security - Accessing Glassfish container managed login page using iPhone Safari from outside LAN results in "server stopped responding" error -


question

how allow unauthenticated users served login.xhtml jsf2.0 facelet page on https when attempting access security constrained resources or otherwise requiring login authentication.

current implementation

i'm developing netbeans 7.3. server glassfigh 3.1.2.2. using primefaces 3.5 components. security container managed under jdbcrealm. have followed pattern described helpfully balusc's answer @ performing user authentication in java ee / jsf using j_security_check.

basically:

  • declarative security using deployment descriptor
  • form based authentication (full jsf component facelet login.xhtml using @viewscoped @managedbean programmatic login using servlet 3.0 httpservletrequest.login())
  • jdbc realm

everything works great , required when run program localhost machine or machine on lan. index.xhtml welcome file under web.xml , protected under security constraint. 

<form-login-page>/login.xhtml</form-login-page>

is presented when context root hit browser. login.xhtml under security constraint purpose of requiring confidential under user-data-constraint. applies https login form how i'm answering own question above.

problem

whenever try load page iphone using standard safari browser outside lan (from internet) server stopped responding error after see switch url http 8080 port https 8181 port.

info: jacc policy provider:failed permission check: context (" webapplication2/webapplication2 ") , permission (" ("javax.security.jacc.webuserdatapermission" "/login.xhtml" "get") ")

message in netbeans glassfigh output window. why not work same on lan?

thoughts

this current web.xml not specify auth-constraint element "secure login" security-constraint because java ee 6 tutorial says "if there no authorization constraint, container must accept request without requiring user authentication". if specify auth-constraint * role-name application still behaves same (same problem). if give application role name user never resolved role in first place. implementation pattern entirely wrong begin with?

code

my web.xml

<?xml version="1.0" encoding="utf-8"?> <web-app version="3.0" xmlns="http://java.sun.com/xml/ns/javaee" xmlns:xsi="http://www.w3.org/2001/xmlschema-instance" xsi:schemalocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_3_0.xsd">     <context-param>         <param-name>javax.faces.project_stage</param-name>         <param-value>development</param-value>     </context-param>     <context-param>         <param-name>primefaces.theme</param-name>         <param-value>#{loggedinuser.preferences.theme}</param-value>     </context-param>     <servlet>         <servlet-name>faces servlet</servlet-name>         <servlet-class>javax.faces.webapp.facesservlet</servlet-class>         <load-on-startup>1</load-on-startup>     </servlet>     <servlet-mapping>         <servlet-name>faces servlet</servlet-name>         <url-pattern>*.xhtml</url-pattern>     </servlet-mapping>     <session-config>         <session-timeout>10</session-timeout>     </session-config>     <welcome-file-list>         <welcome-file>index.xhtml</welcome-file>     </welcome-file-list>     <security-constraint>         <display-name>index</display-name>         <web-resource-collection>             <web-resource-name>index</web-resource-name>             <description/>             <url-pattern>/index.xhtml</url-pattern>         </web-resource-collection>         <auth-constraint>             <description/>             <role-name>admin</role-name>         </auth-constraint>     </security-constraint>     <security-constraint>         <display-name>secure login</display-name>         <web-resource-collection>             <web-resource-name>login.xhtml</web-resource-name>             <description/>             <url-pattern>/login.xhtml</url-pattern>         </web-resource-collection>         <user-data-constraint>             <description/>             <transport-guarantee>confidential</transport-guarantee>         </user-data-constraint>     </security-constraint>     <login-config>         <auth-method>form</auth-method>         <realm-name>jdbc-realm</realm-name>         <form-login-config>             <form-login-page>/login.xhtml</form-login-page>             <form-error-page>/loginerror.xhtml</form-error-page>         </form-login-config>     </login-config>     <security-role>         <description/>         <role-name>admin</role-name>     </security-role> </web-app>


Comments

Post a Comment

Popular posts from this blog

SPSS keyboard combination alters encoding -

my question not have programming practical issue on spss. accident keyword combination cannot remember because did not intend press changed encoding in spss , text in data in different language english shown small boxes. nevertheless, when kind of analysis performed different language text shown in output. does know reason? tried change encoding did not produce result. first, @ edit > options , see whether setting unicode or locale. might fix it. if have text in multiple languages, want unicode. otherwise, may have specific locale set wrong. can change set locale, need know locale want use.
Read more

Add new record to the table by click on the button in Microsoft Access -

in ms access form want implement separate button, adds new record table. in order added button , attached button event: private sub btnaddrec_click() refresh codecontextobject on error resume next docmd.gotorecord , , acnewrec if err.number <> 0 btnaddrec.enabled = false end if end end sub everything ok when open window , click btnaddrec button, problem when first of perform navigation through existed records , after click on button. got runtime error: 2105: «you can't go specified record. may @ end of recordset» . how solve issue, need have ability add new record on click on specific button, no matter, have walked or not walked through records before. thanks. i created simple form field call description (and autonumber) , created button code follows click event. filled number of records , navigated through them, clicked addnewrec button. form navigated new record without issues. able click addnewrec button directly after
Read more

CSS3 Transition to highlight new elements created in JQuery -

i want use css3 color transition apply highlight-fading color effect (yellow transparent) new elements appended markup using jquery. css #content div { background-color:transparent; -moz-transition:background-color 2s; -webkit-transition:background-color 2s; -o-transition:background-color 2s; transition:background-color 2s; } #content div.new { background-color:yellow; } html <div id="content"></div> <a id="add-element" href="#">add new element</a> js $('#add-element').click(function() { var newelement = $('<div class="new">new element</div>'); $('#content').append(newelement); newelement.removeclass('new'); }); when click link, new element created. class "new" (background color yellow) , it's appended html markup. should able remove "new" class trigger background color transition transparent (or whate
Read more