Forum:

Web Component Certification (OCEJWCD)

Studying HeadFirst book: cannot make authentification

Ranch Hand

Posts: 93

posted 14 years ago

Number of slices to send:

Optional 'thank-you' note:

Send

Hello Everyone!

I'm studying Servlets/JSP using famous HeadFirst book and now in the chapter about Authentication. The problem is that I cannot login to my web app. I dont know why. I use FORM authentication method and I have created the login form. But when I enter username and password nothing going on. It just redirects me to the error login page. I am using the login and password from tomcat-users.xml:

Exactly the same situation was when I was trying to use BASIC authentication method, except that it was not redirecting me to error page, but showing password dialog again. What should I do to fix this? I have forgotten to implement something, I guess....

Ankit Garg

Sheriff

Posts: 9708

I like...

posted 14 years ago

Number of slices to send:

Optional 'thank-you' note:

Send

Can you show us the security configuration that you are using in your web.xml...

SCJP 6 | SCWCD 5 | Javaranch SCJP FAQ | SCWCD Links

Java 8 (verified skill)
Skill verified by Jeanne Boyarsky

Dmitry Zhuravlev

Ranch Hand

Posts: 93

posted 14 years ago

Number of slices to send:

Optional 'thank-you' note:

Send

Yes sure.

<?xml version="1.0" encoding="UTF-8"?>

<web-app xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
         xmlns="http://java.sun.com/xml/ns/javaee"
         xmlns:web="http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd"
         xsi:schemaLocation="http://java.sun.com/xml/ns/javaee
         http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd" id="WebApp_ID" version="2.5">

<login-config>
        <auth-method>FORM</auth-method>
        <form-login-config>
            <form-login-page>/loginpage.html</form-login-page>
            <form-error-page>/loginerror.html</form-error-page>
        </form-login-config>
    </login-config>

<security-role><role-name>Admin</role-name> </security-role>
    <security-role><role-name>Member</role-name> </security-role>
    <security-role><role-name>Guest</role-name> </security-role>

<security-constraint>
        <web-resource-collection>
            <web-resource-name>RestrictedArea</web-resource-name>
            <url-pattern>/newform.html</url-pattern>
            <http-method>GET</http-method>
            <http-method>POST</http-method>
        </web-resource-collection>
        <auth-constraint>
            <role-name>Admin</role-name>
            <role-name>Member</role-name>
        </auth-constraint>
        <user-data-constraint>
            <transport-guarantee>CONFIDENTIAL</transport-guarantee>
        </user-data-constraint>
    </security-constraint>

</web-app>

Christophe Verré

Sheriff

Posts: 14691

I like...

posted 14 years ago

Number of slices to send:

Optional 'thank-you' note:

Send

Can you also show loginpage.html, and also which url you are accessing ?

[My Blog]
All roads lead to JavaRanch

Rajeev Rnair

Ranch Hand

Posts: 310

I like...

posted 14 years ago

Number of slices to send:

Optional 'thank-you' note:

Send

Hi, Since you have added <transport-guarantee> as CONFIDENTIAL, after login page container will redirect to an https page. If you haven't configured https in tomcat, it may redirect to login-error page. Please comment the <user-data-constraint> and see if it works!

SCJP6, SCWCD5, OCP-JBCD5, OCE-JWSD6 OCE-JPAD6 , OCM-JEA5 1,OCM-JEA5 2,3,OCJP8 - Brainbench certifications: J2EE, Java2, Java2-NonGUI, JSP, SQL2000 Admin, SQL2000 Programming , Brainbench certified Java Programmer, Computer Programmer, Web Developer, Database Administrator

Dmitry Zhuravlev

Ranch Hand

Posts: 93

posted 14 years ago

Number of slices to send:

Optional 'thank-you' note:

Send

Christophe,
its simple:

But authentication doesn't work even if I use the BASIC type.

Rajeev,
unfortunately this doesn't help

Rajeev Rnair

Ranch Hand

Posts: 310

I like...

posted 14 years ago

Number of slices to send:

Optional 'thank-you' note:

Send

Hi Dmitry, when you change <auth-method> to BASIC, are you getting the default tomcat login page? If so, what happens when you submit?
Also please show the URL you are trying to access.

