RE: [flexcoders] setUsernamePassword and J2EE login (bounce)
You sure that JAAS successfully stores the Principal back in the user request? If you did something similar via JSP would everything come through correctly? I havent played with JBoss but WebSphere for example failed to store the authenticated principal in the request even when I went through JAAS to login my user in. You traced to see that your login module is called? From: flexcoders@yahoogroups.com [mailto:flexcoders@yahoogroups.com] On Behalf Of Jim Schneider Sent: Tuesday, February 14, 2006 2:12 PM To: flexcoders@yahoogroups.com Subject: FW: [flexcoders] setUsernamePassword and J2EE login (bounce) No one has any thoughts/ideas on this? - Jim Schneider KJ Interactive, Inc. 1-877-370-6906 1-612-605-5399 From: flexcoders@yahoogroups.com [mailto:flexcoders@yahoogroups.com] On Behalf Of Jim Schneider Sent: Saturday, February 04, 2006 12:01 PM To: flexcoders@yahoogroups.com Subject: RE: [flexcoders] setUsernamePassword and J2EE login I finally got back to looking at this. I Instrumented my code to look at flashgateway.Gateway.getHttpRequest().getRemotePrincipal() and getRemoteUser(). RemoteUser is empty and remote principal is null. I see the userid/password credentials in the amf trace from the client (setting UsernamePassword on the service), but nothing in the service. Im using remote objects. Remote object is a spring bean. Ive implemented a JAAS login module that appears to be functioning correctly (loginContext succeeds). Using JBoss 4.0.x. Any thoughts? Thanks, Jim From: flexcoders@yahoogroups.com [mailto:flexcoders@yahoogroups.com] On Behalf Of Carson Hager Sent: Saturday, January 21, 2006 10:22 PM To: flexcoders@yahoogroups.com Subject: RE: [flexcoders] setUsernamePassword and J2EE login If you use standard J2EE auth to the container, you can get the remote user provided you are not using the proxy. There is currently an issue with the proxy not forwarding the cookie in most ( all that we've seen ) circumstances. We have received a fix from Adobe on this that we are in the process of testing. This being said, if you don't use the proxy, you'll be able to acccess the user without issue from within your service implementations. Here's the kicker. The AS2 VM doesn't not handle HTTP status code 500. It stops parsing the HTTP response when it sees a 500 which means that you will never be able to get at any data that occurs due to a SOAP Fault. Per the web services spec, the container is required to return an HTTP 500 status code when returning a fault. Effectively, you can't handle SOAP faults when you don't use the proxy and you get that meaningless error message that looks like it simply couldn't connect to the service. This issue is handled by the proxy. It changes that HTTP status code to 200 so that the flash player can parse the request. This is a kludge if you ask me but that's where we are today. As a note, this is being addressed in FP8.5 but the fix will very likely not ( according to Adobe ) be fixed in earlier versions due to backward compatibility. Carson Carson Hager Cynergy Systems, Inc. http://www.cynergysystems.com Email: [EMAIL PROTECTED] Office: 866-CYNERGY Mobile: 1.703.489.6466 From: flexcoders@yahoogroups.com [mailto:flexcoders@yahoogroups.com] On Behalf Of Matt Chotin Sent: Saturday, January 21, 2006 7:37 PM To: flexcoders@yahoogroups.com Subject: RE: [flexcoders] setUsernamePassword and J2EE login I think you should be able to get it from the flashgateway.Gateway.getHttpRequest().getRemotePrincipal() or getRemoteUser(). From: flexcoders@yahoogroups.com [mailto:flexcoders@yahoogroups.com] On Behalf Of Jim Schneider Sent: Wednesday, January 18, 2006 8:32 AM To: flexcoders@yahoogroups.com Subject: [flexcoders] setUsernamePassword and J2EE login After calling setUsernamePassword on a service, is this information available to the backend services (remote object or web service)? Or perhaps after a J2EE/JAAS login? If so, how/where? We have a requirement to do a lot of logging of whos doing what in the system and was wondering whether there are any alternatives to passing a username/id with most/all APIs. Thanks for any help. Jim -- Flexcoders Mailing List FAQ: http://groups.yahoo.com/group/flexcoders/files/flexcodersFAQ.txt Search Archives: http://www.mail-archive.com/flexcoders%40yahoogroups.com SPONSORED LINKS Web site design development Computer software development Software design and development Macromedia flex Software development best practice
RE: [flexcoders] setUsernamePassword and J2EE login
