[jboss-user] [JBoss Portal] - Re: Page security not working in 2.6.2GA?
PeterJ wrote : nollie, your assumption is correct: you have to remove view/view recursive from the portal and set it for every page or portlet instance. | Thanks for your response Peter - that was driving me nuts. I have to say though, that this is the answer I didn't want to hear. The portal I'm working on has over a hundred pages and I'm only interested in securing 2 or 3. Given this permission granting scheme I have to add markup to 100 pages (and all future pages) so that I can hide my admin tools. The security scheme would be fine if one could override at any node. I could have a public portal, allow most of my pages to inherit that, and then put markup on 3 pages to check for the Admin role. Nollie View the original post : http://www.jboss.com/index.html?module=bbop=viewtopicp=4111324#4111324 Reply to the post : http://www.jboss.com/index.html?module=bbop=postingmode=replyp=4111324 ___ jboss-user mailing list jboss-user@lists.jboss.org https://lists.jboss.org/mailman/listinfo/jboss-user
[jboss-user] [JBoss Portal] - Re: Page security not working in 2.6.2GA?
Yes. The parent of the Weather page is the portal itself. The portal has given Role Unchecked view and viewrecursive permissions so that unauthenticated users can navigate the portal - all pages inherit those security settings so I don't have to set them again and again. What I want to do is restrict access to the Weather page so that only admins can see it. Surely this is possible, right? Your answer seems to imply that I would have to remove view/view recursive from the portal and instead set that for every page other than the weather page? I appreciate your help in understanding this. nollie View the original post : http://www.jboss.com/index.html?module=bbop=viewtopicp=4109431#4109431 Reply to the post : http://www.jboss.com/index.html?module=bbop=postingmode=replyp=4109431 ___ jboss-user mailing list jboss-user@lists.jboss.org https://lists.jboss.org/mailman/listinfo/jboss-user
[jboss-user] [JBoss Portal] - Re: Get page name during layout rendering
This might not be the elegant solution you were hoping for, but you can use request.getPathInfo(); and parse your page name out of it. That's what I'm doing in my menu.jsp, which is included in the layout.jsp. View the original post : http://www.jboss.com/index.html?module=bbop=viewtopicp=4109407#4109407 Reply to the post : http://www.jboss.com/index.html?module=bbop=postingmode=replyp=4109407 ___ jboss-user mailing list jboss-user@lists.jboss.org https://lists.jboss.org/mailman/listinfo/jboss-user
[jboss-user] [JBoss Portal] - Page security not working in 2.6.2GA?
Hello I'm working with jboss-portal-2.6.2.GA-bundled on Windows. I have unzipped and started the server. I haven't changed a single config file. When I try to apply page level security constraints through the Admin portlet, I don't see any difference in behavior. I have restricted the weather page to only allow Admin users to view, viewrecursive, personalize, and personalizerecursive, yet when I try to view that portlet as a user who has not logged in, I can still see the page and the portlet. When I apply the same settings to the portlet instance, I immediately see the results I am expecting: the page opens but the weather portlet is absent. Is this a bug or am I doing it wrong? I've been through the manual and the reference but I don't see my mistake. I really want to be able to restrict access to a page and send people to the default homepage when they try to access that page. Nollie View the original post : http://www.jboss.com/index.html?module=bbop=viewtopicp=4109093#4109093 Reply to the post : http://www.jboss.com/index.html?module=bbop=postingmode=replyp=4109093 ___ jboss-user mailing list jboss-user@lists.jboss.org https://lists.jboss.org/mailman/listinfo/jboss-user
[jboss-user] [JBoss Portal] - Where is the
I'm running portal 2.6.2 on AS 4.2.2. When I am not logged in and I try to access content that requires the 'Admin' role, I no longer see the Access denied message. show is turned on for this situation in my config.xml:entry key=core.render.window_access_deniedshow/entry Does this sound like a bug or is there a change I'm unaware of? nollie View the original post : http://www.jboss.com/index.html?module=bbop=viewtopicp=4106178#4106178 Reply to the post : http://www.jboss.com/index.html?module=bbop=postingmode=replyp=4106178 ___ jboss-user mailing list jboss-user@lists.jboss.org https://lists.jboss.org/mailman/listinfo/jboss-user
[jboss-user] [JBoss Portal] - CMS and LDAP in 2.6.2
Greetings coders
I'm running AS 4.2.2.GA with portal 2.6.2 and authenticating against an LDAP
server.
Now I'm trying to use the CMS, but I'm somehow not authorized to see any
content. My user has the Admin role, but I'm not given access to the CMS
portlet.
In my login-config.xml I have copied my working portal LDAP
application-policy to the cms application-policy without any luck.
Here's my CMS policy from login-config.xml. Where you see correct or
AwesomePassword I have replaced company-specific information.
!-- For the JCR CMS --
|application-policy name=cms
| authentication
| login-module
code=org.jboss.security.auth.spi.LdapExtLoginModule flag=required
|module-option
name=synchronizeIdentitytrue/module-option
|module-option name=synchronizeRolestrue/module-option
|module-option
name=additionalRoleAuthenticated/module-option
|module-option
name=defaultAssignedRoleUser/module-option
|module-option
name=userModuleJNDINamejava:/portal/UserModule/module-option
|module-option
name=roleModuleJNDINamejava:/portal/RoleModule/module-option
|module-option
name=membershipModuleJNDINamejava:/portal/MembershipModule/module-option
|module-option
name=userProfileModuleJNDINamejava:/portal/UserProfileModule/module-option
|module-option
name=password-stackinguseFirstPass/module-option
|module-option
name=java.naming.provider.urlldaps://correct.url.and:port//module-option
|module-option
name=java.naming.security.authenticationsimple/module-option
|module-option
name=java.naming.security.protocolssl/module-option
|module-option
name=java.naming.factory.initialcom.sun.jndi.ldap.LdapCtxFactory/module-option
|module-option
name=bindDNuid=portal,ou=ServiceAccounts,dc=correct,dc=org/module-option
|module-option
name=bindCredentialAwesomePassword/module-option
|module-option
name=baseCtxDNou=People,dc=correct,dc=org/module-option
|module-option
name=baseFilter((objectClass=person)(uid={0}))/module-option
|module-option
name=rolesCtxDNou=portal,ou=Groups,dc=correct,dc=org/module-option
|module-option
name=roleFilter((objectClass=groupofuniquenames)(uniquemember={1}))/module-option
|module-option name=roleAttributeIsDNfalse/module-option
|module-option name=roleAttributeIDcn/module-option
|module-option name=roleRecursion0/module-option
|module-option name=roleNameAttributeIDcn/module-option
|module-option name=searchScopeSUBTREE_SCOPE/module-option
|module-option name=defaultRoleAuthenticated/module-option
|module-option
name=unauthenticatedIdentityAnonymous/module-option
|module-option
name=allowEmptyPasswordsfalse/module-option
| /login-module
| /authentication
|/application-policy
Any help appreciated!
