Acegi Configuration

[Maya Pillai]

Hi,

Can anyone help me to configure Acegi in my Spring / HIbernate / JSF application. The error i am getting is ' The requested resource (/Project/j_acegi_security_check.jsf) is not available'. Please find my code below.

ApplicationContext.xml

<?xml version="1.0" encoding="UTF-8"?>
<beans xmlns="http://www.springframework.org/schema/beans"
	xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
	xmlns:aop="http://www.springframework.org/schema/aop"
	xmlns:jee="http://www.springframework.org/schema/jee"
	xmlns:lang="http://www.springframework.org/schema/lang"
	xmlns:tx="http://www.springframework.org/schema/tx"
	xmlns:util="http://www.springframework.org/schema/util"
	xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-2.0.xsd
		http://www.springframework.org/schema/aop http://www.springframework.org/schema/aop/spring-aop-2.1.xsd
		http://www.springframework.org/schema/jee http://www.springframework.org/schema/jee/spring-jee-2.0.xsd
		http://www.springframework.org/schema/lang http://www.springframework.org/schema/lang/spring-lang-2.0.xsd
		http://www.springframework.org/schema/tx http://www.springframework.org/schema/tx/spring-tx-2.1.xsd
		http://www.springframework.org/schema/util http://www.springframework.org/schema/util/spring-util-2.0.xsd">

	<!-- pia-lab-begin(acegi-web) -->

	<bean id="filterChainProxy"
		class="org.acegisecurity.util.FilterChainProxy">
		<property name="filterInvocationDefinitionSource">
			<value>
				CONVERT_URL_TO_LOWERCASE_BEFORE_COMPARISON
				PATTERN_TYPE_APACHE_ANT 
				/error/*=#NONE#
				/back*=#NONE#
				/**=httpSessionContextIntegrationFilter,logoutFilter,authenticationProcessingFilter,securityContextHolderAwareRequestFilter,anonymousProcessingFilter,exceptionTranslationFilter,filterInvocationInterceptor
			</value>
		</property>
	</bean>


	<bean id="httpSessionContextIntegrationFilter"
		class="org.acegisecurity.context.HttpSessionContextIntegrationFilter" />

	<bean id="logoutFilter"
		class="org.acegisecurity.ui.logout.LogoutFilter">
		<constructor-arg value="/index.jsp" />
		<constructor-arg>
			<list>
				<bean
					class="org.acegisecurity.ui.logout.SecurityContextLogoutHandler" />
			</list>
		</constructor-arg>
		<property name="filterProcessesUrl">
			<value>/j_acegi_logout.jsp</value>
		</property>
	</bean>

	<bean id="authenticationProcessingFilter"
		class="org.acegisecurity.ui.webapp.AuthenticationProcessingFilter">

		<property name="filterProcessesUrl">
			<value>/j_acegi_security_check.xhtml</value>
		</property>
		<property name="authenticationFailureUrl">
			<value>/acegilogin.jsf</value>
		</property>
		<property name="defaultTargetUrl">
			<value>/hello.jsf</value>
		</property>
		<property name="authenticationManager">
			<ref bean="authenticationManager" />
		</property>
	</bean>

	<bean id="securityContextHolderAwareRequestFilter"
		class="org.acegisecurity.wrapper.SecurityContextHolderAwareRequestFilter" />

	<bean id="anonymousProcessingFilter"
		class="org.acegisecurity.providers.anonymous.AnonymousProcessingFilter">
		<property name="key" value="changeThis" />
		<property name="userAttribute"
			value="anonymousUser,ROLE_ANONYMOUS" />
	</bean>

	<bean id="exceptionTranslationFilter"
		class="org.acegisecurity.ui.ExceptionTranslationFilter">
		<property name="authenticationEntryPoint">
			<bean
				class="org.acegisecurity.ui.webapp.AuthenticationProcessingFilterEntryPoint">
				<property name="loginFormUrl" value="/acegilogin.jsf" />
				<property name="forceHttps" value="false" />
			</bean>
		</property>
		<property name="accessDeniedHandler">
			<bean
				class="org.acegisecurity.ui.AccessDeniedHandlerImpl">
				<property name="errorPage" value="/accessDenied.jsf" />
			</bean>
		</property>
	</bean>

	<bean id="filterInvocationInterceptor"
		class="org.acegisecurity.intercept.web.FilterSecurityInterceptor">
		<property name="authenticationManager"
			ref="authenticationManager" />
		<property name="accessDecisionManager"
			ref="accessDecisionManager" />
		<property name="objectDefinitionSource">
			<value>
				CONVERT_URL_TO_LOWERCASE_BEFORE_COMPARISON
				PATTERN_TYPE_APACHE_ANT
				/acegilogin.jsf=IS_AUTHENTICATED_ANONYMOUSLY
				/**=ROLE_ALLACCESS,ROLE_URLACCESS
			</value>
		</property>
	</bean>

