JBossWeb losing POST data during FORM Authentication

[gs03ann]

Hi,

My post relates to https://jira.jboss.org/jira/browse/JBAS-5645
I request a secured URL via a form with a post. Something like this:

<form method="POST" action="userHome" name="userHomeForm">
<input type="hidden" name="mydata" value="MYDATA"/>
 <input type="submit" value="Enter Here"/>
</form>

This is the login.jsp. In JBoss 3 this works fine and I'm able to get to the "mydata" request parameter. However, in JBoss AS 5, this always comes null. In fact there are not request parameters at this time. But after the user is signed in, the request parameters are available.

<%
 String mydata = request.getParameter( "mydata" );
 out.println("<p>My Data: " + mydata + "</p>");
%>

 <form method="POST" action="j_security_check">
 <td><strong>User ID: </strong></div></td>
 <td><input type="text" name="j_username" /></td>
 <td><div align="right"><strong>Password:</strong></div></td>
 <td><input type="password" name="j_password"/></td>
 <td><input type="submit" name="Submit" value="Submit" /></td>
 </form>

The Jira above states that this is fixed, but my request parameters are not available from this page. When the user successfully signs in, the parameters are available. But not from this page.

I am using JBoss AS 5.0.1.GA. Does anyone know if this has really been fixed? I really need to move from JBoss 3 to JBoss 5

Thanks

[gs03ann]

We've figured out that it is probably not JBoss AS 5. We are fronting JBoss AS with Apache. Perhaps, it has to do with the way mod_jk works.

[gs03ann]

I take that back. The problem IS STILL there, and it has nothing to do with Apache. It has to do when submitting a form with POST. Any ideas how to fix this problem??

[cgw]

I'm having the same problem, I realize this submission is very old but I'm looking for some help.

I have a very simple implementation on Apache and JBoss.

We're using DoD CAC credentialing and formulating a username/password with Python to send credentials from Apache to JBoss.

Works GREAT! ... however there are a few discrete users that actually lose their POST data before our Java code kicks in.  In the doPOST(...) routine we put in a System.out just to see the request and it was null.

tcpdump on localhost shows the post data going to JBoss but when our doPOST kicks in nothing is there.

Any thoughts?