-nollie
View the original post :
http://www.jboss.com/index.html?module=bbop=viewtopicp=4105083#4105083
Reply to the post :
http://www.jboss.com/index.html?module=bbop=postingmode=replyp=4105083
___
jboss-user mailing list
jboss-user@lists.jboss.org
https://lists.jboss.org/mailman/listinfo/jboss-user
[jboss-user] [JBoss Portal] - How to login over HTTPS and return to site over HTTP
Hello
AS 4.2.1
portal 2.6.2
Currently I'm directing users to /auth/{contextRoot}/{currentPage} to login
with the portal-server.war's login.jsp. How can I specify that users login
over HTTPS, and after they succeed they return to my site over HTTP?
Thanks,
Nollie
View the original post :
http://www.jboss.com/index.html?module=bbop=viewtopicp=4092022#4092022
Reply to the post :
http://www.jboss.com/index.html?module=bbop=postingmode=replyp=4092022
___
jboss-user mailing list
jboss-user@lists.jboss.org
https://lists.jboss.org/mailman/listinfo/jboss-user
[jboss-user] [JBoss Portal] - LdapExtLoginModule: no org.jboss.portal.loginError request a
Hello I'm using the LdapExtLoginModule for authentication under AS 4.2.0 and Portal 2.6 and when a user enters the wrong password the error.jsp is displaying a nice red null instead of a help message. Using something like the IdentityLoginModule leads to useful error messages. Here is the line of code in the error.jsp that needs the error messagep style=color:red%= request.getAttribute(org.jboss.portal.loginError) %/p Does anyone know why I might not get useful error message back? Thanks. Jon View the original post : http://www.jboss.com/index.html?module=bbop=viewtopicp=4088923#4088923 Reply to the post : http://www.jboss.com/index.html?module=bbop=postingmode=replyp=4088923 ___ jboss-user mailing list jboss-user@lists.jboss.org https://lists.jboss.org/mailman/listinfo/jboss-user
[jboss-user] [JBoss Portal] - Can't build hypersonic DB after upgrading.
Hello I have successfully upgraded our application from AS 4.0.5 with portal 2.4 to AS 4.2.0 with portal 2.6. I run on XP and use the hypersonic database without modifications. Trouble is my coworker's machine isn't able to properly create the hypersonic database and deploy JBoss Portal, let alone deploy our application. If I give her a copy of my working server she can run without error. As soon as she changes our *-object.xml file and deletes the /default/data directory she runs into problems. The server.log has few errors, but there is a stacktrace early on that I have never seen: ... | Caused by: java.lang.UnsatisfiedLinkError: no tcnative-1 in java.library.path, no libtcnative-1 in java.library.path(C:\Program Files\Java\jdk1.5.0_08\bin;.;C:\WINDOWS\system32;C:\WINDOWS;C:\Program Files\Common Files\Affymetrix\AffyShared;C:\PROGRAM FILES\AFFYMETRIX\GENECHIP;C:\ORACLE\ORA81\BIN;C:\PROGRAM FILES\ORACLE\JRE\1.1.7\BIN;C:\WINDOWS\SYSTEM32;C:\WINDOWS;C:\WINDOWS\SYSTEM32\WBEM;C:\PROGRAM FILES\PUTTY;C:\PROGRAM FILES\SUBVERSION\BIN;C:\PROGRAM FILES\MICROSOFT SQL SERVER\80\TOOLS\BINN\;C:\apache-ant-1.6.5-bin\apache-ant-1.6.5\bin;C:\Program Files\QuickTime\QTSystem\;C:\Sun\jwsdp-2.0\jwsdp-shared\bin) | at org.apache.tomcat.jni.Library.init(Library.java:56) | at org.apache.tomcat.jni.Library.initialize(Library.java:157) | ... 116 more Further down we have plenty of these:2007-09-14 12:37:40,000 ERROR [org.hibernate.tool.hbm2ddl.SchemaExport] schema export unsuccessful | java.sql.SQLException: You cannot commit during a managed transaction! | at org.jboss.resource.adapter.jdbc.BaseWrapperManagedConnection.jdbcCommit(BaseWrapperManagedConnection.java:543) | at org.jboss.resource.adapter.jdbc.WrappedConnection.commit(WrappedConnection.java:334) | at org.hibernate.tool.hbm2ddl.ManagedProviderConnectionHelper.prepare(ManagedProviderConnectionHelper.java:30) | at org.hibernate.tool.hbm2ddl.SchemaExport.execute(SchemaExport.java:180) | at org.hibernate.tool.hbm2ddl.SchemaExport.create(SchemaExport.java:133) | ... and these java.sql.SQLException: Table not found in statement [select top ? portalobje0_.PK as PK64_, portalobje0_.LISTENER as LISTENER64_, portalobje0_4_.INSTANCE_REF as INSTANCE2_71_, case when portalobje0_1_.PK is not null then 1 when portalobje0_2_.PK is not null then 2 when portalobje0_3_.PK is not null then 3 when portalobje0_4_.PK is not null then 4 when portalobje0_.PK is not null then 0 end as clazz_ from JBP_PORTAL_OBJECT portalobje0_ left outer join JBP_CONTEXT portalobje0_1_ on portalobje0_.PK=portalobje0_1_.PK left outer join JBP_PORTAL portalobje0_2_ on portalobje0_.PK=portalobje0_2_.PK left outer join JBP_PAGE portalobje0_3_ on portalobje0_.PK=portalobje0_3_.PK left outer join JBP_WINDOW portalobje0_4_ on portalobje0_.PK=portalobje0_4_.PK] | at org.hsqldb.jdbc.Util.throwError(Unknown Source) | at org.hsqldb.jdbc.jdbcPreparedStatement.init(Unknown Source) | at org.hsqldb.jdbc.jdbcConnection.prepareStatement(Unknown Source) | at org.jboss.resource.adapter.jdbc.BaseWrapperManagedConnection.doPrepareStatement(BaseWrapperManagedConnection.java:349) | at org.jboss.resource.adapter.jdbc.BaseWrapperManagedConnection.prepareStatement(BaseWrapperManagedConnection.java:344) | at org.jboss.resource.adapter.jdbc.WrappedConnection.prepareStatement(WrappedConnection.java:187) | at org.hibernate.jdbc.AbstractBatcher.getPreparedStatement(AbstractBatcher.java:505) Does anyone have any hints for me? At this point I'm assuming it's a library/path/classpath issue but that's just a best guess. Nothing is jumping out at me. Nollie View the original post : http://www.jboss.com/index.html?module=bbop=viewtopicp=4084588#4084588 Reply to the post : http://www.jboss.com/index.html?module=bbop=postingmode=replyp=4084588 ___ jboss-user mailing list jboss-user@lists.jboss.org https://lists.jboss.org/mailman/listinfo/jboss-user
[jboss-user] [JBoss Portal] - Re: Can't turn off the maximized window-state
Excellent! Thanks for the tip. Here's my fix which hides only the maximized
style.