	<!-- pia-lab-end -->

	

	<bean id="accessDecisionManager"
		class="org.acegisecurity.vote.AffirmativeBased">
		<property name="allowIfAllAbstainDecisions" value="false" />
		<property name="decisionVoters">
			<list>
				<bean class="org.acegisecurity.vote.RoleVoter" />
				<bean class="org.acegisecurity.vote.AuthenticatedVoter" />
			</list>
		</property>
	</bean>
	
	<bean id="authenticationManager"
		class="org.acegisecurity.providers.ProviderManager">
		<property name="providers">
			<list>
				<ref local="daoAuthenticationProvider" />
			</list>
		</property>
	</bean>

	<bean id="daoAuthenticationProvider"
		class="org.acegisecurity.providers.dao.DaoAuthenticationProvider">
		<property name="userDetailsService" ref="userDetailsService" />
	</bean>

	<bean id="userDetailsService"
		class="acegitest.UserDetailsServiceImpl">
		<constructor-arg ref="userRepository" />
	</bean>

	<bean id="userRepository" class="acegitest.UserDaoImpl">

	</bean>


	<bean id="shoppingService"
		class="acegitest.secure.ShoppingServiceImpl" />

	<bean id="attributes"
		class="org.acegisecurity.annotation.SecurityAnnotationAttributes" />

	<bean id="objectDefinitionSource"
		class="org.acegisecurity.intercept.method.MethodDefinitionAttributes">
		<property name="attributes">
			<ref local="attributes" />
		</property>
	</bean>


	<bean id="securityInterceptor"
		class="org.acegisecurity.intercept.method.aopalliance.MethodSecurityInterceptor">
		<property name="validateConfigAttributes">
			<value>false</value>
		</property>
		<property name="authenticationManager">
			<ref local="authenticationManager" />
		</property>
		<property name="accessDecisionManager">
			<ref local="accessDecisionManager" />
		</property>

		<property name="objectDefinitionSource">
			<ref local="objectDefinitionSource" />
		</property>
	</bean>
	<bean id="autoproxy"
		class="org.springframework.aop.framework.autoproxy.DefaultAdvisorAutoProxyCreator">
	</bean>
	<bean id="methodSecurityAdvisor"
		class="org.acegisecurity.intercept.method.aopalliance.MethodDefinitionSourceAdvisor"
		autowire="constructor">
	</bean>
</beans>

WEB.XML

<?xml version="1.0" encoding="UTF-8"?>
<web-app id="WebApp_ID" version="2.4"
	xmlns="http://java.sun.com/xml/ns/j2ee"
	xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
	xsi:schemaLocation="http://java.sun.com/xml/ns/j2ee http://java.sun.com/xml/ns/j2ee/web-app_2_4.xsd">

	<display-name>Acegi JSF App</display-name>

	<context-param>
		<param-name>javax.faces.STATE_SAVING_METHOD</param-name>
		<param-value>server</param-value>
	</context-param>
	<context-param>
		<param-name>contextConfigLocation</param-name>
		<param-value>/WEB-INF/applicationContext.xml</param-value>
	</context-param>
	<context-param>
		<param-name>
			org.apache.myfaces.CHECK_EXTENSIONS_FILTER
		</param-name>
		<param-value>false</param-value>
	</context-param>
	<context-param>
		<param-name>org.apache.myfaces.PRETTY_HTML</param-name>
		<param-value>false</param-value>
	</context-param>
	<context-param>
		<param-name>org.apache.myfaces.ALLOW_JAVASCRIPT</param-name>
		<param-value>true</param-value>
	</context-param>
	<context-param>
		<param-name>org.apache.myfaces.DETECT_JAVASCRIPT</param-name>
		<param-value>false</param-value>
	</context-param>
	<context-param>
		<param-name>
			org.apache.myfaces.COMPRESS_STATE_IN_SESSION
		</param-name>
		<param-value>false</param-value>
	</context-param>
	<context-param>
		<param-name>
			org.apache.myfaces.SERIALIZE_STATE_IN_SESSION
		</param-name>
		<param-value>false</param-value>
	</context-param>
	<context-param>
		<param-name>
			org.apache.myfaces.NUMBER_OF_VIEWS_IN_SESSION
		</param-name>
		<param-value>100</param-value>
	</context-param>
	<context-param>
		<param-name>org.apache.myfaces.ADD_RESOURCE_CLASS</param-name>
		<param-value>
			org.apache.myfaces.component.html.util.StreamingAddResource
		</param-value>
	</context-param>
	<context-param>
		<param-name>org.apache.myfaces.AUTO_SCROLL</param-name>
		<param-value>false</param-value>
	</context-param>
	<context-param>
		<param-name>org.apache.myfaces.validate</param-name>
		<param-value>true</param-value>
	</context-param>
	 <context-param>
    	<param-name>javax.faces.DEFAULT_SUFFIX</param-name>
    	<param-value>.xhtml</param-value>
    </context-param>
	<listener>
		<listener-class>
			org.springframework.web.context.ContextLoaderListener
		</listener-class>
	</listener>
	<servlet>
		<servlet-name>Faces Servlet</servlet-name>
		<servlet-class>javax.faces.webapp.FacesServlet</servlet-class>
		<load-on-startup>1</load-on-startup>
	</servlet>


