Login configuration

[glassfish-2]

Im trying to configurate a login taking the users from the file realm but I cant authenticate any user. I have this in my web.xml file but doesnt do anything

    <login-config>
        <auth-method>FORM</auth-method>
        <realm-name>file</realm-name>
        <form-login-config>
            <form-login-page>/pages/Login.jsp</form-login-page>
            <form-error-page>/pages/loginError.html</form-error-page>
        </form-login-config>
    </login-config>

Can someone tell me the steps that I have to follow to configurate the server and a simple example?

Thanks in advance.
[Message sent by forum member 'oleggunnar' (oleggunnar)]

http://forums.java.net/jive/thread.jspa?messageID=302968

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@...
For additional commands, e-mail: users-help@...

[glassfish-2]

I follow this instructions to set up my login
http://www.onjava.com/pub/a/onjava/2001/08/06/webform.html?page=1

but I dont know if I have to set something on the glassfish configuration o file realm.
[Message sent by forum member 'oleggunnar' (oleggunnar)]

http://forums.java.net/jive/thread.jspa?messageID=302970

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@...
For additional commands, e-mail: users-help@...

[Jan Luehe]

On 10/ 2/08 08:23 AM, glassfish@... wrote:

> Im trying to configurate a login taking the users from the file realm but I cant authenticate any user. I have this in my web.xml file but doesnt do anything
>
>     <login-config>
>         <auth-method>FORM</auth-method>
>         <realm-name>file</realm-name>
>         <form-login-config>
>             <form-login-page>/pages/Login.jsp</form-login-page>
>             <form-error-page>/pages/loginError.html</form-error-page>
>         </form-login-config>
>     </login-config>
>
> Can someone tell me the steps that I have to follow to configurate the server and a simple example?
>  

We have several unit tests that perform FORM authentication in
conjunction with the "file" realm. These tests add a user to the file
realm using "asadmin create-file-user", perform authentication, and
then remove the user from the file realm using "adamin delete-file-user".

See

https://svn.dev.java.net/svn/glassfish-svn/trunk/v2/appserv-tests/devtests/web/formLoginAccessSessionOnResumedRequest

for details.


Jan

> Thanks in advance.
> [Message sent by forum member 'oleggunnar' (oleggunnar)]
>
> http://forums.java.net/jive/thread.jspa?messageID=302968
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@...
> For additional commands, e-mail: users-help@...
>
>  

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@...
For additional commands, e-mail: users-help@...

[glassfish-2]

the directions you cited should get you where you want to get.

note that the container forces the user to authenticate (according to the configured login-method) when the user issues a request that matches a url-pattern that is the target of
a security (auth)-constraint.

IOW, in addition to defining the login-method, you need to define security-constrainst in order to establish for which request the container will require a user authentication.

Also since you have configured your login-method to use the file realm, you will have to configure one or more username/password combintaions in the file realm.

Ron
[Message sent by forum member 'monzillo' (monzillo)]

http://forums.java.net/jive/thread.jspa?messageID=303034

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@...
For additional commands, e-mail: users-help@...

[glassfish-2]

Thanks for the answers, I decide to start from the beggining and I got to validate the user, the thing is that is not authenticated and show me the error page.
[Message sent by forum member 'oleggunnar' (oleggunnar)]

http://forums.java.net/jive/thread.jspa?messageID=303102

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@...
For additional commands, e-mail: users-help@...

[glassfish-2]

Finally I made it work, thanks for all the help.
[Message sent by forum member 'oleggunnar' (oleggunnar)]

http://forums.java.net/jive/thread.jspa?messageID=303129

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@...
For additional commands, e-mail: users-help@...

[glassfish-2]

Back to the same problem.

I made the login work, but know my problem is this one.

