You are viewing a plain text version of this content. The canonical link for it is here.
Posted to jetspeed-user@portals.apache.org by Jeff Sheets <je...@gmail.com> on 2005/03/18 22:02:10 UTC
JAASSessionValidator error with struts-bridge
We are using the JAASSessionValidator to authenticate against
Weblogic. We are also using the struts-bridge, if that matters.
We are able to authenticate ok, and reach the front page of any
portlet. However, after clicking on the link to take us to the next
page, we receive an error like the following.
Has anybody seen this before? Does anyone have any ideas or clues?
The problem goes away when I turn off the JAASSessionValidator. I
think it has to do with the session being lost, because it works
sometimes but not always.
-- Jeff
<Mar 18, 2005 2:58:56 PM CST> <Error> <HTTP> <BEA-101214> <Included resource or
file "/action/edit.jas;jsessionid=C7QZxyGkX0pm6Sp9ckM6vyfxTRJ4p1Tn0Ph3bdz
g3TJQX4pyDxwC!-2002059013" not found from requested resource "/jetspeed/portal/_
ns:YTIxMzQ4fGMwfGQwfGVfa3JhPTE9MXxlX3NwYWdlPTE9L2VkaXRfb2JzLmphcztqc2Vzc2lvbmlkP
T1DN1FaeHlHa1gwcG02U3A5Y2tNNnZ5ZnhUUko0cDFUbjBQaDNiZHpnM1RKUVg0cHlEeHdDIS0yMDAyM
DU5MDEzfGVfbW9kZT0xPXZpZXc_/".>
---------------------------------------------------------------------
To unsubscribe, e-mail: jetspeed-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: jetspeed-user-help@jakarta.apache.org
LDAP Authentication problem
Posted by Sabine Winkler <wi...@oio.de>.
hi there,
we've tried out to configure J-2 (M3) working with LDAP.
We had to make some changes because the default configuration described
within the docs does not work.
the ldap.properties will not be loaded before loading the LDAP beans from
srping.
so we added the props to the jetspeed.properties.
within the security-spi-ldap-atn.xml also are some mistakes (wrong package
statements, maybe wrong class
defintion) see att to find out what we've changed.
after starting J-2 everything works fine until trying out to login with e.g.
manager and so on.
nothing happens. only an error message with "invalid user..." occures.
may be some of the developers or somebody else who tried it out can tell us
what is wrong ?
thx
Re: The same Struts Portlet, rendered multiple time on the same page
Posted by Th...@nepatec.de.
hi !
to the first i can say following:
if you have 1 struts-portlet-appliactions rendered multiple times in
portal-site you will get always the same content. that is right. the
struts-context will be saved after the action request for all following
render requests - in the session !!! so both portlets will send a
render-request, but the session-object from both will be equal - so both
will get the same rendercontext...
the second i have to read some times more....
thomas
Hi,
what happens if I have the same Struts Portlet rendered multiple times on
just one page? We had some tests and both Portlets synchroniously changed
their state and called the same Struts action. So the Struts Bridge does
not
hold a truly instantiated "Struts context" for each Struts Portlet called,
I
suppose, but only one "Struts context" for each Struts application. Is
that
right?
Furthermore, we did quite a hack to invoke a portlet while processing
another portlet (getting the suiting PortletInvoker for the portlet we
want
to control. We delegate all incoming "action" and "render" requests). If
the
so invoked portlet is a Struts Portlet, that is displayed "normally" a
second time somewhere else on the page, request attribute parameters set
in
the servlet behind the Struts action get displayed correctly only in the
"invoked" portlet. In the "normally" displayed Struts Portlet they do not
exist.
All subsequent actions however, lead to correct behaviour. Set request
attributes were visible in all running instances of the Struts Portlet.
Thank you for any comment,
Sven.
PS: Hints and suggestions how to do all this in better way, are welcome.
---------------------------------------------------------------------
To unsubscribe, e-mail: jetspeed-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: jetspeed-user-help@jakarta.apache.org
The same Struts Portlet, rendered multiple time on the same page
Posted by Sven Thiergen <s....@itcampus.de>.
