You are viewing a plain text version of this content. The canonical link for it is here.
Posted to jetspeed-user@portals.apache.org by cherry coke <rs...@hotmail.com> on 2007/10/25 13:05:17 UTC

Authentication in jetspeed - custom login module

I want to authenticate using a custom login module (JAAS). I know that i have to implement the class LoginModule,
but I don´t know what I have to do with the login.conf file and how to specify in security-providers.xml where
to find the classes o the config file.
Thanks.

_________________________________________________________________
Express yourself instantly with MSN Messenger! Download today it's FREE!
http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/

Re: Authentication in jetspeed - custom login module

Posted by David Sean Taylor <da...@bluesunrise.com>.
On Oct 26, 2007, at 1:53 AM, cherry coke wrote:

> Thank you for the response, but I still have a problem with the  
> custom login module.
> I have made a jar file, wich contains the implementation of  
> LoginModule
> (SampleLoginModule implements LoginModule), and put it in jetspeed/ 
> WEB-INF/lib.
> Then I have changed the file login.conf file (from jetspeed- 
> security-2.1.jar) with the following content:
>
> Jetspeed {   test.jaas_sample.module.SampleLoginModule required  
> debug=true;};
>
> Then when I try to identify a user (login and password) I get this  
> error:
>
> java.lang.SecurityException: Can´t find an init session configuration
>
>
> 26-oct-2007 9:29:37 org.apache.catalina.realm.JAASRealm  
> authenticateGRAVE: Error inesperadojava.lang.SecurityException: No  
> se puede localizar una configuracion de inicio de sesion        at  
> com.sun.security.auth.login.ConfigFile.<init>(ConfigFile.java: 
> 97)        at

I believe this says the configuration file could not be found.



---------------------------------------------------------------------
To unsubscribe, e-mail: jetspeed-user-unsubscribe@portals.apache.org
For additional commands, e-mail: jetspeed-user-help@portals.apache.org


RE: Authentication in jetspeed - custom login module

Posted by cherry coke <rs...@hotmail.com>.
Thank you for the response, but I still have a problem with the custom login module.
I have made a jar file, wich contains the implementation of LoginModule
(SampleLoginModule implements LoginModule), and put it in jetspeed/WEB-INF/lib. 
Then I have changed the file login.conf file (from jetspeed-security-2.1.jar) with the following content:

Jetspeed {   test.jaas_sample.module.SampleLoginModule required debug=true;};

Then when I try to identify a user (login and password) I get this error:

java.lang.SecurityException: Can´t find an init session configuration


26-oct-2007 9:29:37 org.apache.catalina.realm.JAASRealm authenticateGRAVE: Error inesperadojava.lang.SecurityException: No se puede localizar una configuracion de inicio de sesion        at com.sun.security.auth.login.ConfigFile.<init>(ConfigFile.java:97)        at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)        at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:39)        at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:27)        at java.lang.reflect.Constructor.newInstance(Constructor.java:494)        at java.lang.Class.newInstance0(Class.java:350)        at java.lang.Class.newInstance(Class.java:303)        at javax.security.auth.login.Configuration$3.run(Configuration.java:216)        at java.security.AccessController.doPrivileged(Native Method)        at javax.security.auth.login.Configuration.getConfiguration(Configuration.java:210)        at javax.security.auth.login.LoginContext$1.run(LoginContext.java:237)        at java.security.AccessController.doPrivileged(Native Method)        at javax.security.auth.login.LoginContext.init(LoginContext.java:234)        at javax.security.auth.login.LoginContext.<init>(LoginContext.java:403)        at org.apache.catalina.realm.JAASRealm.authenticate(JAASRealm.java:347)        at org.apache.catalina.authenticator.FormAuthenticator.authenticate(FormAuthenticator.java:257)        at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:416)        at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:126)        at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:105)        at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:107)        at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:148)        at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:869)        at org.apache.coyote.http11.Http11BaseProtocol$Http11ConnectionHandler.processConnection(Http11BaseProtocol.java:664)        at org.apache.tomcat.util.net.PoolTcpEndpoint.processSocket(PoolTcpEndpoint.java:527)        at org.apache.tomcat.util.net.LeaderFollowerWorkerThread.runIt(LeaderFollowerWorkerThread.java:80)        at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:684)        at java.lang.Thread.run(Thread.java:595)Caused by: java.io.IOException: No se puede localizar una configuraci¾n de inicio de sesi¾n        at com.sun.security.auth.login.ConfigFile.init(ConfigFile.java:206)        at com.sun.security.auth.login.ConfigFile.<init>(ConfigFile.java:95)        ... 26 more


Please, can anybody tell me what I'm doing wrong.

Thanks.


> From: david@bluesunrise.com
> Subject: Re: Authentication in jetspeed - custom login module
> Date: Thu, 25 Oct 2007 11:01:46 -0700
> To: jetspeed-user@portals.apache.org
> 
> 
> On Oct 25, 2007, at 4:05 AM, cherry coke wrote:
> 
> > I want to authenticate using a custom login module (JAAS). I know  
> > that i have to implement the class LoginModule,
> > but I don´t know what I have to do with the login.conf file and how  
> > to specify in security-providers.xml where
> > to find the classes o the config file.
> > Thanks.
> >
> You can turn off the Jetspeed login module and use your own. We  
> simply copy in the login.conf into WEB-INF/lib/jetspeed-security- 
> XXX.jar and Java picks it up from there
> 
> 
> 
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: jetspeed-user-unsubscribe@portals.apache.org
> For additional commands, e-mail: jetspeed-user-help@portals.apache.org
> 

_________________________________________________________________
Express yourself instantly with MSN Messenger! Download today it's FREE!
http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/

Re: Authentication in jetspeed - custom login module

Posted by David Sean Taylor <da...@bluesunrise.com>.
On Oct 25, 2007, at 4:05 AM, cherry coke wrote:

> I want to authenticate using a custom login module (JAAS). I know  
> that i have to implement the class LoginModule,
> but I don´t know what I have to do with the login.conf file and how  
> to specify in security-providers.xml where
> to find the classes o the config file.
> Thanks.
>
You can turn off the Jetspeed login module and use your own. We  
simply copy in the login.conf into WEB-INF/lib/jetspeed-security- 
XXX.jar and Java picks it up from there




---------------------------------------------------------------------
To unsubscribe, e-mail: jetspeed-user-unsubscribe@portals.apache.org
For additional commands, e-mail: jetspeed-user-help@portals.apache.org