Login Exception when using JDBC Realm (Glassfish V3.1 + IceFaces 2 + MySQL)

[Philip Gutierrez]

Hi guys,

I am having this weird error when trying to login in using container-managed security using a JDBC Realm, basically was happens is that even though the JDBC realm is set to my login config, it still uses the file realm.

I searching the internet for help, they didn't work for me.

Here's my configuration:

My Login Page:

<form action="j_security_check"
              method="POST">
            <table>
                 <tbody>
                     <tr>
                         <td>Username:</td>
                         <td><input type="text" name="j_username"/></td>
                     </tr>
                     <tr>
                         <td>Password</td>
                         <td><input type="password" name="j_password"/></td>
                     </tr>
                     <tr>
                         <td> </td>
                         <td><input type="submit" value="Login"/></td>
                     </tr>
                 </tbody>
             </table>
        </form>

web.xml security definition:

    <security-constraint>
        <display-name>Constraint1</display-name>
        <web-resource-collection>
            <web-resource-name>Resource1</web-resource-name>
            <description/>
            <url-pattern>/pages/*</url-pattern>
        </web-resource-collection>
        <auth-constraint>
            <description/>
            <role-name>ADMIN</role-name>
            <role-name>SUBSCRIBER</role-name>
        </auth-constraint>
    </security-constraint>
    
    <login-config>
        <auth-method>FORM</auth-method>
        <realm-name>phonechat-realm</realm-name>
        <form-login-config>
            <form-login-page>/login/login.jsp</form-login-page>
            <form-error-page>/login/error.jsp</form-error-page>
        </form-login-config>
    </login-config>
    <security-role>
        <description/>
        <role-name>SUBSCRIBER</role-name>
    </security-role>
    <security-role>
        <description/>
        <role-name>ADMIN</role-name>
    </security-role>

sun-web.xml security role mapping:

  <security-role-mapping>
    <role-name>ADMIN</role-name>
    <group-name>ADMIN</group-name>
  </security-role-mapping>
  <security-role-mapping>
    <role-name>SUBSCRIBER</role-name>
    <group-name>SUBSCRIBER</group-name>
  </security-role-mapping>

my database table:

DROP TABLE IF EXISTS `projectv`.`UserTable`;
CREATE TABLE `UserTable` (
    `username` VARCHAR(128) NOT NULL,
    `password` VARCHAR(128) NOT NULL,
    CONSTRAINT `USER_PK` PRIMARY KEY (`username`)
) ENGINE=InnoDB;

DROP TABLE IF EXISTS `projectv`.`GroupTable`;
CREATE TABLE `GroupTable` (
    `username` VARCHAR(128) NOT NULL,
    `group_id` VARCHAR(128) NOT NULL,
    CONSTRAINT `GROUP_PK` PRIMARY KEY (`username`, `group_id`),
    CONSTRAINT `USER_FK` FOREIGN KEY (`username`) REFERENCES `UserTable`(`username`)
    ON DELETE CASCADE ON UPDATE RESTRICT
) ENGINE=InnoDB;

INSERT INTO `UserTable` VALUES ('admin', '0192023a7bbd73250516f069df18b500');
INSERT INTO `GroupTable` VALUES ('admin', 'SUBSCRIBER');
INSERT INTO `GroupTable` VALUES ('admin', 'ADMIN');
INSERT INTO `UserTable` VALUES ('pedro', 'd3ce9efea6244baa7bf718f12dd0c331');
INSERT INTO `GroupTable` VALUES ('pedro', 'SUBSCRIBER');

My realm configuration:

Configuration Name: default-config
Realm Name: theRealm
Class Name: com.sun.enterprise.security.auth.realm.jdbc.JDBCRealm

JAAS Context: theRealm
JNDI: jdbc/therealm
User Table:UserTable
User Name Column: username
Password Column: password
Group Table: GroupTable
Group Name Column: group_id
Assign Groups:
Database User:
Database Password:
Digest Algorithm: MD5
Encoding:
Charset:

