1 Reply Latest reply on Oct 8, 2003 4:04 AM by Jochen Cordes

    Tomcat vs Jetty

    jimbrady Newbie

      Hi,
      I have been trying to add security to my web application using the tagish NT login module. It works perfectly under jboss-3.2.2RC2_jetty-4.2.11 but not with jboss-3.2.2RC1_tomcat-4.1.24.
      Under tomcat I get the login popup but it always rejects the credentials. Nothing appears in the Server log so I don't even know if the login module is being invoked. As far as I know all the setup is identical (the ear file and login-config.xml certainly are identical).
      Can anybody help? I would prefer to use Tomcat because I am using Sitemesh and it doesn't work currently for straight HTML under Jetty (but does under Tomcat). With Jetty there is at least a lousy workaround (rename all the HTML to JSP).
      Jim Brady

        • 1. Re: Tomcat vs Jetty
          Jochen Cordes Novice

          Hi all !

          Anybody got a solution to this ??? I'm experiencing the same problems for a long time now. After checking jmx-console I always see that my security-domain is not registered under java:/jaas when using tomcat (with jetty everythings ok). I've added a log-category to log4j.xml, e.g.





          the relevant output is (at least that's what I think ;-))

          2003-10-08 11:20:11,302 DEBUG [org.jboss.web.tomcat.tc4.EmbeddedTomcatService] L
          inking security/securityMgr to JNDI name: java:/jaas/CatalogDomain
          2003-10-08 11:20:11,302 DEBUG [org.jboss.web.tomcat.tc4.EmbeddedTomcatService] A
          bstractWebContainer.parseWebAppDescriptors, End
          2003-10-08 11:20:16,670 INFO [org.jboss.web.localhost.Engine] ContextConfig[/my
          shop]: Added certificates -> request attribute Valve
          2003-10-08 11:20:16,680 INFO [org.jboss.web.localhost.Engine] ContextConfig[/my
          shop]: Configured an authenticator for method FORM
          2003-10-08 11:20:16,680 DEBUG [org.jboss.web.tomcat.tc4.EmbeddedTomcatService] C
          ontext.lifecycleEvent, event=org.apache.catalina.LifecycleEvent[source=StandardE
          ngine[MainEngine].StandardHost[localhost].StandardContext[/myshop]]
          2003-10-08 11:20:16,780 WARN [org.jboss.web.tomcat.tc4.EmbeddedTomcatService] U
          nable to invoke setDelegate on class loader:org.jboss.web.tomcat.tc4.WebCtxLoade
          r$ENCLoader@1879b
          2003-10-08 11:20:16,780 INFO [org.jboss.web.localhost.Engine] StandardManager[/
          myshop]: Seeding random number generator class java.security.SecureRandom
          2003-10-08 11:20:16,780 INFO [org.jboss.web.localhost.Engine] StandardManager[/
          myshop]: Seeding of random number generator has been completed

          The last version I was able to get form-based authentication up and running was jboss-3.0.4-tomcat-4.0.6 (quite a while ago). Still no luck until currently used version jboss-3.2.2RC4. Maybe there's somebody out there, who can help, otherwise I'm stucked with jetty (not the worst choice ;-)).

          TIA,

          Jochen