Authentication Problem

Alan - 

A little more information would help us help you better.
What versions of Tomcat and JSPWiki are you using? And are
you running Tomcat with a security manager?

You also mentioned that you tried viewing
admin/SecurityConfig.jsp, but that it gave you "Tomcat
errors." Could you be a bit more specific? Thanks.

I suspect what's happening is that the security policy
isn't getting installed. SecurityConfig.jsp can help us
figure out why.

- Andrew

Wireless ball and chain provided by VersaMail

-----Original Message-----

From:  Alan Shea <alan.sheasim.org>
Subj:  Re: [Jspwiki-users] Authentication Problem
Date:  Wed Jul 12, 2006 11:35
Size:  1K
To:  JSPWiki Users discussion list <jspwiki-usersecyrd.com>

I did not do anything with anything, simply installed Java,
Tomcat, and
jspwiki, and filled in the Install.jsp. I've done this on
my Fedora Core
server and on Win2000 with the same result: I can't get the
"Login" link to
showup.

Ok, so then I removed the comments in web.xml to enable
"container-managed
auth". No Login link. What controls the logic for
whether or not this shows
up?

At this point, if I try to open Login.jsp directly, after
clicking "Login"
it will move me to j_security_check, otherwise nothing
changes on the
screen. Opening UserPreferences.jsp won't allow me to
create a profile or
save preferences. ("You must login first.")

Alan

On 7/12/06, Janne Jalkanen <Janne.Jalkanenecyrd.com> wrote:
>
>
> On 11 Jul 2006, at 21:30, Alan Shea wrote:
>
> > Thanks for that suggestion -- But if all I did was
drop the .war
> > file in and
> > start adding pages, then would that have modified
the .jks
> > certificate? I
> > have not done anything with (re)-building the
jspwiki.jar.
>
> Do you possibly have the Java policy file set at
startup?  Normally
> JSPWiki can find it's own policy file from WEB-INF,
but if you've set
> it manually at startup, then JSPWiki will defer to
that.
> Unfortunately, if the policy file entries are not in
that file, then
> Java security will deny everything.
>
> /Janne
>
_______________________________________________
Jspwiki-users mailing list
Jspwiki-usersecyrd.com
http://ecyrd.com/cgi-bin/mailman/listinfo/jspwiki-users

_______________________________________________
Jspwiki-users mailing list
Jspwiki-usersecyrd.com
http://ecyrd.com/cgi-bin/mailman/listinfo/jspwiki-users

Andrew,

Thanks for the assistance.

I'm running JSPWiki v2.4.15-beta, Tomcat 5.5.17 and JVM
1.5.0_02-b09 on
Windows 2000. I've also got a version running on a public
FC2 server, but
since they are both giving the same problem, I'm
concentrating on the
Win2000 installation first as its easier to troubleshoot.
I'm not running
any kind of security manager on either installation.

You also mentioned that you tried viewing
admin/SecurityConfig.jsp, but that
> it gave you "Tomcat errors." Could you be a
bit more specific? Thanks.


Here's the error message. I get this whether or not I've
enabled
container-managed auth in web.xml. Other than trying that
and the basic
configurations in jspwiki.properties, I haven't made any
modifications to
the default install.

JSPWiki has detected an error *Error Message* Unable to
locate a login
configuration
*Exception*java.lang.SecurityException*Place where detected*
com.sun.security.auth.login.ConfigFile.(), line -1

If you have changed the templates, please do check them.
This error message
may show up because of that. If you have not changed them,
and you are
either installing JSPWiki for the first time or have changed
configuration,
then you might want to check your configuration files. If
you are absolutely
sure that JSPWiki was running quite okay or you can't
figure out what is
going on, then by all means, come over to
jspwiki.org<http://www.jspwiki.org
/>and tell us. There is more
information in the log file (like the full stack
trace, which you should add to any error report).

And don't worry - it's just a computer program. Nothing
really serious is
probably going on: at worst you can lose a few nights sleep.
It's not like
it's the end of the world.

I suspect what's happening is that the security policy
isn't getting
> installed. SecurityConfig.jsp can help us figure out
why.


I sure hope so!

Thanks again,
Alan
_______________________________________________
Jspwiki-users mailing list
Jspwiki-usersecyrd.com
http://ecyrd.com/cgi-bin/mailman/listinfo/jspwiki-users

I'm sort of having the same problem here that the security 
authentication/authorization configuration is not being set
correctly.

Is custom authentication the default?

In UserCheckTag.java,  it  says  "setPassword"
is always true for custom 
auth used. However, I don't see the password entry fields
in 
UserPreferences.jsp, so does that mean container
authentication is being 
used? If so, how do I change it?

I've tried finding some documentation on this. So, I'm
guessing it has 
to do with the settings in jspwiki.properties,
jspwiki.policy, or 
jspwiki.jaas. And maybe setting jre runtime variables or JVM
properties?

Thanks.
Alex Reid



Alan Shea wrote:
> Andrew,
>
> Thanks for the assistance.
>
> I'm running JSPWiki v2.4.15-beta, Tomcat 5.5.17 and
JVM 1.5.0_02-b09 on
> Windows 2000. I've also got a version running on a
public FC2 server, but
> since they are both giving the same problem, I'm
concentrating on the
> Win2000 installation first as its easier to
troubleshoot. I'm not running
> any kind of security manager on either installation.
>
> You also mentioned that you tried viewing
admin/SecurityConfig.jsp, 
> but that
>> it gave you "Tomcat errors." Could you
be a bit more specific? Thanks.
>
>
> Here's the error message. I get this whether or not
I've enabled
> container-managed auth in web.xml. Other than trying
that and the basic
> configurations in jspwiki.properties, I haven't made
any modifications to
> the default install.
>
> JSPWiki has detected an error *Error Message* Unable to
locate a login
> configuration
> *Exception*java.lang.SecurityException*Place where
detected*
> com.sun.security.auth.login.ConfigFile.(), line -1
>
> If you have changed the templates, please do check
them. This error 
> message
> may show up because of that. If you have not changed
them, and you are
> either installing JSPWiki for the first time or have
changed 
> configuration,
> then you might want to check your configuration files.
If you are 
> absolutely
> sure that JSPWiki was running quite okay or you can't
figure out what is
> going on, then by all means, come over to
> jspwiki.org<http://www.jspwiki.org
/>and tell us. There is more
> information in the log file (like the full stack
> trace, which you should add to any error report).
>
> And don't worry - it's just a computer program.
Nothing really serious is
> probably going on: at worst you can lose a few nights
sleep. It's not 
> like
> it's the end of the world.
>
> I suspect what's happening is that the security policy
isn't getting
>> installed. SecurityConfig.jsp can help us figure
out why.
>
>
> I sure hope so!
>
> Thanks again,
> Alan
> _______________________________________________
> Jspwiki-users mailing list
> Jspwiki-usersecyrd.com
> http://ecyrd.com/cgi-bin/mailman/listinfo/jspwiki-users

_______________________________________________
Jspwiki-users mailing list
Jspwiki-usersecyrd.com
http://ecyrd.com/cgi-bin/mailman/listinfo/jspwiki-users