Thanks,

Dmitry Zhuravlev

Ranch Hand

Posts: 93

posted 14 years ago

Number of slices to send:

Optional 'thank-you' note:

Send

Rajeev, here are some news:

I am using NetBeans IDE under which my tomcat runs. It turned out that there is a SECOND tomcat-users.xml file located in my documents/netbeans/... folder. And it really works. I have added my users and roles to that file and now BASIC authentication WORKS! But FORM authentication still redirects me to the error page

I try to reach MYAPPNAME/newform.html

When I am using BASIC authentocation (which now works) I see a standart javascript dialog for entering login/password in Firefox and much more goodlooking Windows7 login screen dialog in IE.

Frits Walraven

Creator of Enthuware JWS+ V6

Posts: 3412

320

I like...

posted 14 years ago

Number of slices to send:

Optional 'thank-you' note:

Send

Hi Dmitry,

You have identified the correct tomcat-users.xml.

Have you tried accessing the login page directly like:
MYAPPNAME/loginpage.html

Is that possible?

Regards,
Frits

Dmitry Zhuravlev

Ranch Hand

Posts: 93

posted 14 years ago

Number of slices to send:

Optional 'thank-you' note:

Send

Frits,
yes this is possible. Actually reaching login page never was a problem, but still I cannot login using FORM authentication method.

May be the reason is Netbeans. It has its own account called ide and probably user is logged in automatically while using NetBeans. What usually happens when the user that is logged in tries to log in second time via login form?

Rajeev Rnair

Ranch Hand

Posts: 310

I like...

posted 14 years ago

Number of slices to send:

Optional 'thank-you' note:

Send

Hi Dmitry, could you please deploy your code in a standalone Tomcat (ver 5.5) and see if it makes any difference?

Frits Walraven

Creator of Enthuware JWS+ V6

Posts: 3412

320

I like...

posted 14 years ago

Number of slices to send:

Optional 'thank-you' note:

Send

What usually happens when the user that is logged in tries to log in second time via login form?

Nothing, a user only has to login once.

Does netbeans have an integrated browser? Otherwise try accessing the protected URL via another browser (different user, so should give you the login page). Or maybe netbeans hasn't implemented the FORM authentication... try tomcat as Rajeev was suggesting.

Regards,
Frits

Dmitry Zhuravlev

Ranch Hand

Posts: 93

posted 14 years ago

Number of slices to send:

Optional 'thank-you' note:

Send

Frits,
actually I am using tomcat, as far as I understand netbeans is just an interface.

OK, I will try to deploy application on server though I was never doing this.. Now I have started the server without Netbeans, and copied my build folder from my documents to webapps. Now I can open every html form in my application, it looks like tomcat is not using my web.xml file. It is set properly: in the webapps/myapp/WEB-INF. What should I do after coping my build files to server webapp folder to deploy my application manually? At the moment my web.xml is out of the game.

Frits Walraven

Creator of Enthuware JWS+ V6

Posts: 3412

320

I like...

posted 14 years ago

Number of slices to send:

Optional 'thank-you' note:

Send

Hi Dmitry,

Creating a war file manually is done like this (example from SCWCD Study Guide by David Bridgewater)

Set the classpath to include the servlet.jar of tomcat:

set classpath=.;C:\Program Files\Apache Software Foundation\Tomcat 5.5\common\lib\servlet-api.jar

Compile your Servlet:

javac webcert\ch03\ex0304\MicroPaymentServlet.java -d ..\classes

Create a war file:

jar cvf0 ex0304.war .

Copying the war file to tomcat webapps folder:

C:\Program Files\Apache Software Foundation\Tomcat 5.5\webapps\

Start tomcat

C:\Program Files\Apache Software Foundation\Tomcat 5.5\bin\tomcat5.exe

Regards,
Frits

Dmitry Zhuravlev

Ranch Hand

Posts: 93

posted 14 years ago

Number of slices to send:

Optional 'thank-you' note:

Send

Fixed!!!

Guys, thank you all for the assistance. The problem was in the loginform file which had different quotas inside because of copy-pasting from the book. I often meet this type of error, I should have been more concentrated. Now I will proceed with the last chapter of the book. Thanks!

Nothing up my sleeve ... and ... presto! A tiny ad:

Smokeless wood heat with a rocket mass heater

https://woodheat.net