.portlet-mode-maximized {
| ...
| /* following line is for hiding the maximized control */
| display: none;
| ...
|}
View the original post :
http://www.jboss.com/index.html?module=bbop=viewtopicp=4082253#4082253
Reply to the post :
http://www.jboss.com/index.html?module=bbop=postingmode=replyp=4082253
___
jboss-user mailing list
jboss-user@lists.jboss.org
https://lists.jboss.org/mailman/listinfo/jboss-user
[jboss-user] [JBoss Portal] - Can't turn off the maximized window-state
Hello everyone I'm using AS 4.2.0 and portal 2.6 and I can't seem to be able to turn the maximized portlet controls off. I made this change in my *-object.xml file: supported-window-states | window-statenormal/window-state | !-- window-statemaximized/window-state -- | window-stateminimized/window-state | /supported-window-states After making that change I cleaned out the database and restarted. Any ideas on how to make these controls disappear? In 2.4 all I had to do was remove the corresponding CSS and the link was invisible, but now that I'm using 2.6 the p:region tags in my layout are putting a in the link text so now I have a noticable gap in my title bar that users can click and invoke the maximized state. nollie View the original post : http://www.jboss.com/index.html?module=bbop=viewtopicp=4076497#4076497 Reply to the post : http://www.jboss.com/index.html?module=bbop=postingmode=replyp=4076497 ___ jboss-user mailing list jboss-user@lists.jboss.org https://lists.jboss.org/mailman/listinfo/jboss-user
[jboss-user] [Security JAAS/JBoss] - Re: How to reset the authentication cache
Edit /server/default/conf/jboss-service.xml. Set DefaultCacheTimeout to 0, and DefaultCacheResolution to 0. I did that and rebuilt the jboss database. Searching on that first term should lead to helpful documentation. nollie View the original post : http://www.jboss.com/index.html?module=bbop=viewtopicp=4074894#4074894 Reply to the post : http://www.jboss.com/index.html?module=bbop=postingmode=replyp=4074894 ___ jboss-user mailing list jboss-user@lists.jboss.org https://lists.jboss.org/mailman/listinfo/jboss-user
[jboss-user] [Security JAAS/JBoss] - How do I get user roles in 2.6?
Hello. I'm using AS 4.2.0 and portal 2.6. Under 2.4 there was a method roleModule#getRoles(User user) for obtaining roles for a specific user. Now that I'm using 2.6 that method is no longer in the interface and I'm wondering how I can accomplish the same thing. How can I determine if the current user has a certain role under 2.6? I am currently using the LdapExtLoginModule. nollie View the original post : http://www.jboss.com/index.html?module=bbop=viewtopicp=4074900#4074900 Reply to the post : http://www.jboss.com/index.html?module=bbop=postingmode=replyp=4074900 ___ jboss-user mailing list jboss-user@lists.jboss.org https://lists.jboss.org/mailman/listinfo/jboss-user
[jboss-user] [Security JAAS/JBoss] - Re: How do I get user roles in 2.6?
Right now I'm doing this, but I'd rather have a cleaner solution with the
RoleModule ...
| public static boolean hasRole(String roleName) {
| Subject caller = SecurityAssociation.getSubject();
| if ( caller == null ) {
| return false;
|
| }
| Set princes = caller.getPrincipals();
| Iterator i = princes.iterator();
| while (i.hasNext() ) {
| String roles = i.next().toString();
| // e.g. Roles(members:User,Admin,Administrators,Authenticated)
| // make sure to check for commas, colons, and close paren
| // so User isn't mistaken for SuperUser and the like
| if ( roles.contains(: + roleName + ,) ||
| roles.contains(, + roleName + ,) ||
| roles.contains(, + roleName + ))) {
| return true;
|
| }
|
| }
| return false;
|
| }
|
Any suggestions?
