authenticates but role is not checked

[ktkarhu]

Get pretty interesting behavior with form based login:
1. try to access secured area (servlet based WAP app)
2. system redirects to the login page
3. but, after filling in credentials
4. system _always_ throws me to the login_error page

No matter if I enter wrong or correct password. Interesting thing is that in case of correct password no authentication/authorization failure is logged. Log shows that user is authenticated, but it looks like the role is never checked, see below.

Environment is as follows: JBoss + jetty 3.0.2, solid flow engine 3.

Have already spent numerous days on this. Hope that somebody can help. My configuration files (following the book and examples from this forum) can be found attached.

Thanks,

Kimmo

-----

2002-09-13 12:00:22,396 INFO [org.jboss.system.server.Server] JBoss (MX MicroKernel) [3.0.2 Date:200208271339] Started in 0m:26s:611ms
2002-09-13 12:00:42,336 DEBUG [org.jboss.jetty.security.JBossUserRealm#SolidDbRealm] JBossUserPrincipal: demo2
2002-09-13 12:00:42,366 DEBUG [org.jboss.jetty.security.JBossUserRealm#SolidDbRealm] created JBossUserRealm::JBossUserPrincipal: demo2
2002-09-13 12:00:42,366 DEBUG [org.jboss.jetty.security.JBossUserRealm#SolidDbRealm] authenticating: Name:demo2 Password:****
2002-09-13 12:00:42,447 DEBUG [org.jboss.resource.connectionmanager.IdleRemover] internalRegisterPool: registering pool with interval 900000 old interval: 9223372036854775807
2002-09-13 12:00:42,447 DEBUG [org.jboss.resource.connectionmanager.IdleRemover] internalRegisterPool: about to notify thread: old next: 1031908092447, new next: 1031908092447
2002-09-13 12:00:42,447 DEBUG [org.jboss.resource.adapter.jdbc.local.LocalManagedConnectionFactory] Using properties: {}
2002-09-13 12:00:42,447 DEBUG [org.jboss.resource.adapter.jdbc.local.LocalManagedConnectionFactory] Checking driver for URL: jdbc:solid://localhost:40020/root/ruutti
2002-09-13 12:00:42,447 DEBUG [org.jboss.resource.adapter.jdbc.local.LocalManagedConnectionFactory] Driver already registered for url: jdbc:solid://localhost:40020/root/ruutti
2002-09-13 12:00:42,587 DEBUG [org.jboss.jetty.security.JBossUserRealm#SolidDbRealm] authenticated: demo2
2002-09-13 12:00:42,587 DEBUG [org.jboss.jetty.security.JBossUserRealm#SolidDbRealm] setting JAAS subjectAttributeName(j_subject) : Subject:
Principal: demo2
Principal: Roles

[ktkarhu]

ups. forgot the attachment.

Kimmo

[ktkarhu]

Finally solved the problem. It was the WAP simulator that somehow caused this behavior. After deploying the stuff to the public server, tried with real phone and it worked.

If somebody is struggling with WAP, attached war file might help (deploy it to JBoss, access http://yourhost:8080/jaas_wml/restricted/index.wml, type in userid1 and passwd1)

Kimmo