I finally got back to looking at this. I Instrumented my code to look at flashgateway.Gateway.getHttpRequest().getRemotePrincipal() and getRemoteUser(). RemoteUser is empty and remote principal is null. I see the userid/password credentials in the amf trace from the client (setting UsernamePassword on the service), but nothing in the service. Im using remote objects. Remote object is a spring bean. Ive implemented a JAAS login module that appears to be functioning correctly (loginContext succeeds). Using JBoss 4.0.x. Any thoughts? Thanks, Jim From: flexcoders@yahoogroups.com [mailto:[EMAIL PROTECTED] On Behalf Of Carson Hager Sent: Saturday, January 21, 2006 10:22 PM To: flexcoders@yahoogroups.com Subject: RE: [flexcoders] setUsernamePassword and J2EE login If you use standard J2EE auth to the container, you can get the remote user provided you are not using the proxy. There is currently an issue with the proxy not forwarding the cookie in most ( all that we've seen ) circumstances. We have received a fix from Adobe on this that we are in the process of testing. This being said, if you don't use the proxy, you'll be able to acccess the user without issue from within your service implementations. Here's the kicker. The AS2 VM doesn't not handle HTTP status code 500. It stops parsing the HTTP response when it sees a 500 which means that you will never be able to get at any data that occurs due to a SOAP Fault. Per the web services spec, the container is required to return an HTTP 500 status code when returning a fault. Effectively, you can't handle SOAP faults when you don't use the proxy and you get that meaningless error message that looks like it simply couldn't connect to the service. This issue is handled by the proxy. It changes that HTTP status code to 200 so that the flash player can parse the request. This is a kludge if you ask me but that's where we are today. As a note, this is being addressed in FP8.5 but the fix will very likely not ( according to Adobe ) be fixed in earlier versions due to backward compatibility. Carson Carson Hager Cynergy Systems, Inc. http://www.cynergysystems.com Email: [EMAIL PROTECTED] Office: 866-CYNERGY Mobile: 1.703.489.6466 From: flexcoders@yahoogroups.com [mailto:[EMAIL PROTECTED] On Behalf Of Matt Chotin Sent: Saturday, January 21, 2006 7:37 PM To: flexcoders@yahoogroups.com Subject: RE: [flexcoders] setUsernamePassword and J2EE login I think you should be able to get it from the flashgateway.Gateway.getHttpRequest().getRemotePrincipal() or getRemoteUser(). From: flexcoders@yahoogroups.com [mailto:[EMAIL PROTECTED] On Behalf Of Jim Schneider Sent: Wednesday, January 18, 2006 8:32 AM To: flexcoders@yahoogroups.com Subject: [flexcoders] setUsernamePassword and J2EE login After calling setUsernamePassword on a service, is this information available to the backend services (remote object or web service)? Or perhaps after a J2EE/JAAS login? If so, how/where? We have a requirement to do a lot of logging of whos doing what in the system and was wondering whether there are any alternatives to passing a username/id with most/all APIs. Thanks for any help. Jim -- Flexcoders Mailing List FAQ: http://groups.yahoo.com/group/flexcoders/files/flexcodersFAQ.txt Search Archives: http://www.mail-archive.com/flexcoders%40yahoogroups.com SPONSORED LINKS Web site design development Computer software development Software design and development Macromedia flex Software development best practice YAHOO! GROUPS LINKS Visit your group "flexcoders" on the web. To unsubscribe from this group, send an email to:[EMAIL PROTECTED] Your use of Yahoo! Groups is subject to the Yahoo! Terms of Service.
RE: [flexcoders] setUsernamePassword and J2EE login
I think you should be able to get it from the flashgateway.Gateway.getHttpRequest().getRemotePrincipal() or getRemoteUser(). From: flexcoders@yahoogroups.com [mailto:[EMAIL PROTECTED] On Behalf Of Jim Schneider Sent: Wednesday, January 18, 2006 8:32 AM To: flexcoders@yahoogroups.com Subject: [flexcoders] setUsernamePassword and J2EE login After calling setUsernamePassword on a service, is this information available to the backend services (remote object or web service)? Or perhaps after a J2EE/JAAS login? If so, how/where? We have a requirement to do a lot of logging of whos doing what in the system and was wondering whether there are any alternatives to passing a username/id with most/all APIs. Thanks for any help. Jim -- Flexcoders Mailing List FAQ: http://groups.yahoo.com/group/flexcoders/files/flexcodersFAQ.txt Search Archives: http://www.mail-archive.com/flexcoders%40yahoogroups.com SPONSORED LINKS Web site design development Computer software development Software design and development Macromedia flex Software development best practice YAHOO! GROUPS LINKS Visit your group "flexcoders" on the web. To unsubscribe from this group, send an email to:[EMAIL PROTECTED] Your use of Yahoo! Groups is subject to the Yahoo! Terms of Service.
