Yep, using the right package definitely helps but I am still not able to make it work properly.
I am not getting any exceptions when I start Jetty (I followed this helpful post to configure Jetty to use SSL too: http://markmail.org/message/nnzgq3yzbkxlvvx2#query:appfuse%20jetty%20ssl+page:1+mid:snxnys7chmfpw4ws+state:results), and I am able to use the application either with HTTP and with HTTPS. The problem is that it is not switching from HTTP to HTTPS like I set on 'filterChainProxy'. Now I am wondering if this bean 'filterChainProxy' I included in security.xml following this post (http://www.nabble.com/Appfuse-2-SSL-switching-td14878223.html#a14878223) is being used at all, and if there is some other place in security.xml or another config file I need to change to make acegi to use it. So my current security.xml is exactly like the original security.xml you get when you start a new AppFuse JSF project. I then added the following entries. Note that I had to remove some bean references from 'filterInvocationDefinitionSource' from the steps described on the post mentioned above. The references I removed are "httpSessionContextIntegrationFilter,logoutFilter,authenticationProcessingFilter,securityContextHolderAwareRequestFilter,anonymousProcessingFilter,exceptionTranslationFilter,filterInvocationInterceptor" because these were giving me errors like "NoSuchBeanDefinitionException: No bean named 'filterInvocationInterceptor' is defined". I suppose these should work on a different flavor or version of AppFuse? Can anyone point what I may need to do to have the switch rules defined below applied on a AppFuse JSF application? <beans:bean id="filterChainProxy" class="org.springframework.security.util.FilterChainProxy"> <beans:property name="filterInvocationDefinitionSource"> <beans:value> CONVERT_URL_TO_LOWERCASE_BEFORE_COMPARISON PATTERN_TYPE_APACHE_ANT /**=channelProcessingFilter </beans:value> </beans:property> </beans:bean> <beans:bean id="channelProcessingFilter" class="org.springframework.security.securechannel.ChannelProcessingFilter"> <beans:property name="channelDecisionManager" ref="channelDecisionManager"/> <beans:property name="filterInvocationDefinitionSource"> <beans:value> PATTERN_TYPE_APACHE_ANT /login*=REQUIRES_SECURE_CHANNEL /j_security_check*=REQUIRES_SECURE_CHANNEL /admin/**=REQUIRES_SECURE_CHANNEL /**=REQUIRES_SECURE_CHANNEL </beans:value> </beans:property> </beans:bean> <beans:bean id="channelDecisionManager" class="org.springframework.security.securechannel.ChannelDecisionManagerImpl"> <beans:property name="channelProcessors"> <beans:list> <beans:bean class="org.springframework.security.securechannel.SecureChannelProcessor"/> <beans:bean class="org.springframework.security.securechannel.InsecureChannelProcessor"/> </beans:list> </beans:property> </beans:bean> Any help is appreciated, Pedro Burglin mraible wrote: > > I'd try using org.springframework.security.* instead of > org.acegisecurity.*. > > HTH, > > Matt > > On Wed, Jul 23, 2008 at 12:33 PM, pedro_burglin <[EMAIL PROTECTED]> > wrote: > >> >> Hi All, >> >> I am trying to setup http/https switch for certain pages of AppFuse 2 >> JSF. >> >> I am running Tomcat 6 and I set up the SSL part of it (created the >> certificate and uncommented the SSL connector). I am using default ports >> (8080 / 8443). I am now able to access the site both on ports 8080 (http) >> and on 8443 (https) but I would like to setup automatic switch from http >> to >> https when user goes to the login screen, and back to http when he logs >> off. >> >> I found this link describing how to do it for AppFuse with struts but I >> was >> unable to use it on my JSF app: >> >> URL: >> http://www.nabble.com/Appfuse-2-SSL-switching-td14878223.html#a14878223 >> I follow the changes to security.xml but I get multiple >> ClassNotFoundException for classes like >> "org.acegisecurity.util.FilterChainProxy". Since I also had to make minor >> changes to the XML additions to conform with the schema I am not sure if >> that is the right approach anymore... >> >> Does anyone know how to setup AppFuse with JSF so I can specify URLs I >> want >> it to automatically switch to HTTPS or HTTP? >> >> Any help is greatly appreciated, >> Pedro Burglin >> -- >> View this message in context: >> http://www.nabble.com/AppFuse-2-JSF-how-to-setup-https-switch-tp18617807s2369p18617807.html >> Sent from the AppFuse - User mailing list archive at Nabble.com. >> >> >> --------------------------------------------------------------------- >> To unsubscribe, e-mail: [EMAIL PROTECTED] >> For additional commands, e-mail: [EMAIL PROTECTED] >> >> > > -- View this message in context: http://www.nabble.com/AppFuse-2-JSF-how-to-setup-https-switch-tp18617807s2369p18634564.html Sent from the AppFuse - User mailing list archive at Nabble.com. --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
