form based login & oracle9i
tool Aug 19, 2002 3:55 PMHi,
I am using FORM based login with JBoss 3.0.0_Tomcat-4.0.3
my login page calls j_security_check with j_username and j_password. my web.xml looks like this:
<login-config>
 <auth-method>FORM</auth-method>
 <realm-name>JBIDomain</realm-name>
 <form-login-config>
 <form-login-page>/logon.jsp</form-login-page>
 <form-error-page>/loginFailed.html</form-error-page>
 </form-login-config>
 </login-config>
and my jboss.xml is this:
 <security-domain>java:/jaas/JBIDomain</security-domain>
 <enterprise-beans>
 <ejb-name>jaasSession</ejb-name>
 <jndi-name>JBIDomain/jaasSession</jndi-name>
my login-config.xml is:
<application-policy name="JBIDomain">
 <login-module code="org.jboss.security.auth.spi.DatabaseServerLoginModule" flag="required">
 <module-option name="dsJndiName">java:/jaasDS</module-option>
 <module-option name="principalsQuery">SELECT Password FROM Principals WHERE PrincipalID=?</module-option>
 <module-option name="rolesQuery">SELECT Role, RoleGroup FROM Roles WHERE PrincipalID=?</module-option>
 <module-option name="hashAlgorithm">MD5</module-option>
 <module-option name="managedConnectionFactoryName">jboss.jca:service=LocalTxCM,name=jaasDS</module-option>
 </login-module>
 </application-policy>
which i think matches the oracle-service.xml i made:
 <application-policy name = "JBIDomain">
 <login-module code = "org.jboss.security.auth.spi.DatabaseServerLoginModule" flag = "required">
 <module-option name = "dsJnidiName">java:/jaasDS</module-option>
 <module-option name = "principalsQuery">SELECT Password FROM Prncipals WHERE PrincipalID=?</module-option>
 <module-option name = "rolesQuery">SELECT Role, RoleGroup FROM Roles WHERE PrincipalID=?</module-option>
 <module-option name = "hashAlgorithm">MD5</module-option>
 <module-option name = "managedConnectionFactoryName">jboss.jca:service=LocalTxCM,name=jaasDS</module-option>
 </login-module>
 </application-policy>
 JBIDomain
 <depends optional-attribute-name="ManagedConnectionFactoryName">
 <!--embedded mbean-->
 jaasDS
 <config-property name="ConnectionURL" type="java.lang.String">jdbc:oracle:thin:@192.5.148.81:1521:jbix0</config-property>
 <config-property name="DriverClass" type="java.lang.String">oracle.jdbc.driver.OracleDriver</config-property>
 <!--set these only if you want only default logins, not through JAAS -->
 <config-property name="UserName" type="java.lang.String">jbi_auth</config-property>
 <config-property name="Password" type="java.lang.String">jbi_auth</config-property>
<!--Below here are advanced properties -->
 <!--hack-->
 <depends optional-attribute-name="OldRarDeployment">jboss.jca:service=RARDeployment,name=JBoss LocalTransaction JDBC Wrapper
 <depends optional-attribute-name="ManagedConnectionPool">
 <!--embedded mbean-->
 0
 50
 5000
 15
 ByContainer
 <depends optional-attribute-name="CachedConnectionManager">jboss.jca:service=CachedConnectionManager
 <depends optional-attribute-name="JaasSecurityManagerService">jboss.security:name=JaasSecurityManager
 java:/TransactionManager
 <!--make the rar deploy! hack till better deployment-->
 jboss.jca:service=RARDeployer
But when I deploy the app and attempt to login using the login page, i always get forwarded to the loginError page. Nothing is printed out on the JBoss server at all, I just get forwarded to the loginError page.
Any thoughts or ideas would be really helpful.
Thanks,
brian