My Connection Pool Settings:

theRealmPool

user: root
password: java
databaseName: theDatabase
serverName: localhost
portNumber: 3306

Here's the exception:

com.sun.enterprise.security.auth.login.common.LoginException: Login failed: Failed file login for admin.
        at com.sun.enterprise.security.auth.login.LoginContextDriver.doPasswordLogin(LoginContextDriver.java:394)
        at com.sun.enterprise.security.auth.login.LoginContextDriver.login(LoginContextDriver.java:240)
        at com.sun.enterprise.security.auth.login.LoginContextDriver.login(LoginContextDriver.java:153)
        at com.sun.web.security.RealmAdapter.authenticate(RealmAdapter.java:483)
        at com.sun.web.security.RealmAdapter.authenticate(RealmAdapter.java:425)
        at org.apache.catalina.authenticator.FormAuthenticator.authenticate(FormAuthenticator.java:269)
        at org.apache.catalina.authenticator.AuthenticatorBase.processSecurityCheck(AuthenticatorBase.java:909)
        at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:546)
        at org.apache.catalina.core.StandardPipeline.doInvoke(StandardPipeline.java:623)
        at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:595)
        at com.sun.enterprise.web.WebPipeline.invoke(WebPipeline.java:98)
        at com.sun.enterprise.web.PESessionLockingStandardPipeline.invoke(PESessionLockingStandardPipeline.java:91)
        at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:162)
        at org.apache.catalina.connector.CoyoteAdapter.doService(CoyoteAdapter.java:326)
        at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:227)
        at com.sun.enterprise.v3.services.impl.ContainerMapper.service(ContainerMapper.java:170)
        at com.sun.grizzly.http.ProcessorTask.invokeAdapter(ProcessorTask.java:822)
        at com.sun.grizzly.http.ProcessorTask.doProcess(ProcessorTask.java:719)
        at com.sun.grizzly.http.ProcessorTask.process(ProcessorTask.java:1013)
        at com.sun.grizzly.http.DefaultProtocolFilter.execute(DefaultProtocolFilter.java:225)
        at com.sun.grizzly.DefaultProtocolChain.executeProtocolFilter(DefaultProtocolChain.java:137)
        at com.sun.grizzly.DefaultProtocolChain.execute(DefaultProtocolChain.java:104)
        at com.sun.grizzly.DefaultProtocolChain.execute(DefaultProtocolChain.java:90)
        at com.sun.grizzly.http.HttpProtocolChain.execute(HttpProtocolChain.java:79)
        at com.sun.grizzly.ProtocolChainContextTask.doCall(ProtocolChainContextTask.java:54)
        at com.sun.grizzly.SelectionKeyContextTask.call(SelectionKeyContextTask.java:59)
        at com.sun.grizzly.ContextTask.run(ContextTask.java:71)
        at com.sun.grizzly.util.AbstractThreadPool$Worker.doWork(AbstractThreadPool.java:532)
        at com.sun.grizzly.util.AbstractThreadPool$Worker.run(AbstractThreadPool.java:513)
        at java.lang.Thread.run(Thread.java:662)

I was expecting to receive a LoginException: Failed jdbc login for admin

Any suggestion will help.

[Udara Amarasinghe]

Hi Philip,

Did you create appropriate JDBC Connection pool and JDBC Resource in glass fish server. That have connections with your database and JDBC realm?

[Philip Gutierrez]

I fix the problem about detecting the file realm only, I made sure that the JDBC Pool properties are correct and the JNDI name is proper.

User: root  
Password: java  
databaseName: theDatabase  
serverName: localhost  
portNumber: 3306 
driverClass: com.mysql.jdbc.Driver
URL: jdbc:mysql://localhost:3306/projectv

But I now get a new exception.