View the original post :
http://www.jboss.com/index.html?module=bbop=viewtopicp=4074928#4074928
Reply to the post :
http://www.jboss.com/index.html?module=bbop=postingmode=replyp=4074928
___
jboss-user mailing list
jboss-user@lists.jboss.org
https://lists.jboss.org/mailman/listinfo/jboss-user
[jboss-user] [JBoss Portal] - Re: update user password
I'm assuming you have customized login-config.xml. Did you config jboss-service.xml and then ldap_identity-config.xml? jboss-portal.sar\META-INF\jboss-service.xml jboss-portal.sar\conf\ldap_identity-config.xml In the first file you should change the ConfigFile attribute for the portal:service=Module,type=IdentityServiceController mbean to be the second file (conf/identity/ldap_identity-config.xml). Then in the identity file you need to enter in some of the same information you used in the login-config.xml. Searching those file names should lead to documentation. nollie View the original post : http://www.jboss.com/index.html?module=bbop=viewtopicp=4075010#4075010 Reply to the post : http://www.jboss.com/index.html?module=bbop=postingmode=replyp=4075010 ___ jboss-user mailing list jboss-user@lists.jboss.org https://lists.jboss.org/mailman/listinfo/jboss-user
[jboss-user] [Security JAAS/JBoss] - Re: The neverending logout topic
chakotey07 I've managed to declare the properties files and run the aforementioned code to logout ... only I didn't really logout. In any case, I cannot maintain a flat file of usernames and passwords so I'm keen to learn how I can avoid the UsersRolesLoginModule all together. In my login-config.xml I am currently only defining my LdapExtLoginModule. Perhaps I should be defining an IdentityLoginModule as well? Did you mean the jboss-portal.sar\conf\login-config.xml or the server\default\conf\login-config.xml? nollie View the original post : http://www.jboss.com/index.html?module=bbop=viewtopicp=4073190#4073190 Reply to the post : http://www.jboss.com/index.html?module=bbop=postingmode=replyp=4073190 ___ jboss-user mailing list jboss-user@lists.jboss.org https://lists.jboss.org/mailman/listinfo/jboss-user
[jboss-user] [Security JAAS/JBoss] - Re: The neverending logout topic
Dear unauthenticators Thanks to chakotey07 and everyone else for their posts. Using smi-smith's code I have gotten a hold of a LoginContext, but calling the logout method leads to this error: anonymous wrote : 18:53:28,234 ERROR [UsersRolesLoginModule] Failed to load users/passwords/role files | java.io.IOException: No properties file: users.properties or defaults: defaultUsers.properties found | at org.jboss.security.auth.spi.Util.loadProperties(Util.java:315) | at org.jboss.security.auth.spi.UsersRolesLoginModule.loadUsers(UsersRolesLoginModule.java:186) I've read elsewhere that this is indicative of a poorly configured security domain, but I can't figure out what's missing. I'm using the LdapExtLoginModule and I'm able to login and change passwords. Why is this simple file-based login module even being used? Do I just need some empty properity files? - nollie View the original post : http://www.jboss.com/index.html?module=bbop=viewtopicp=4072765#4072765 Reply to the post : http://www.jboss.com/index.html?module=bbop=postingmode=replyp=4072765 ___ jboss-user mailing list jboss-user@lists.jboss.org https://lists.jboss.org/mailman/listinfo/jboss-user
[jboss-user] [JBoss Portal] - SynchronizingLDAPExtLoginModule
Hello As part of an upgrade to portal 2.6 I'm experimenting with the SynchronizingLDAPExtLoginModule. I've read the Reference manual entry on the subject, but wanted to double check something. This module will not allow, for example, the UserPortlet to change a password in LDAP, correct? I'd have to write an extension of this module to allow my users to change their LDAP password via the website? Thanks nollie View the original post : http://www.jboss.com/index.html?module=bbop=viewtopicp=4070815#4070815 Reply to the post : http://www.jboss.com/index.html?module=bbop=postingmode=replyp=4070815 ___ jboss-user mailing list jboss-user@lists.jboss.org https://lists.jboss.org/mailman/listinfo/jboss-user
[jboss-user] [JBoss Portal] - Re: What is the format of renderURLs in 2.4?
Julien, Can you please explain what the opaque flag's function is? I see that it is tied to the NAVIGATIONAL_STATE_PARAMETER but I don't understand what it does. thanks nollie View the original post : http://www.jboss.com/index.html?module=bbop=viewtopicp=4054825#4054825 Reply to the post : http://www.jboss.com/index.html?module=bbop=postingmode=replyp=4054825 ___ jboss-user mailing list jboss-user@lists.jboss.org https://lists.jboss.org/mailman/listinfo/jboss-user
[jboss-user] [JBoss Portal] - Re: Portal 2.4.1 in AS 4.2.0. Any work arounds?
Thank you for the reply. Not only did you answer my question, but the one I was about to post :) View the original post : http://www.jboss.com/index.html?module=bbop=viewtopicp=4054494#4054494 Reply to the post : http://www.jboss.com/index.html?module=bbop=postingmode=replyp=4054494 ___ jboss-user mailing list jboss-user@lists.jboss.org https://lists.jboss.org/mailman/listinfo/jboss-user
[jboss-user] [JBoss Portal] - Portal 2.4.1 in AS 4.2.0. Any work arounds?
Hello everyone I'd like very much to use AS 4.2.0 with portal 2.4.1, but there is at least one known issue stopping me: http://jira.jboss.com/jira/browse/JBPORTAL-1483 anonymous wrote : | ?jboss-portal.sar built with jdk 1.4 when deployed to jboss 4.2.0.GA throws CNFE for org.apache.myfaces.webapp.StartupServletContextListener.? I tried to compile the 2.4.1 code with jdk 1.5 on my machine but failed with anonymous wrote : | [execmodules] C:\Documents and Settings\nollie\Desktop\jboss-portal-2.4.1-src | \common\src\main\org\jboss\portal\common\command\ReflectedConfigurator.java:69: | cannot find symbol | [execmodules] symbol : class NoSuchAttachmentException | A coworker was able to get around this ClassNotFoundException by copying the jsf-libs from an older installation (which I'm assuming matched 1.4 compiled code with 1.4 compiled code), but even with that hack she isn't able to get the portal up due to a missing generic layout. Has anyone been able to use portal 2.4.1 with AS 4.2.0? Any help appreciated, thanks. Nollie View the original post : http://www.jboss.com/index.html?module=bbop=viewtopicp=4054078#4054078 Reply to the post : http://www.jboss.com/index.html?module=bbop=postingmode=replyp=4054078 ___ jboss-user mailing list jboss-user@lists.jboss.org https://lists.jboss.org/mailman/listinfo/jboss-user
[jboss-user] [JBoss Portal] - Re: What is the format of renderURLs in 2.4?