Hi,
what happens if I have the same Struts Portlet rendered multiple times on
just one page? We had some tests and both Portlets synchroniously changed
their state and called the same Struts action. So the Struts Bridge does not
hold a truly instantiated "Struts context" for each Struts Portlet called, I
suppose, but only one "Struts context" for each Struts application. Is that
right?
Furthermore, we did quite a hack to invoke a portlet while processing
another portlet (getting the suiting PortletInvoker for the portlet we want
to control. We delegate all incoming "action" and "render" requests). If the
so invoked portlet is a Struts Portlet, that is displayed "normally" a
second time somewhere else on the page, request attribute parameters set in
the servlet behind the Struts action get displayed correctly only in the
"invoked" portlet. In the "normally" displayed Struts Portlet they do not
exist.
All subsequent actions however, lead to correct behaviour. Set request
attributes were visible in all running instances of the Struts Portlet.
Thank you for any comment,
Sven.
PS: Hints and suggestions how to do all this in better way, are welcome.
---------------------------------------------------------------------
To unsubscribe, e-mail: jetspeed-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: jetspeed-user-help@jakarta.apache.org
Re: JAASSessionValidator error with struts-bridge
Posted by Jeff Sheets <je...@gmail.com>.
I just want to answer this post, in case anyone else has the same
issue. Also, this has turned up a bug with either the url rewriting
of Jetspeed or the struts-bridge.
We resolved the issue by telling weblogic to not use url rewriting for
saving the jsessionid key and only to use cookies. We had to add this
to the weblogic.xml file of every war in our app:
<session-descriptor>
<session-param>
<param-name>URLRewritingEnabled</param-name>
<param-value>false</param-value>
</session-param>
</session-descriptor>
I have documented the entire problem and resolution here:
http://uncommentedbytes.blogspot.com/2005/04/fix-for-jaas-auth-in-jetspeed.html
On 4/14/05, Jeff Sheets <je...@gmail.com> wrote:
> There's also the possiblity that the JAASSessionValidator works
> incorrectly with Weblogic. Can anyone else verify this?
>
> It seems to be an issue with how the url is rewritten. Also, this
> only seems to occur after closing a browser and logging back into the
> portal with the same userid. Maybe some session info isn't rewritten
> that should be? I have no clue on this one, so any help would be
> greatly appreciated!
>
>
> On 4/13/05, Jeff Sheets <je...@gmail.com> wrote:
> > Has anyone seen this before, or know of a fix (Ate, David, etc...)?
> >
> > On 3/18/05, Jeff Sheets <je...@gmail.com> wrote:
> > > We are using the JAASSessionValidator to authenticate against
> > > Weblogic. We are also using the struts-bridge, if that matters.
> > >
> > > We are able to authenticate ok, and reach the front page of any
> > > portlet. However, after clicking on the link to take us to the next
> > > page, we receive an error like the following.
> > >
> > > Has anybody seen this before? Does anyone have any ideas or clues?
> > > The problem goes away when I turn off the JAASSessionValidator. I
> > > think it has to do with the session being lost, because it works
> > > sometimes but not always.
> > > -- Jeff
> > >
> > > <Mar 18, 2005 2:58:56 PM CST> <Error> <HTTP> <BEA-101214> <Included resource or
> > > file "/action/edit.jas;jsessionid=C7QZxyGkX0pm6Sp9ckM6vyfxTRJ4p1Tn0Ph3bdz
> > > g3TJQX4pyDxwC!-2002059013" not found from requested resource "/jetspeed/portal/_
> > > ns:YTIxMzQ4fGMwfGQwfGVfa3JhPTE9MXxlX3NwYWdlPTE9L2VkaXRfb2JzLmphcztqc2Vzc2lvbmlkP
> > > T1DN1FaeHlHa1gwcG02U3A5Y2tNNnZ5ZnhUUko0cDFUbjBQaDNiZHpnM1RKUVg0cHlEeHdDIS0yMDAyM
> > > DU5MDEzfGVfbW9kZT0xPXZpZXc_/".>
> > >
> >
>
---------------------------------------------------------------------
To unsubscribe, e-mail: jetspeed-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: jetspeed-user-help@jakarta.apache.org
Re: JAASSessionValidator error with struts-bridge
Posted by Jeff Sheets <je...@gmail.com>.
