2 Replies Latest reply on Sep 19, 2002 3:48 AM by Kimmo Karhu

    authenticates but role is not checked

    Kimmo Karhu Newbie

      Get pretty interesting behavior with form based login:
      1. try to access secured area (servlet based WAP app)
      2. system redirects to the login page
      3. but, after filling in credentials
      4. system _always_ throws me to the login_error page

      No matter if I enter wrong or correct password. Interesting thing is that in case of correct password no authentication/authorization failure is logged. Log shows that user is authenticated, but it looks like the role is never checked, see below.

      Environment is as follows: JBoss + jetty 3.0.2, solid flow engine 3.

      Have already spent numerous days on this. Hope that somebody can help. My configuration files (following the book and examples from this forum) can be found attached.




      2002-09-13 12:00:22,396 INFO [org.jboss.system.server.Server] JBoss (MX MicroKernel) [3.0.2 Date:200208271339] Started in 0m:26s:611ms
      2002-09-13 12:00:42,336 DEBUG [org.jboss.jetty.security.JBossUserRealm#SolidDbRealm] JBossUserPrincipal: demo2
      2002-09-13 12:00:42,366 DEBUG [org.jboss.jetty.security.JBossUserRealm#SolidDbRealm] created JBossUserRealm::JBossUserPrincipal: demo2
      2002-09-13 12:00:42,366 DEBUG [org.jboss.jetty.security.JBossUserRealm#SolidDbRealm] authenticating: Name:demo2 Password:****
      2002-09-13 12:00:42,447 DEBUG [org.jboss.resource.connectionmanager.IdleRemover] internalRegisterPool: registering pool with interval 900000 old interval: 9223372036854775807
      2002-09-13 12:00:42,447 DEBUG [org.jboss.resource.connectionmanager.IdleRemover] internalRegisterPool: about to notify thread: old next: 1031908092447, new next: 1031908092447
      2002-09-13 12:00:42,447 DEBUG [org.jboss.resource.adapter.jdbc.local.LocalManagedConnectionFactory] Using properties: {}
      2002-09-13 12:00:42,447 DEBUG [org.jboss.resource.adapter.jdbc.local.LocalManagedConnectionFactory] Checking driver for URL: jdbc:solid://localhost:40020/root/ruutti
      2002-09-13 12:00:42,447 DEBUG [org.jboss.resource.adapter.jdbc.local.LocalManagedConnectionFactory] Driver already registered for url: jdbc:solid://localhost:40020/root/ruutti
      2002-09-13 12:00:42,587 DEBUG [org.jboss.jetty.security.JBossUserRealm#SolidDbRealm] authenticated: demo2
      2002-09-13 12:00:42,587 DEBUG [org.jboss.jetty.security.JBossUserRealm#SolidDbRealm] setting JAAS subjectAttributeName(j_subject) : Subject:
      Principal: demo2
      Principal: Roles