(Everything that follows can be verified in org.jboss.portal.portlet.impl.PortletRequestDecoder. I was reading code from the head of development, but everything I learned worked against my 2.4.1 installation) Here are some example parameters I've found within my own application. action=6mode=view action=awindowstate=normal 6, a? What does action mean? Action isn't just any old parameter, its value is actually a hexidecimal number built from masks found in the PortletRequestDecoder. The first bit, if on, indicates an actionURL. The second bit, if on, indicates a renderURL. The third bit, if on, indicates the URL has a mode parameter. The fourth bit, if on, indicates the URL has a windowstate parameter. Finally the fifth bit is used for the opaque mask, which we haven't figure out yet. So, what does that give us? Let's take look at the action=6 of the first parameter string. 6 in hex equals 110 in binary. According to the bit assignments above that gives us: | 1 1 0 | |_|_|_|_|_| | o w m r a | p i o e c | a n d n t | q d e d i | u o e o | e w r n | Therefore this URL is a renderURL with a mode parameter. Looking above the parameter string has a mode parameter equal to view. Now let's look at the action=a of second parameter string. A in hex equals 1010 |1 0 1 0 | |_|_|_|_|_| | o w m r a | p i o e c | a n d n t | q d e d i | u o e o | e w r n | Therefore this URL is also a renderURL, but this time with a windowstate parameter. Looking above the example indeed has a windowstate parameter, but does not have a mode parameter. What would the action need to be if we wanted to specify both mode and windowstate parameters? |1 1 1 0 | |_|_|_|_|_| | o w m r a | p i o e c | a n d n t | q d e d i | u o e o | e w r n | Binary 1110 is e in hex, so the URL would end something like this: action=emode=helpwindowstate=normal. View the original post : http://www.jboss.com/index.html?module=bbop=viewtopicp=4053498#4053498 Reply to the post : http://www.jboss.com/index.html?module=bbop=postingmode=replyp=4053498 ___ jboss-user mailing list jboss-user@lists.jboss.org https://lists.jboss.org/mailman/listinfo/jboss-user
[jboss-user] [JBoss Portal] - Re: What is the format of renderURLs in 2.4?
Thanks for the starting point. I was able to figure out all of what I needed by examining org.jboss.portal.portlet.impl.PortletRequestDecoder. I need to document my work here and then I will post some hints for anyone who might search this thread. Nollie View the original post : http://www.jboss.com/index.html?module=bbop=viewtopicp=4053287#4053287 Reply to the post : http://www.jboss.com/index.html?module=bbop=postingmode=replyp=4053287 ___ jboss-user mailing list jboss-user@lists.jboss.org https://lists.jboss.org/mailman/listinfo/jboss-user
[jboss-user] [JBoss Portal] - What is the format of renderURLs in 2.4?
Hello Can someone point me to the documentation that describes the URL created by renderURL tags in 2.4? The format has changed between 2.2 and 2.4 and I need the format to write a load balancing rule. Thanks! View the original post : http://www.jboss.com/index.html?module=bbop=viewtopicp=4052302#4052302 Reply to the post : http://www.jboss.com/index.html?module=bbop=postingmode=replyp=4052302 ___ jboss-user mailing list jboss-user@lists.jboss.org https://lists.jboss.org/mailman/listinfo/jboss-user
[jboss-user] [JBoss Portal] - Re: Custom user authentication
I'm using the default login/error pages with this URL http://localhost:8080/auth/portal/portal/mycustomportal/ View the original post : http://www.jboss.com/index.html?module=bbop=viewtopicp=4046943#4046943 Reply to the post : http://www.jboss.com/index.html?module=bbop=postingmode=replyp=4046943 ___ jboss-user mailing list jboss-user@lists.jboss.org https://lists.jboss.org/mailman/listinfo/jboss-user
[jboss-user] [JBoss Portal] - Re: getPortletSession().invalidate() not working?
Thanks! I hope to try this soon. Nollie View the original post : http://www.jboss.com/index.html?module=bbop=viewtopicp=4041083#4041083 Reply to the post : http://www.jboss.com/index.html?module=bbop=postingmode=replyp=4041083 ___ jboss-user mailing list jboss-user@lists.jboss.org https://lists.jboss.org/mailman/listinfo/jboss-user
[jboss-user] [JBoss Portal] - Can't get page level declaritive security working
Hello everyone http://docs.jboss.com/jbportal/v2.4/reference-guide/en/html/security.html#securing_objects Clearly states that I can secure pages in my *-object.xml file. After successfully securing an instance with the following security constraint: security-constraint | policy-permission | role-nameAuthenticated/role-name | action-nameview/action-name | /policy-permission | /security-constraint I tried to secure a page with the very same markup, but with poor results: the page is shown without error or a redirect to the login page. I'm really stumped on this one, and seem to recall reading in the forums that page level security wasn't possible. Does anyone have the definitive answer on that w/r/t portal 2.4.1? Does anyone have any ideas why my page comes up unrestricted? Thanks in advance! nollie View the original post : http://www.jboss.com/index.html?module=bbop=viewtopicp=4040231#4040231 Reply to the post : http://www.jboss.com/index.html?module=bbop=postingmode=replyp=4040231 ___ jboss-user mailing list jboss-user@lists.jboss.org https://lists.jboss.org/mailman/listinfo/jboss-user
[jboss-user] [Security JAAS/JBoss] - Re: The neverending logout topic
Gentlemen I'm very interested in the issue of logging out as well. I have read many articles on the subject and nothing has worked so far. I'm authenticating with org.jboss.security.auth.spi.LdapExtLoginModule by redirecting users to /auth/portal/myPortal/myPage. This is working well. I have tried to invalidate the HttpSession and the PortletSession, but neither is working. I have my browsers configured to never save passwords for my dev site, so I'm not sure how they are automatically logging the user back in. Furthermore, invalidating my session is not erasing variables that my portlets have stored in the session - something I will post on another topic, but seemingly associated with my authenticated 'flag' not being reset. View the original post : http://www.jboss.com/index.html?module=bbop=viewtopicp=4040030#4040030 Reply to the post : http://www.jboss.com/index.html?module=bbop=postingmode=replyp=4040030 ___ jboss-user mailing list jboss-user@lists.jboss.org https://lists.jboss.org/mailman/listinfo/jboss-user
[jboss-user] [JBoss Portal] - getPortletSession().invalidate() not working?