There's also the possiblity that the JAASSessionValidator works
incorrectly with Weblogic. Can anyone else verify this?
It seems to be an issue with how the url is rewritten. Also, this
only seems to occur after closing a browser and logging back into the
portal with the same userid. Maybe some session info isn't rewritten
that should be? I have no clue on this one, so any help would be
greatly appreciated!
On 4/13/05, Jeff Sheets <je...@gmail.com> wrote:
> Has anyone seen this before, or know of a fix (Ate, David, etc...)?
>
> On 3/18/05, Jeff Sheets <je...@gmail.com> wrote:
> > We are using the JAASSessionValidator to authenticate against
> > Weblogic. We are also using the struts-bridge, if that matters.
> >
> > We are able to authenticate ok, and reach the front page of any
> > portlet. However, after clicking on the link to take us to the next
> > page, we receive an error like the following.
> >
> > Has anybody seen this before? Does anyone have any ideas or clues?
> > The problem goes away when I turn off the JAASSessionValidator. I
> > think it has to do with the session being lost, because it works
> > sometimes but not always.
> > -- Jeff
> >
> > <Mar 18, 2005 2:58:56 PM CST> <Error> <HTTP> <BEA-101214> <Included resource or
> > file "/action/edit.jas;jsessionid=C7QZxyGkX0pm6Sp9ckM6vyfxTRJ4p1Tn0Ph3bdz
> > g3TJQX4pyDxwC!-2002059013" not found from requested resource "/jetspeed/portal/_
> > ns:YTIxMzQ4fGMwfGQwfGVfa3JhPTE9MXxlX3NwYWdlPTE9L2VkaXRfb2JzLmphcztqc2Vzc2lvbmlkP
> > T1DN1FaeHlHa1gwcG02U3A5Y2tNNnZ5ZnhUUko0cDFUbjBQaDNiZHpnM1RKUVg0cHlEeHdDIS0yMDAyM
> > DU5MDEzfGVfbW9kZT0xPXZpZXc_/".>
> >
>
---------------------------------------------------------------------
To unsubscribe, e-mail: jetspeed-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: jetspeed-user-help@jakarta.apache.org
Re: JAASSessionValidator error with struts-bridge
Posted by Jeff Sheets <je...@gmail.com>.
Has anyone seen this before, or know of a fix (Ate, David, etc...)?
On 3/18/05, Jeff Sheets <je...@gmail.com> wrote:
> We are using the JAASSessionValidator to authenticate against
> Weblogic. We are also using the struts-bridge, if that matters.
>
> We are able to authenticate ok, and reach the front page of any
> portlet. However, after clicking on the link to take us to the next
> page, we receive an error like the following.
>
> Has anybody seen this before? Does anyone have any ideas or clues?
> The problem goes away when I turn off the JAASSessionValidator. I
> think it has to do with the session being lost, because it works
> sometimes but not always.
> -- Jeff
>
> <Mar 18, 2005 2:58:56 PM CST> <Error> <HTTP> <BEA-101214> <Included resource or
> file "/action/edit.jas;jsessionid=C7QZxyGkX0pm6Sp9ckM6vyfxTRJ4p1Tn0Ph3bdz
> g3TJQX4pyDxwC!-2002059013" not found from requested resource "/jetspeed/portal/_
> ns:YTIxMzQ4fGMwfGQwfGVfa3JhPTE9MXxlX3NwYWdlPTE9L2VkaXRfb2JzLmphcztqc2Vzc2lvbmlkP
> T1DN1FaeHlHa1gwcG02U3A5Y2tNNnZ5ZnhUUko0cDFUbjBQaDNiZHpnM1RKUVg0cHlEeHdDIS0yMDAyM
> DU5MDEzfGVfbW9kZT0xPXZpZXc_/".>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: jetspeed-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: jetspeed-user-help@jakarta.apache.org