Comments on: Create a WebApplication secured with custom JAAS Database LoginModule & Deploy on JDeveloper 10.1.3 Embedded OC4J 10.1.3.1, Stand Alone OC4J and OPMN Managed OC4J (10g AS)

By: Nikunj

Nikunj — Tue, 07 Jul 2009 17:00:32 +0000

i am unable to get this login screen..
can anyone telkl me where is the login.jsp file

By: Rajesh

Rajesh — Sat, 23 May 2009 03:57:16 +0000

Hi Lucas,

Thank you very much for this fantastic effort. Very very useful blog. Keep doing more. All the best.

Rajesh

By: eder

eder — Sat, 17 Jan 2009 16:42:37 +0000

I show the following preblem when trying his example of implementation,t says that the pl/sql presents errors but this well does not have an error in the

09/01/17 11:12:00 [DBProcDataSourceLoginModule] User ME not authenticated: username or password mismatch
09/01/17 11:12:00 [DBProcDataSourceLoginModule] Error: ORA-04063: package body “SCOTT.JAAS_UTILS” tiene errores
ORA-06508: PL/SQL: no se ha encontrado la unidad de programa llamada : “SCOTT.JAAS_UTILS”
ORA-06512: en lÃnea 1
09/01/17 11:12:00 [DBProcDataSourceLoginModule] Logon Successful = false
09/01/17 11:12:00 [DBProcDataSourceLoginModule] Abort called on LoginModule

That I am missing to configure or to that he is supposed to be for this givenly

Greetings and thanks

By: ram

ram — Tue, 10 Apr 2007 17:36:58 +0000

I am trying to learn this using baby steps. I have Oracle JExpress setup on my machine and I have the tables in there. I use JDeveloper. I have a million examples of file based security but not enough on how can I set up everything in my database schema tables and then using a simple jsp, login and authenticate against the passwords stored in the tables. Roles will also be stored in the database. Based on that, I want to give permissions to tables based on user roles. Is there an example or a good step by step. I want to use the basic (not custom) Login Modules first.

Thanks

By: Chris

Chris — Sun, 01 Apr 2007 01:59:48 +0000

Hello,

Currently, I do not have access to a database or LDAP server. Can you recommend a spoof login module?

Thanks
Chris

By: Barry Blackburn

Barry Blackburn — Fri, 09 Mar 2007 00:17:42 +0000

I have the DBLoginModule working in my JDEV application, however I am curious about the RAISE Exception in the PL/SQL package. It seems to me that this is not needed since the login module returns a binary state (i.e., it goes to your error form if bad, your app if okay). Is it possible to interrogate this exception? It looks like DBLogin just generates a LoginException if authentication fails. Thanks.

By: Barry Blackburn

Barry Blackburn — Fri, 02 Mar 2007 21:49:34 +0000

Lucas, never mind. I was able to invoke authentication after converting to a Package and refining my Data Sources. It appears to working and I will hopefully deploy to app server next week. Thanks.

By: Barry Blackburn

Barry Blackburn — Thu, 01 Mar 2007 21:31:36 +0000

Lucas, Thanks for the help with this. I am using a simple function to pass to the LM, and I am faced with the following. The function works fine from SQLPlus. Any comments are appreciated.

07/03/01 14:01:18 [DBProcDataSourceLoginModule] option debug = true

07/03/01 14:01:18 [DBProcDataSourceLoginModule] option data source name = jdbc/OracleDSSecurity

07/03/01 14:01:18 [DBProcDataSourceLoginModule] option log level = log all

07/03/01 14:01:18 [DBProcDataSourceLoginModule] option logger class = null

07/03/01 14:01:18 [DBProcDataSourceLoginModule] option plsql_procedure = my_data.get_j2ee_user_role

07/03/01 14:01:18 [DBProcDataSourceLoginModule] option application_realm = jazn.com

07/03/01 14:01:18 [DBProcDataSourceLoginModule] login called on DBTableLoginModule

07/03/01 14:01:18 [DBProcDataSourceLoginModule] Calling callbackhandler …

07/03/01 14:01:18 [DBProcDataSourceLoginModule] Username returned by callback = BLACKBURN

07/03/01 14:01:20 [DBProcDataSourceLoginModule] User BLACKBURN not authenticated: username or password mismatch

07/03/01 14:01:20 [DBProcDataSourceLoginModule] Error: User credentials doesn’t match the existing ones

07/03/01 14:01:20 [DBProcDataSourceLoginModule] Logon Successful = false

By: Lucas Jellema

Lucas Jellema — Tue, 20 Feb 2007 14:40:37 +0000

Imran,

Most steps in this article are not ADF specific and apply to web applications in general. The JAAS implementation however varies across application servers: the article discusses OC4J 10.1.3 (Oracle AS). For other Application Servers you will need to find other instructions. I am unfortunately not able to find the time to help you along with this. Surely out on the internet there are JAAS instructions for the environment you need. Good luck!

regards,

Lucas

By: imran raza

imran raza — Tue, 20 Feb 2007 13:03:19 +0000

hi lucas,

I want to implement JAAS in just one jsp file i am not awar of ADF and other things, can you give step by step guide to embed JAAS in single normal JSP, sorry for my lack of knowldge but i want to do this with baby steps.

regards