Some containers don't allow your webapp to process "/j_security_check"
requests. I am not sure if OC4J has this issue or not, but based on your
report I think it might.

I would try changing the Acegi Security configuration & login page (form
action) to use /j_acegi_security_check (or similar) instead
of /j_security_check.

-Max

On Tue, 2006-06-27 at 10:37 +0200, Tom Stroobants wrote:
> For a history of reasons we use OC4J (Oracle application Server) as
> our container.
> 
>  
> 
> We use acegi as our security framework, but it seems to be having
> problems with OC4J.
> 
>  
> 
> Some time ago we wanted to use the roller blogging software to use
> blogs on our site … 
> 
> The roller software uses the ACEGI framework under the hood …
> 
>  
> 
> And on debugging the roller software we experienced some problems that
> might be related to ACEGI.
> 
>  
> 
> Problem 1:
> 
>  
> 
> At some point in the AbstractProcessingfilter the
> requiresAuthentication method gets executed. In this method the
> getRequestUri is used:
> 
>  
> 
> String uri = request.getRequestURI();
> 
>  
> 
> When debugging this on tomcat it return /roller/j_security_check BUT
> on OC4J it return /roller/login.jsp
> 
> For on obvious reason the requiresAuthentication method return false
> and the login screen is again displayed.
> 
>  
> 
> I could workaround this problem, but then a second problem occurs …
> 
>  
> 
> Porlbem 2:
> 
>  
> 
> When I put a break point on the first line of code that gets executed
> after the user credentials have been posted I check the
> reqeustParameters and they do not exist …
> 
> It seems that OC4J “loses”’ the parameters somewhere … On tomcat it
> work perfect !
> 
>  
> 
> Anyone had the same problem ? Or anyone here using acegi in
> combination with OC4J ?
> 
>  
> 
> Tips ? Hints ? Bugfix J … ?
> 
>  
> 
> Best regards,
> 
>  
> 
> Tom.
> 
>  
> 
>  
> 
>  
> 
>  
> 
> 
> Using Tomcat but need to do more? Need to support web services, security?
> Get stuff done quickly with pre-integrated technology to make your job easier
> Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
> http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
> _______________________________________________ Home: 
> http://acegisecurity.org Acegisecurity-developer mailing list 
> [email protected] 
> https://lists.sourceforge.net/lists/listinfo/acegisecurity-developer


Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
Home: http://acegisecurity.org
Acegisecurity-developer mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/acegisecurity-developer

Reply via email to