Hello I'm using portal 2.4.1 on AS 4.0.5. I have a portlet that stores user input in the portlet session to save them from extra typing and also give them better error messages. The problem that I am having is that calls to invalidate() on the portlet session object have no effect on the attributes that I have stored - they are available until I set them to null OR the session times out. What gives? Shouldn't invalidate blow away my session? Shouldn't invalidate make my session time out that instant? nollie View the original post : http://www.jboss.com/index.html?module=bbop=viewtopicp=4040032#4040032 Reply to the post : http://www.jboss.com/index.html?module=bbop=postingmode=replyp=4040032 ___ jboss-user mailing list jboss-user@lists.jboss.org https://lists.jboss.org/mailman/listinfo/jboss-user
[jboss-user] [JBoss Portal] - Login from portlet
Hello I'm working with portal 2.4.1 on AS 4.0.5GA. I recently got authentication working with LDAP and the jboss console login. Now I would like to allow our users to login from a portlet, but I'm not having any luck. We would like to have users login and see slightly different content as a result - we aren't trying to lock down an area on the server (e.g. everything in the /auth/ domain) Following instructions here http://wiki.jboss.org/wiki/Wiki.jsp?page=PortletLogin haven't lead to any positive results yet. Strictly following the example, I have an error to the effect that j_security_check isn't part of the servlet I'm using to redirect with. Hardcoding the entire URL causes the servlet to time out. Any advice would be greatly appreciated. Nollie View the original post : http://www.jboss.com/index.html?module=bbop=viewtopicp=4035811#4035811 Reply to the post : http://www.jboss.com/index.html?module=bbop=postingmode=replyp=4035811 ___ jboss-user mailing list jboss-user@lists.jboss.org https://lists.jboss.org/mailman/listinfo/jboss-user
[jboss-user] [JBoss Portal] - Trouble with security contraints
Hello. I'm using portal 2.4.1 on 4.0.5GA. I recently got my LDAP authentication working and started trying out the security constraints. Everything was working until I removed my test user from the Authenticated' group in LDAP. At first my credentials were cached, but I blew away the hypersonic database and tried to login again and was correctly denied viewing a portlet that required the Authenticated role. Now I can't get it to work correctly again. I have changed the security constraint to Admin in hopes that would get me somewhere, as my users can login and see the Admin tab on the web console, but I'm still not about to see my portlet. Am i missing a cache of old credentials somewhere? DefaultCacheTimeout is set to zero. This is the stack trace I'm seeing: 15:22:53,395 ERROR [PortalPermissionCollection] Permission check against the rep | ository failed | java.lang.IllegalArgumentException: Illegal action viewrecursive | at org.jboss.portal.core.model.instance.InstancePermission.addAction(Ins | tancePermission.java:117) | ... | And finally, for a brief time I added this to my login-config.xml ( not sure if this is relevant): !-- Add this line to your login-config.xml to include the ClientLoginModule propogation -- | login-module code=org.jboss.security.ClientLoginModule flag=required / Thanks! View the original post : http://www.jboss.com/index.html?module=bbop=viewtopicp=4035146#4035146 Reply to the post : http://www.jboss.com/index.html?module=bbop=postingmode=replyp=4035146 ___ jboss-user mailing list jboss-user@lists.jboss.org https://lists.jboss.org/mailman/listinfo/jboss-user
[jboss-user] [JBoss Portal] - Re: Trouble with security contraints
I finally got it! I had to set DefaultCacheTimeout, AND DefaultCacheResolution to zero and rebuild the database. View the original post : http://www.jboss.com/index.html?module=bbop=viewtopicp=4035152#4035152 Reply to the post : http://www.jboss.com/index.html?module=bbop=postingmode=replyp=4035152 ___ jboss-user mailing list jboss-user@lists.jboss.org https://lists.jboss.org/mailman/listinfo/jboss-user
[jboss-user] [JBoss Portal] - Re: Security constraints for portlets
This thread is helpful for my current problem, but I'm not sure how to interpret this table: ObjectRoleA RoleB Unchecked | Page1 view view-none- |Portlet1 view -none- -none- |Portlet2 view -none- -none- |Portlet3 -none-view-none- |Portlet4 -none-view-none- Re: -none-, do I include a policy permission that doesn't have an action-name? Do make the action-name '-none-, or do I simply not include the policy permission at all? I am trying to add security contraints to my pages, but so far I haven't been able to deny my self any instances or pages - I can still see everything. /portal 2.4.1 and AS 4.0.5 View the original post : http://www.jboss.com/index.html?module=bbop=viewtopicp=4033791#4033791 Reply to the post : http://www.jboss.com/index.html?module=bbop=postingmode=replyp=4033791 ___ jboss-user mailing list jboss-user@lists.jboss.org https://lists.jboss.org/mailman/listinfo/jboss-user
[jboss-user] [JBoss Portal] - LDAP authentication working, but
Hello I'm integrating LDAP into Portal 2.4.1 on AS 4.0.5GA. At the moment I have authentication working - I can login to the portal console as a user defined in LDAP and I can see my user information on the Test tab in the Test portlet. However, clicking Edit your profile in the User portlet leads to this error: 2007-03-30 15:33:03,965 ERROR [org.jboss.portal.core.command.ControllerCommand] Rendering portlet window default.News.UserPortletWindow triggered the following error : | javax.portlet.PortletException: Not user object found | at org.jboss.portal.core.portlet.user.UserPortlet.doView(UserPortlet.java:234) | at org.jboss.portlet.JBossPortlet.doDispatch(JBossPortlet.java:242) | at org.jboss.portlet.JBossPortlet.render(JBossPortlet.java:229) | at org.jboss.portlet.JBossPortlet.render(JBossPortlet.java:366) | ... | It would seem that I have authentication setup correctly, but that the portal isn't using that information elsewhere ... just a guess. Any ideas about what I have missed? View the original post : http://www.jboss.com/index.html?module=bbop=viewtopicp=4033362#4033362 Reply to the post : http://www.jboss.com/index.html?module=bbop=postingmode=replyp=4033362 ___ jboss-user mailing list jboss-user@lists.jboss.org https://lists.jboss.org/mailman/listinfo/jboss-user