	<servlet-mapping>
		<servlet-name>Faces Servlet</servlet-name>
		<url-pattern>*.jsf</url-pattern>
	</servlet-mapping>
	<servlet-mapping>
		<servlet-name>Faces Servlet</servlet-name>
		<url-pattern>/faces/*</url-pattern>
	</servlet-mapping>


	<filter>
		<filter-name>MyFacesExtensionsFilter</filter-name>
		<filter-class>
			org.apache.myfaces.webapp.filter.ExtensionsFilter
		</filter-class>
		<init-param>
			<param-name>maxFileSize</param-name>
			<param-value>20m</param-value>
		</init-param>
	</filter>

	<filter>
		<filter-name>Acegi Filter Chain Proxy</filter-name>
		<filter-class>
			org.acegisecurity.util.FilterToBeanProxy
		</filter-class>
		<init-param>
			<param-name>targetClass</param-name>
			<param-value>
				org.acegisecurity.util.FilterChainProxy
			</param-value>
		</init-param>
	</filter>

	<filter-mapping>
		<filter-name>Acegi Filter Chain Proxy</filter-name>
		<url-pattern>/*</url-pattern>
		<dispatcher>FORWARD</dispatcher>
		<dispatcher>REQUEST</dispatcher>
	</filter-mapping>

	<filter-mapping>
		<filter-name>MyFacesExtensionsFilter</filter-name>
		<url-pattern>*.jsf</url-pattern>
	</filter-mapping>
	<!-- extension mapping for adding <script/>, <link/>, and other resource tags to JSF-pages  -->


	<filter-mapping>
		<filter-name>MyFacesExtensionsFilter</filter-name>
		<!-- servlet-name must match the name of javax.faces.webapp.FacesServlet entry -->
		<servlet-name>Faces Servlet</servlet-name>
	</filter-mapping>

	<!-- extension mapping for serving page-independent resources (javascript, stylesheets, images, etc.)  -->
	<filter-mapping>
		<filter-name>MyFacesExtensionsFilter</filter-name>
		<url-pattern>/faces/*</url-pattern>
	</filter-mapping>

	<welcome-file-list>
		<welcome-file>index.html</welcome-file>
		<welcome-file>index.htm</welcome-file>
		<welcome-file>index.jsp</welcome-file>
		<welcome-file>default.html</welcome-file>
		<welcome-file>default.htm</welcome-file>
		<welcome-file>default.jsp</welcome-file>
	</welcome-file-list>

	<jsp-config>

	</jsp-config>

	<error-page>
		<exception-type>java.lang.Exception</exception-type>
		<location>/faces/error.jsp</location>
	</error-page>

	<session-config>
		<session-timeout>15</session-timeout>
	</session-config>



</web-app>

FACES-CONFIG.XML


<?xml version="1.0"?>

<!DOCTYPE faces-config PUBLIC
  "-//Sun Microsystems, Inc.//DTD JavaServer Faces Config 1.0//EN"
  "http://java.sun.com/dtd/web-facesconfig_1_0.dtd" >


<faces-config>


  	
	<application>
		<message-bundle>ValidationResources</message-bundle>
		<variable-resolver>
			org.springframework.web.jsf.DelegatingVariableResolver
		</variable-resolver>
		<locale-config>
			<default-locale>en_US</default-locale>
			<supported-locale>fr</supported-locale>
		</locale-config>
		 <view-handler>
	    	com.sun.facelets.FaceletViewHandler
	    </view-handler>
	</application>


	<managed-bean>
		<managed-bean-name>shoppingBacking</managed-bean-name>
		<managed-bean-class>acegitest.backing.ShoppingBacking</managed-bean-class>
		<managed-bean-scope>request</managed-bean-scope>
		<managed-property>
			<description>The shopping service</description>
			<display-name>shoppingService</display-name>
			<property-name>shoppingService</property-name>
			<value>#{shoppingService}</value>
		</managed-property>
	</managed-bean>
	
	<managed-bean>
		<managed-bean-name>loginBacking</managed-bean-name>
		<managed-bean-class>acegitest.backing.LoginBacking</managed-bean-class>
		<managed-bean-scope>request</managed-bean-scope>
	</managed-bean>
		

