I'm having a lot of trouble setting up FORM auth to work properly in JRun,
this must be something trivial but for the life of me I can't figure it
out.
This IS a JRun only issue as I have no trouble deploying my war file with
both Weblogic and Orion with no modifications whatsoever.
Here is the relevant section from my web.xml:
<security-constraint>
<web-resource-collection>
<web-resource-name>User Management
page</web-resource-name>
<url-pattern>/admin/User_add_edit_delete.jsp</url-pattern>
<url-pattern>/userhandler</url-pattern>
<http-method>*</http-method>
</web-resource-collection>
<auth-constraint>
<role-name>UA</role-name>
</auth-constraint>
</security-constraint>
<login-config>
<auth-method>FORM</auth-method>
<form-login-config>
<form-login-page>/login.jsp</form-login-page>
<form-error-page>/loginerror.jsp</form-error-page>
</form-login-config>
</login-config>
<security-role>
<description>User Admin</description>
<role-name>UA</role-name>
</security-role>
And yes, I did read somewhere that JRun doesn't support security-role, but
that's fine, it should just ignore it (according to the spec though, it
should be there).
I do have a custom authenticator installed, but removing that doesn't seem
to fix the issue....no matter what I do, I cannot get my login form to be
displayed. The page is shown as if I hadn't specified any security
restriction on it. I tried with a number of different url patterns, all to
no avail. I'm running with service pack 2a, and still no luck.
Incidentally, what's the logic behind making authentication server
specific, rather than app specific? I'm assuming the
AuthenticationInterface impl can be specified in webapp.properties, but
the docs all talk about putting it in local.properties.
While I'm on the subject of complaining, it also seems that
WEB-INF/lib/*.jar isn't automatically placed in the webapp's classpath (as
per the spec), and that the only way to make that happen is to put it in
the properties file. Am I mistaken in this or is JRun's support for
webapps really that weak?
Hani Suleiman
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Structure your ColdFusion code with Fusebox. Get the official book at
http://www.fusionauthority.com/bkinfo.cfm
Archives: http://www.mail-archive.com/[email protected]/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