[jboss-user] [JBoss Portal] - Re: JBoss 4.05GA + JPortal 2.4 javascript problem
Probably not the solution you were looking for, but this is what I did to get around not being able to figure out the path to my script: renderResponse.setProperty(HEADER_CONTENT, script type=\text/javascript\+ script +/script); Above my script has been loaded off the file system by my portlet and I inject the script into the head manually. Probably not an issue for a short script, but I would imagine that finding the correct path and setting that in your JSP is better in the long run when your server is under heavy use. View the original post : http://www.jboss.com/index.html?module=bbop=viewtopicp=4032559#4032559 Reply to the post : http://www.jboss.com/index.html?module=bbop=postingmode=replyp=4032559 ___ jboss-user mailing list jboss-user@lists.jboss.org https://lists.jboss.org/mailman/listinfo/jboss-user
[jboss-user] [JBoss Portal] - Re: Trouble with
Renaissance and all the other themes use a variant of the IE hack, at least in 2.4.1. The margins are all a little different, but the same div names are used. I can't see an appreciable difference between what I'm doing and what Ren is doing. View the original post : http://www.jboss.com/index.html?module=bbop=viewtopicp=4028783#4028783 Reply to the post : http://www.jboss.com/index.html?module=bbop=postingmode=replyp=4028783 ___ jboss-user mailing list jboss-user@lists.jboss.org https://lists.jboss.org/mailman/listinfo/jboss-user
[jboss-user] [JBoss Portal] - Null Layout when portlet maximized
Hello. I have been tasked with upgrading our AS from jboss-4.0.3SP1 to jboss-4.0.5.GA, and our portal from 2.2.1-SP3 to 2.4.1. Both the AS and portal where downloaded and unzipped manually. My JDBC driver, jboss-portal.sar, and portal-hsqldb-ds.xml have been copied to the /server/default/lib. At the moment I am only working with the hypersonic database. Almost everything works at this point. In addition to migrating my portlet descriptors I have been bringing our layout into compliance with JBoss standards - in the past we were not using many portlet styles and had no controls in the title bar. I have my portlet decorations and contols rendering correctly in my portlet title now and all of the controls work except for maximizing a portlet. The exception: anonymous wrote : javax.servlet.ServletException: No null layout allowed here | org.jboss.portal.server.servlet.PortalServlet.process(PortalServlet.java:315) | org.jboss.portal.server.servlet.PortalServlet.doGet(PortalServlet.java:173) | javax.servlet.http.HttpServlet.service(HttpServlet.java:697) | javax.servlet.http.HttpServlet.service(HttpServlet.java:810) | org.jboss.web.tomcat.filters.ReplyHeaderFilter.doFilter(ReplyHeaderFilter.java:96) | | root cause | | java.lang.IllegalArgumentException: No null layout allowed here | org.jboss.portal.theme.LayoutDispatcher.(LayoutDispatcher.java:87) | org.jboss.portal.theme.impl.JSPLayout.assembleResponse(JSPLayout.java:54) | org.jboss.portal.core.command.MarkupCommand.execute(MarkupCommand.java:363) | org.jboss.portal.core.command.ControllerCommand.dispatch(ControllerCommand.java:84) | ... *snip* | I have searched the forums and found a thread or two concerning this exception where the solution seemingly had to do with the database connectivity. Since my entire portal is working except maximizing, I'm inclined to say I have a different problem. That said, we've never tried maximizing our portlets before so it could be some old mistake made before I started. Any thoughts? Thanks in advance. Nollie View the original post : http://www.jboss.com/index.html?module=bbop=viewtopicp=4028423#4028423 Reply to the post : http://www.jboss.com/index.html?module=bbop=postingmode=replyp=4028423 ___ jboss-user mailing list jboss-user@lists.jboss.org https://lists.jboss.org/mailman/listinfo/jboss-user
[jboss-user] [JBoss Portal] - Re: Null Layout when portlet maximized
Don't you love it when writing out your entire problem in a forum leads you to think of the answer before anyone posts? My problem was that we never had a maximized layout. I added this line to my portal-layouts.xml file: uri state=maximized/layout/generic/maximized.jsp/uri right under the first URI tag and then of course made a maximized.jsp and restarted. /Cheers View the original post : http://www.jboss.com/index.html?module=bbop=viewtopicp=4028433#4028433 Reply to the post : http://www.jboss.com/index.html?module=bbop=postingmode=replyp=4028433 ___ jboss-user mailing list jboss-user@lists.jboss.org https://lists.jboss.org/mailman/listinfo/jboss-user
[jboss-user] [JBoss Portal] - Trouble with IE Hack sizer, expander, and portal-containe
I'm using portal 2.4.1 and for the life of me I can't get the IE hack to maintain a minimum width. Does anyone have any tips to get this to work? I have tweaked every style attribute I can think of to massage this 'hack' into my layout. My layout is very similair to the portal's index.jsp layout in structure and I'm going in circles. nollie View the original post : http://www.jboss.com/index.html?module=bbop=viewtopicp=4028562#4028562 Reply to the post : http://www.jboss.com/index.html?module=bbop=postingmode=replyp=4028562 ___ jboss-user mailing list jboss-user@lists.jboss.org https://lists.jboss.org/mailman/listinfo/jboss-user
[jboss-user] [JBoss Portal] - Re: Ajax portlet problem in Jboss portal -2.4
I am having the same error Failed to load or instantiate TagExtraInfo class: org.jboss.portal.portlet.taglib.DefineObjectsTagTEI with some of my portlets as I try to migrate from 2.2 to 2.4. It seems to be a build issue, but I haven't found the cure-all. Any help appreciated. View the original post : http://www.jboss.com/index.html?module=bbop=viewtopicp=4024681#4024681 Reply to the post : http://www.jboss.com/index.html?module=bbop=postingmode=replyp=4024681 ___ jboss-user mailing list jboss-user@lists.jboss.org https://lists.jboss.org/mailman/listinfo/jboss-user
[jboss-user] [JBoss Portal] - Re: Refreshing a portlet's cache
Unfortunately, no I didn't find a good way to do this. At one point I had my
scheduler bean running but I hadn't figured out how to be sure that it was
using the same classloader as my portlet.
Since my cache refresh was under 10 seconds we decided to let one user per day
take the 'hit' and table the issue. In the future when we are using EJBs I'll
revisit this.