	<navigation-rule>
		<from-view-id>/hello.xhtml</from-view-id>
		<navigation-case>
			<from-outcome>success</from-outcome>
			<to-view-id>/page2.jsf</to-view-id>
		</navigation-case>
	</navigation-rule>
	

	<navigation-rule>
		<from-view-id>/page2.xhtml</from-view-id>
		<navigation-case>
			<from-outcome>back</from-outcome>
			<to-view-id>/hello.jsf</to-view-id>
		</navigation-case>
	</navigation-rule>
	
	<navigation-rule>
        <from-view-id>/acegilogin.xhtml</from-view-id>
        <navigation-case>
                <from-outcome>login</from-outcome>
                <to-view-id>/j_acegi_security_check.xhtml</to-view-id>
        </navigation-case>
	</navigation-rule>

<navigation-rule>
        <from-view-id>*</from-view-id>
        <navigation-case>
                <from-outcome>logout</from-outcome>
                <to-view-id>/j_acegi_logout.jsf</to-view-id>
        </navigation-case>
</navigation-rule>
	
	<navigation-rule>
        <from-view-id>*</from-view-id>
        <navigation-case>
                <from-outcome>accessDenied</from-outcome>
                <to-view-id>/accessDenied.xhtml</to-view-id>
        </navigation-case>
</navigation-rule>
	

</faces-config>

XHTML

<!DOCTYPE composition PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml"
	xmlns:s="http://jboss.com/products/seam/taglib"
	xmlns:ui="http://java.sun.com/jsf/facelets"
	xmlns:f="http://java.sun.com/jsf/core"
	xmlns:h="http://java.sun.com/jsf/html"
	xmlns:t="http://myfaces.apache.org/tomahawk"
	>
   <head>
<title>System Login</title>
</head>
<body>
<f:view>
	<h:form>
		<h:panelGrid columns="2">
			<h:outputLabel value="User Name" for="j_username" />
			<h:inputText id="j_username"
				value="#{loginBacking.userId}" size="40" maxlength="80"></h:inputText>
			<h:outputLabel value="Password" for="j_password" />
			<h:inputSecret id="j_password" 
				value="#{loginBacking.password}" size="40" maxlength="80"
				redisplay="true"></h:inputSecret>
		</h:panelGrid>
		<h:commandButton action="login" value="Login" />
		<h:messages id="messages" layout="table" globalOnly="true"
				showSummary="true" showDetail="false" />
	</h:form>
</f:view>
</body>
</html>

Thanks.

[Maya Pillai]

I am using spring2 and the following jar files for Acegi

acegi-security-1.0.5.jar
acegi-security-tiger-1.0.5.jar

[Chacko Chen]

How did you resolve the error?

Could you kindly share?

Thanks

[Radovan Vukovic]

I did not work with JSF but seams to me that mapping in web.xml are missing

<filter-mapping>
      <filter-name>Acegi Filter Chain Proxy</filter-name>
      <url-pattern>/j_acegi_security_check</url-pattern>
</filter-mapping>
<filter-mapping>
   <filter-name>Acegi Filter Chain Proxy</filter-name>
   <url-pattern>/j_acegi_logout</url-pattern>
</filter-mapping>

[Chacko Chen]

Thanks for the reply.


Is there any working sample application for acegi with ntlm?

[Radovan Vukovic]

Try this: http://www.ibm.com/developerworks/java/library/j-acegi1/index.html

[Chacko Chen]

Radovan, thanks again for the reply.

Article did not mention anything about ntlm, I am looking for working sample application for acegi with ntlm.

Thanks

[Mark Spritzler]

Why aren't you using the latest version of Spring Security. Acegi was the old name for Spring Security, so if you are using Acegi, you are using a much older version. Unless you had an app that was already using Acegi, it is much better to use a more up to date version.

Mark

[Chacko Chen]

I would like to use the new version, however still looking for a working sample application with ntlm authentication.

Thanks

[Chacko Chen]

I saw this blog regarding spring security and ntlm
http://blog.anorakgirl.co.uk/?p=68#comment-713

However I am not sure how do I start? Where to start? How do I pass my ntlm authenticated user to class which is mentioned in blog? Should I use a servlet or jsp to get ntlm user? etc etc.

Could someone provide some insight?

Thanks

[Mark Spritzler]

What is ntlm? I haven't heard of it before.

Mark

[Chacko Chen]

NTLM is NT LAN Manager in Windows. By this in servlets or JSP one could get logged in username. More information
http://en.wikipedia.org/wiki/NTLM

[Mark Spritzler]

Chako, so this now is a duplicate thread and an old thread that you resurrected. So I am going to close it and allow your other thread to be the one people respond to.

Thanks

Mark