Hi Melvin,

 

I had a similar issue regarding SSO and authentication, the problem I had was overcome by doing the following

 

<!-- Harvest the SSO Cookie -->

<storeCookie

    description="Store JSESSIONIDSSO cookie value" 

    name="JSESSIONIDSSO"

    property="sessidSSO"

/>

<!-- Invoke the target page directly, pass the SSO cookie value with the request -->

<invoke

    description="Go to start add KPI page"

    url="http://${gen_host}:${gen_port}/revenueoffice/secure/KPIs/StartCreateKPI.do?JSESSIONIDSSO=#{sessidSSO}"

/>

 

A good tool to view the http traffic between server and client is Fiddler (http://www.fiddlertool.com/Fiddler/) you will be able to see all the redirections and cookie value assignments as the user logs in…

 

Hope this helps a bit…

 

Regards,

Colin.

 

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of MELVIN CHEE
Sent: 07 July 2006 10:30
To: [email protected]
Subject: [Webtest] Oracle SSO

 


Hi gurus,


I intend to test my j2ee application with Webtest. The
application is deployed on a Oracle 10g Application Server.

 

All users need to login via Oracle Single-Sign On. I hit a brick
wall when I discovered that Oracle Single-Sign uses several
redirections and cookie injections to authenticate users.

I have found a article describing how to "follow" the redirections
using httpunit.

 

As you can see Oracle uses a lot of page redirects as well as
cookies to handle SSO. However, I am not sure how the same
can be done with Webtest.

My webtest script keep returning with a 401 error when i reference
the first page of my application. In a typical user scenario,
the browser will be redirected to the Oracle SSO Login page first.

I suspect that Webtest stalled at the login page.

 

The Webtest script always stall when it is trying to establish the
connection to the deployed application (the waitfor tag).
I am never able to reach the first webtest case.

 

Any ideas guys?

 

 


Now you can scan emails quickly with a reading pane. Get the new Yahoo! Mail.

Reply via email to