Here is a very simple timer example:
CacheDumpScheduler.java:
package com.foo;
|
| import java.util.Date;
|
| import org.jboss.varia.scheduler.Schedulable;
|
| public class CacheDumpScheduler implements Schedulable {
|
| public void perform(Date now, long remainingRepetitions) {
| MyPortlet.resetCache();
|
| }
|
|
| }
META-INF/jboss-service.xml:
?xml version=1.0 encoding=UTF-8?
| server
| mbean code=org.jboss.varia.scheduler.Scheduler
name=com.foo:service=CacheDumpScheduler
| attribute name=StartAtStartuptrue/attribute
| attribute name=SchedulableClass
|com.foo.CacheDumpScheduler
| /attribute
| attribute name=SchedulableArguments
| /attribute
| attribute name=SchedulableArgumentTypes
| /attribute
| attribute name=InitialStartDateNOW/attribute
| attribute name=SchedulePeriod6000/attribute
| attribute name=InitialRepetitions-1/attribute
| dependsjboss.web:service=WebServer/depends
| /mbean
|
| /server
Hope that helps
Jon
View the original post :
http://www.jboss.com/index.html?module=bbop=viewtopicp=4003389#4003389
Reply to the post :
http://www.jboss.com/index.html?module=bbop=postingmode=replyp=4003389
___
jboss-user mailing list
jboss-user@lists.jboss.org
https://lists.jboss.org/mailman/listinfo/jboss-user
[jboss-user] [JBoss Portal] - Re: Refreshing a portlet's cache
What are you caching? My portlet was caching some statistics from the database. These stats only change late at night, so there was no reason for me to perform the same query all day long. The idea behind my timer was to tell my portlet to access the DB again and save the new data. if you are talking about jboss caching your portlet or HTML fragment, my solution is probably not what you want. In my experience you can change the HTML or JSP fragments while the server is running and it will pick up the changes. However, the server will not pick up changes to the class files or properties files of your portlet. That requires a restart (or maybe just touching application.xml). View the original post : http://www.jboss.com/index.html?module=bbop=viewtopicp=4003501#4003501 Reply to the post : http://www.jboss.com/index.html?module=bbop=postingmode=replyp=4003501 ___ jboss-user mailing list jboss-user@lists.jboss.org https://lists.jboss.org/mailman/listinfo/jboss-user
[jboss-user] [JBoss Portal] - Refreshing a portlet's cache
Hello I'm working with Jboss AS 4.0.3sp1 and JBoss portal 2.2. I have a portlet that displays statistical information about our system on the main page of our website. This information is updated in the database automatically each night. My portlet currently caches the statistical data to ensure quick page loads, but I need a way to tell it to drop it's cache. One solution is to use a timestamp and refresh my data when it's a day old. This will lead to one slow page load for some unlucky user. I want to avoid this. Another solution is to use the Scheduler http://jboss.org/index.html?module=bbop=viewtopict=96668 but I'm not having much luck. I'm reading about MBeans and Classloaders now, but I'm running out of time. Is there another, easier why to do this? Are there any better examples of how to use the scheduler? (I need to understand why JBoss can't find a classloader for my Schedulable bean.) Thanks nollie View the original post : http://www.jboss.com/index.html?module=bbop=viewtopicp=3994719#3994719 Reply to the post : http://www.jboss.com/index.html?module=bbop=postingmode=replyp=3994719 ___ jboss-user mailing list jboss-user@lists.jboss.org https://lists.jboss.org/mailman/listinfo/jboss-user
[jboss-user] [JBoss Portal] - Error handling pattern?
Hello I'm using Portal 2.2 and AS 4.03 SP1, and I'm having trouble finding information on error handling and error pages. Almost every page in my project displays multiple portlets, and when one portlet has an error the entire page fails to render. My goal is to find a safe approach to error handling that would allow the page to render the portlets without errors and replace the one that failed with a user friendly message. Is there a way to do this and still throw a PortletException from doView() or processAction()? I have found very little information on the subject and would appreciate some help or pointers to documentation. thanks nollie View the original post : http://www.jboss.com/index.html?module=bbop=viewtopicp=3983049#3983049 Reply to the post : http://www.jboss.com/index.html?module=bbop=postingmode=replyp=3983049 ___ jboss-user mailing list jboss-user@lists.jboss.org https://lists.jboss.org/mailman/listinfo/jboss-user
[jboss-user] [JBoss Portal] - Re: Error handling pattern?
Thanks Roy! I had not seen that. What I was hoping for was an opportunity to use my own error message which would fit within my margins and be a little more friendly. In any case someone had turned all those values off and I appreciate the tip. I had hoped to use my own messages with some error-page tags in my web.xml. error-page | exception-typejava.lang.Exception/exception-type | location/WEB-INF/jsps/exception.jsp/location | /error-page | error-page | exception-typejavax.portlet.PortletException/exception-type | location/WEB-INF/jsps/portletException.jsp/location | /error-page but I can't seem to get this mechanism to work. If was using these error pages correctly would they fill the portlet, or replace the entire page? If the former, can you point me to information on the subject? I'm unsure which web.xml file this should be placed in - Do I define this for the entire portal or on a portlet by portlet basis? Thanks again! View the original post : http://www.jboss.com/index.html?module=bbop=viewtopicp=3983086#3983086 Reply to the post : http://www.jboss.com/index.html?module=bbop=postingmode=replyp=3983086 ___ jboss-user mailing list jboss-user@lists.jboss.org https://lists.jboss.org/mailman/listinfo/jboss-user
[jboss-user] [Beginners Corner] - Need help setting up error pages
Hello I'm using Jboss 2.2 and I'm having trouble setting up error pages. My application is packaged as a .ear containing multiple .wars - one for the portal and the rest for the portlets. Where do I put this declaration? (which web.xml file?) | error-page | exception-typejava.lang.Exception/exception-type | location/exception.jsp/location | /error-page | error-page | exception-typejavax.portlet.PortletException/exception-type | location/portletException.jsp/location | /error-page | Where should I put the error jsps in relation to the web.xml? Thanks, Jon View the original post : http://www.jboss.com/index.html?module=bbop=viewtopicp=3982807#3982807 Reply to the post : http://www.jboss.com/index.html?module=bbop=postingmode=replyp=3982807 ___ jboss-user mailing list jboss-user@lists.jboss.org https://lists.jboss.org/mailman/listinfo/jboss-user
