Hi Josef,

Thanks for your reply.

I was above to write on this topic, as you said I did some more study on JBoss code and found out the same.

Found this code:

SingleSignOn ssoValve = element.hasDefined("cache-container")  ? new ClusteredSingleSignOn((SSOClusterManager)this.ssoManager.getValue())  : new SingleSignOn();

so I have configured cache-container="web", hence could see ClusteredSingleSignOn class traces in server.log.

I'm trying to call one web service from another web service, which is running in different server instance of a cluster.

But as you know, WS is invoked by http URL, which is again intercepted by picketlink valve.

Since the web service call is in the backend [ one server instanace to another server instance of cluster] the authentication is failing.

I log message of clusteredsinglesignon class says, that there is not SSO cookie available in the request.

I'm just invoking the http url using spring rest temlpate.

So i tried to set cookie manually by getting the HttpServletResquest object and getting cookie from the browser request, then set it with the rest template request. It seems working. But not completly

Pasting code snippet:

Cookie[] cookies = request.getCookies();

            Cookie cookie = null;

            String SINGLE_SIGN_ON_COOKIE = System.getProperty("org.apache.catalina.authenticator.Constants.JSESSIONIDSSO", "JSESSIONIDSSO");

            HttpHeaders requestHeaders = new HttpHeaders();

            for (int i = 0; i < cookies.length; i++) {

                System.out.println("SINGLE_SIGN_ON_COOKIE:"+SINGLE_SIGN_ON_COOKIE);

                System.out.println("cookie name:"+cookies[i].getName());

                  if (SINGLE_SIGN_ON_COOKIE.equals(cookies[i].getName())) {

                    cookie = cookies[i];

                    requestHeaders.add("Cookie", "JSESSIONIDSSO=" + cookie.getValue());

                    break;

                  }

                }

            if(cookie!=null){

            System.out.println("getValue:" + cookie.getValue() + "getPath:"

                    + cookie.getPath() +"getDomain:"+ cookie.getDomain()

                    + "getName:"+ cookie.getName());

            }

            HttpEntity requestEntity = new HttpEntity(null, requestHeaders);

            ResponseEntity rssResponse = restTemplate.exchange(

                    "http://node2.COMPANY.com:8080/sales-post2/services/test/" + id,

                    HttpMethod.GET, requestEntity, Employee.class);

            System.out.println("rssResponse:" + rssResponse);

            e = (Employee) rssResponse.getBody();

            System.out.println(e);

Okay, my question is should I do so much to make the WS rest calls to work? will JBoss take care of session/cookies ?

I'm sorry for such a long message.

With Regards,

Vijay