RE: [flexcoders] setUsernamePassword and J2EE login
If you use standard J2EE auth to the container, you can get the remote user provided you are not using the proxy. There is currently an issue with the proxy not forwarding the cookie in most ( all that we've seen ) circumstances. We have received a fix from Adobe on this that we are in the process of testing. This being said, if you don't use the proxy, you'll be able to acccess the user without issue from within your service implementations. Here's the kicker. The AS2 VM doesn't not handle HTTP status code 500. It stops parsing the HTTP response when it sees a 500 which means that you will never be able to get at any data that occurs due to a SOAP Fault. Per the web services spec, the container is required to return an HTTP 500 status code when returning a fault. Effectively, you can't handle SOAP faults when you don't use the proxy and you get that meaningless error message that looks like it simply couldn't connect to the service. This issue is "handled" by the proxy. It changes that HTTP status code to 200 so that the flash player can parse the request. This is a kludge if you ask me but that's where we are today. As a note, this is being addressed in FP8.5 but the fix will very likely not ( according to Adobe ) be fixed in earlier versions due to backward compatibility. Carson Carson Hager Cynergy Systems, Inc. http://www.cynergysystems.com Email: [EMAIL PROTECTED] Office: 866-CYNERGY Mobile: 1.703.489.6466 From: flexcoders@yahoogroups.com [mailto:[EMAIL PROTECTED] On Behalf Of Matt ChotinSent: Saturday, January 21, 2006 7:37 PMTo: flexcoders@yahoogroups.comSubject: RE: [flexcoders] setUsernamePassword and J2EE login I think you should be able to get it from the flashgateway.Gateway.getHttpRequest().getRemotePrincipal() or getRemoteUser(). From: flexcoders@yahoogroups.com [mailto:[EMAIL PROTECTED] On Behalf Of Jim SchneiderSent: Wednesday, January 18, 2006 8:32 AMTo: flexcoders@yahoogroups.comSubject: [flexcoders] setUsernamePassword and J2EE login After calling setUsernamePassword on a service, is this information available to the backend services (remote object or web service)? Or perhaps after a J2EE/JAAS login? If so, how/where? We have a requirement to do a lot of logging of whos doing what in the system and was wondering whether there are any alternatives to passing a username/id with most/all APIs. Thanks for any help. Jim -- Flexcoders Mailing List FAQ: http://groups.yahoo.com/group/flexcoders/files/flexcodersFAQ.txt Search Archives: http://www.mail-archive.com/flexcoders%40yahoogroups.com SPONSORED LINKS Web site design development Computer software development Software design and development Macromedia flex Software development best practice YAHOO! GROUPS LINKS Visit your group "flexcoders" on the web. To unsubscribe from this group, send an email to:[EMAIL PROTECTED] Your use of Yahoo! Groups is subject to the Yahoo! Terms of Service.
Re: [flexcoders] setUsernamePassword and J2EE login
I'm using JRun, setUserNamePassword() uses JAAS and sets up a J2EE session, username being the principal. Make use of the flashgateway.jar and use flashgateway.Gateway.getHttpRequest().getUserPrincipal().getName(); Note clearUserNamePassword() pretty much does nothing...need to do clear the session on the server side DK On 1/18/06, Jim Schneider [EMAIL PROTECTED] wrote: After calling setUsernamePassword on a service, is this information available to the backend services (remote object or web service)? Or perhaps after a J2EE/JAAS login? If so, how/where? We have a requirement to do a lot of logging of who's doing what in the system and was wondering whether there are any alternatives to passing a username/id with most/all APIs. Thanks for any help. Jim -- Flexcoders Mailing List FAQ: http://groups.yahoo.com/group/flexcoders/files/flexcodersFAQ.txt Search Archives: http://www.mail-archive.com/flexcoders%40yahoogroups.com YAHOO! GROUPS LINKS Visit your group flexcoders on the web. To unsubscribe from this group, send an email to: [EMAIL PROTECTED] Your use of Yahoo! Groups is subject to the Yahoo! Terms of Service. -- Douglas Knudsen http://www.cubicleman.com this is my signature, like it? -- Flexcoders Mailing List FAQ: http://groups.yahoo.com/group/flexcoders/files/flexcodersFAQ.txt Search Archives: http://www.mail-archive.com/flexcoders%40yahoogroups.com Yahoo! Groups Links * To visit your group on the web, go to: http://groups.yahoo.com/group/flexcoders/ * To unsubscribe from this group, send an email to: [EMAIL PROTECTED] * Your use of Yahoo! Groups is subject to: http://docs.yahoo.com/info/terms/
