submitting to JSecurityCheck from a Servlet

Thread view:

mike - 06 Apr 2004 03:12 GMT

We are trying to automate login to a JBOSS J2EE application.

The security model is DatabaseLoginModule based.

We can log in manually through a JSP page, with a username and password that
submits to JSecurityCheck servlet.

We have written a Servlet to replace the JSP page that will redirect the
username and password to JSecurityCheck servlet to allow automated login.

This doesn't work.

If anyone has done this successfully can you please give us a pointer......

Thanks in advance

REMOVETHISmradeka@webft.com.au

Reply to this Message

Duncan Eley - 06 Apr 2004 12:23 GMT

Hi Mike,

I have some experience with the JBoss DatabaseLoginModule and J2EE Web
security and *may* be able to help in some way.

>We are trying to automate login to a JBOSS J2EE application.
>
>The security model is DatabaseLoginModule based.
>
>We can log in manually through a JSP page, with a username and password that
>submits to JSecurityCheck servlet.

Is JSecurityCheck a servlet you have authored or do you mean the
username and password submit to the j_security_check form action?

>We have written a Servlet to replace the JSP page that will redirect the
>username and password to JSecurityCheck servlet to allow automated login.

Again, if by JSecurityCheck you really mean j_security_check, then I
have done this before in a similar way to this:

String req = request.getContextPath() + "/j_security_check" +
"?j_username=" + username + "&j_password=" + password;

response.sendRedirect(response.encodeRedirectURL(req));

You will then need to consider how the user will be redirected to the
URL they initially requested. Maybe the following will help:
http://tinyurl.com/xl80

>This doesn't work.
>
[quoted text clipped - 3 lines]
>
>REMOVETHISmradeka@webft.com.au

Regards,

Duncan Eley
duncan.eleyREM@VEbcs.org.uk

Reply to this Message

mike - 08 Apr 2004 05:49 GMT

Thanks for that.

We've already done what you suggested but the Servlet is a great help.

Regards,
Mike

> Hi Mike,
>
[quoted text clipped - 38 lines]
> Duncan Eley
> duncan.eleyREM@VEbcs.org.uk

Reply to this Message

submitting to JSecurityCheck from a Servlet

Free Magazines