.FilterToBeanProxy.doFilter(
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(
at org.apache.catalina.core.ApplicationFilterChain.doFilter(
at org.jboss.web.tomcat.filters.ReplyHeaderFilter.doFilter(
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(
at org.apache.catalina.core.ApplicationFilterChain.doFilter(
at org.apache.catalina.core.StandardWrapperValve.invoke(
at org.apache.catalina.core.StandardContextValve.invoke(
at org.apache.catalina.core.StandardHostValve.invoke(
at org.apache.catalina.valves.ErrorReportValve.invoke(
at org.jboss.web.tomcat.service.jca.CachedConnectionValve.invoke(
at org.apache.catalina.core.StandardEngineValve.invoke(
at org.apache.catalina.connector.CoyoteAdapter.service(
at org.apache.coyote.http11.Http11Processor.process(
at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(

Exact reason for above error message is that
JBoss is not sharing HttpSession information across https to http. so application was redirected to login page always.

Here I can't use secure page for main page since I am using JNLP in main page this is not supported in https due to some other error in java 1.5

Could any one have idea the configuration changes for sharing httpsession information between https, http.
It would give a normal human mental abilities to rival mine. To think it is just a tiny ad:
Low Tech Laboratory
    Bookmark Topic Watch Topic
  • New Topic