WARNING: WEB9102: Web Login Failed: com.sun.enterprise.security.auth.login.common.LoginException: Login failed: No LoginModules configured for phoneChatRealm
WARNING: Exception
com.sun.enterprise.security.auth.login.common.LoginException: Login failed: No LoginModules configured for phoneChatRealm
        at com.sun.enterprise.security.auth.login.LoginContextDriver.doPasswordLogin(LoginContextDriver.java:394)
        at com.sun.enterprise.security.auth.login.LoginContextDriver.login(LoginContextDriver.java:240)
        at com.sun.enterprise.security.auth.login.LoginContextDriver.login(LoginContextDriver.java:153)
        at com.sun.web.security.RealmAdapter.authenticate(RealmAdapter.java:483)
        at com.sun.web.security.RealmAdapter.authenticate(RealmAdapter.java:425)
        at org.apache.catalina.authenticator.FormAuthenticator.authenticate(FormAuthenticator.java:269)
        at org.apache.catalina.authenticator.AuthenticatorBase.processSecurityCheck(AuthenticatorBase.java:909)
        at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:546)
        at org.apache.catalina.core.StandardPipeline.doInvoke(StandardPipeline.java:623)
        at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:595)
        at com.sun.enterprise.web.WebPipeline.invoke(WebPipeline.java:98)
        at com.sun.enterprise.web.PESessionLockingStandardPipeline.invoke(PESessionLockingStandardPipeline.java:91)
        at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:162)
        at org.apache.catalina.connector.CoyoteAdapter.doService(CoyoteAdapter.java:326)
        at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:227)
        at com.sun.enterprise.v3.services.impl.ContainerMapper.service(ContainerMapper.java:170)
        at com.sun.grizzly.http.ProcessorTask.invokeAdapter(ProcessorTask.java:822)
        at com.sun.grizzly.http.ProcessorTask.doProcess(ProcessorTask.java:719)
        at com.sun.grizzly.http.ProcessorTask.process(ProcessorTask.java:1013)
        at com.sun.grizzly.http.DefaultProtocolFilter.execute(DefaultProtocolFilter.java:225)
        at com.sun.grizzly.DefaultProtocolChain.executeProtocolFilter(DefaultProtocolChain.java:137)
        at com.sun.grizzly.DefaultProtocolChain.execute(DefaultProtocolChain.java:104)
        at com.sun.grizzly.DefaultProtocolChain.execute(DefaultProtocolChain.java:90)
        at com.sun.grizzly.http.HttpProtocolChain.execute(HttpProtocolChain.java:79)
        at com.sun.grizzly.ProtocolChainContextTask.doCall(ProtocolChainContextTask.java:54)
        at com.sun.grizzly.SelectionKeyContextTask.call(SelectionKeyContextTask.java:59)
        at com.sun.grizzly.ContextTask.run(ContextTask.java:71)
        at com.sun.grizzly.util.AbstractThreadPool$Worker.doWork(AbstractThreadPool.java:532)
        at com.sun.grizzly.util.AbstractThreadPool$Worker.run(AbstractThreadPool.java:513)
        at java.lang.Thread.run(Thread.java:662)
Caused by: javax.security.auth.login.LoginException: No LoginModules configured for phoneChatRealm
        at javax.security.auth.login.LoginContext.init(LoginContext.java:256)
        at javax.security.auth.login.LoginContext.<init>(LoginContext.java:367)
        at javax.security.auth.login.LoginContext.<init>(LoginContext.java:444)
        at com.sun.enterprise.security.auth.login.LoginContextDriver.doPasswordLogin(LoginContextDriver.java:381)
        ... 29 more

Do I need to create a custom Login Module for this?

Thanks for replying on my post.

[Udara Amarasinghe]

Hi Philip ,

In your JDBCRealm settings JAAS context type should be either jdbcRealm or jdbcDigestRealm(this have to use only when authentication method is DIGEST).

try this and tell what happens..

[Philip Gutierrez]

Man, I though JAAS Context property was just a unique name for the realm. Silly me.

Thanks for the info.