Is your DefaultAuthenticator also set to Sufficient?
--
Mike
Weblogic/J2EE Security Blog: http://monduke.com
This is a discussion on Weblogic authentication problem - Weblogic ; Hello !=20 I've developed Custom authentication provider and installed it in Weblogic = 9.2 I've set Control Flag as Sufficiant All providers ordered coresponding the next list=20 DefaultAuthenticator=20 DefaultIdentityAsserter MyAuthenticator I make authentication like this from my client web application ...
Hello !=20
I've developed Custom authentication provider and installed it in Weblogic =
9.2 I've set Control Flag as Sufficiant
All providers ordered coresponding the next list=20
DefaultAuthenticator=20
DefaultIdentityAsserter
MyAuthenticator
I make authentication like this from my client web application
CallbackHandler handler =3D new SG4UserCallbackHandler(domainUserName, "");
Subject subject =3D weblogic.security.services.Authentication.login(handler=
);
=09 weblogic.servlet.security.ServletAuthentication.runAs(subject, g=
etRequest());
I've recieved and exception=20
=20
Throwable: javax.security.auth.login.FailedLoginException: [Security:090304=
]Authentication Failed: User svc javax.security.auth.login.Failed
LoginException: [Security:090302]Authentication Failed: User svc denied
Stack Trace:
javax.security.auth.login.FailedLoginException: [Security:090304]Authentica=
tion Failed: User svc javax.security.auth.login.FailedLoginExcept
ion: [Security:090302]Authentication Failed: User svc denied
at weblogic.security.providers.authentication.LDAPAtnLoginModuleImp=
l.login(LDAPAtnLoginModuleImpl.java:218)
at com.bea.common.security.internal.service.LoginModuleWrapper$1.ru=
n(LoginModuleWrapper.java:110)
at java.security.AccessController.doPrivileged(Native Method)
at com.bea.common.security.internal.service.LoginModuleWrapper.logi=
n(LoginModuleWrapper.java:106)
at sun.reflect.GeneratedMethodAccessor85.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethod=
AccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:585)
at javax.security.auth.login.LoginContext.invoke(LoginContext.java:=
769)
at javax.security.auth.login.LoginContext.access$000(LoginContext.j=
ava:186)
Can anybody answer me how can I call MyAuthenticator from client applicatio=
n ? not LDAPAtnLoginModuleImpl
--
Edited by xserge at 06/18/2007 6:52 AM
Is your DefaultAuthenticator also set to Sufficient?
--
Mike
Weblogic/J2EE Security Blog: http://monduke.com
Yes ! Now my authenticator works well. Really I've set sufficient flag for =
default authenticator and my authenticator, and moved my authenticator to u=
p.
Thank you