I have my pages inside the folder "pages" and this is my web.xml

        <security-constraint>
            <web-resource-collection>
                <web-resource-name>UnSecurePages</web-resource-name>
                <description>UnSecurity</description>
                <url-pattern>/css/*</url-pattern>
                <url-pattern>/images/*</url-pattern>
                <http-method>POST</http-method>
                <http-method>GET</http-method>
            </web-resource-collection>          
        </security-constraint>
        <security-constraint>
            <web-resource-collection>
                <web-resource-name>SecurePages</web-resource-name>
                <description>Security constraint</description>
                <url-pattern>/*</url-pattern>
                <http-method>POST</http-method>
                <http-method>GET</http-method>
            </web-resource-collection>
            <auth-constraint>
                <description></description>
                <role-name>users</role-name>
            </auth-constraint>            
        </security-constraint>
        <security-role>
            <description></description>
            <role-name>users</role-name>
        </security-role>      
        <login-config>
            <auth-method>FORM</auth-method>
            <form-login-config>
                <form-login-page>/Login.jsp</form-login-page>
                <form-error-page>/Login.jsp</form-error-page>
            </form-login-config>
        </login-config>

The thing is that when I try to access to the file inside pages show me the login screen, but once I log in all the images and css doesn't appear, it shows the page plane.

What Im doing wrong?

I have antoher question, It is possible to retrieve a message error in the Login.jsp from the login form?
[Message sent by forum member 'oleggunnar' (oleggunnar)]

http://forums.java.net/jive/thread.jspa?messageID=303434

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@...
For additional commands, e-mail: users-help@...

[Shing Wai Chan]

Is there any error message in server.log?
Shing Wai Chan

glassfish@... wrote:

> Back to the same problem.
>
> I made the login work, but know my problem is this one.
>
> I have my pages inside the folder "pages" and this is my web.xml
>
>         <security-constraint>
>             <web-resource-collection>
>                 <web-resource-name>UnSecurePages</web-resource-name>
>                 <description>UnSecurity</description>
>                 <url-pattern>/css/*</url-pattern>
>                 <url-pattern>/images/*</url-pattern>
>                 <http-method>POST</http-method>
>                 <http-method>GET</http-method>
>             </web-resource-collection>          
>         </security-constraint>
>         <security-constraint>
>             <web-resource-collection>
>                 <web-resource-name>SecurePages</web-resource-name>
>                 <description>Security constraint</description>
>                 <url-pattern>/*</url-pattern>
>                 <http-method>POST</http-method>
>                 <http-method>GET</http-method>
>             </web-resource-collection>
>             <auth-constraint>
>                 <description></description>
>                 <role-name>users</role-name>
>             </auth-constraint>            
>         </security-constraint>
>         <security-role>
>             <description></description>
>             <role-name>users</role-name>
>         </security-role>      
>         <login-config>
>             <auth-method>FORM</auth-method>
>             <form-login-config>
>                 <form-login-page>/Login.jsp</form-login-page>
>                 <form-error-page>/Login.jsp</form-error-page>
>             </form-login-config>
>         </login-config>
>
> The thing is that when I try to access to the file inside pages show me the login screen, but once I log in all the images and css doesn't appear, it shows the page plane.
>
> What Im doing wrong?
>
> I have antoher question, It is possible to retrieve a message error in the Login.jsp from the login form?
> [Message sent by forum member 'oleggunnar' (oleggunnar)]
>
> http://forums.java.net/jive/thread.jspa?messageID=303434
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@...
> For additional commands, e-mail: users-help@...
>
>  

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@...
For additional commands, e-mail: users-help@...

[glassfish-2]

It doesnt says anything, should I change the log level in one module?
[Message sent by forum member 'oleggunnar' (oleggunnar)]

http://forums.java.net/jive/thread.jspa?messageID=303656

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@...
For additional commands, e-mail: users-help@...

[Shing Wai Chan]

security module to FINE

glassfish@... wrote:

> It doesnt says anything, should I change the log level in one module?
> [Message sent by forum member 'oleggunnar' (oleggunnar)]
>
> http://forums.java.net/jive/thread.jspa?messageID=303656
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@...
> For additional commands, e-mail: users-help@...
>
>  

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@...
For additional commands, e-mail: users-help@...

[glassfish-2]

It tells me the log that i wrote above, under the line.
[Message sent by forum member 'oleggunnar' (oleggunnar)]

http://forums.java.net/jive/thread.jspa?messageID=303866

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@...
For additional commands, e-mail: users-help@...