java ee - Geronimo webapp using ldap authentication -

-

I am using Apache Jeromeo as my application server. Authentication is being done on LDAP using the ADPE directory service. I have no previous experience with Java software development, so please make it easy for me. Tell me that I can explain anything in more detail.

Actually my login step is similar to this example from Geronimo's documentation:

Three different behaviors are happening when a user is trying to login:

  1. When a user logs in with the correct username, which is in the correct ladder group, they are taken to a safe area of ​​the site. And I'm not sure how to login a user from the site until the end of its session.

  2. When a user logs in to the user name / password LDAP directory, user (specified in this location in 'web.xml') /auth/logonError.html ? Param = test will be sent to

  3. A user's log with the appropriate username / password that is not in the appropriate group, "HTTP 403 denied page" The Ldap is an example of this page at the bottom of the sample. Behavior should be similar to an uncertain user.

In all these cases, there is no way the user can retry the login process unless the browser is restarted or used a different browser. It is a big problem that I am doing.

I should have the following scenario:

  1. An appropriate authenticated user can logout, and try to log in again.

  2. An improperly certified user has been redirected to the login screen, and asked to try again.

What do I need to do to do this? Thanks for your help.

It is not always the case that you participate in a problem, struggle for a few days Finally, you can post it over stack overflow (or anywhere), and then you solve the problem relatively easily.

I have made some changes to my application which can cause trouble. I'm posting. I did not do anything in this case with this kind of problem stumble across from Google

First of all I created a servlet (called EndSessionServlet) that just did this:. 

  Protects zero COGET (HTTPArlate Request Request, HTTPSvette Response Response) Servlet Upption, IOE EXPLORE {End Session (Request, Response) throws; } Secure zero doPost (HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {endSession (request, response); } Private zero end session (HttpServletRequest request, HttpServletResponse response) throws IOException {request.getSession (). Invalid (); Response.sendRedirect ("."); }

And then I put it on my web Added to the Xml file: 

  & lt; Error page & gt; & Lt; Error code & gt; 403 & lt; / Error code & gt; & Lt; Location & gt; / EndSessionServlet & lt; / Location & gt; & Lt; / Error page & gt;

And I also changed the form-error page in web.xml:

And I added a link to the section of the webpage that is authenticated for the end of the session. Then certified users can now correctly logout

for three scenarios:

  1. The user is able to log in to log in, the user clicks the link for EndSessionServlet
  2. in a valid user name / password for the user ldap Enters, but is not in the right group. This user is normally 403 pages, which is now sent to invalidate the session, and redirect to the logon page.
  3. The user enters the wrong user name / password and is sent to, which is also set to the EndSessionServlet. This session ends, and redirects them to the login page.

So all the scenarios work fine now.


Comments

Post a Comment

Popular posts from this blog

c# - sqlDecimal to decimal clr stored procedure Unable to cast object of type 'System.Data.SqlTypes.SqlDecimal' to type 'System.IConvertible' -

-
I'm new to this I'm writing a clr. stored procedure that can be used to get values ​​used in a calculation Call for another stored procedure for Gives an archived methodology int (I think SqlInt32? Value of the table's value is int) which is then necessary to convert to decimal. Here I have the code: Public static integral mood (SQL MDMMYLUE, escalistering AMY type, out of SQLDCM Result) {aResult = 0; Try {SqlConnection conn = New SqlConnection ("Reference Connection = True"); SqlCommand cmd = New SqlCommand ("sp_GetType", conn); Cmd.Parameters.AddWithValue ("@ myValueType", aMyValueType); Cmd.CommandType = CommandType.StoredProcedure; Conn.Open (); Object type = CMD. Exclamation Asser (); Conn.Close (); Decimal type FORCalculation = Convert. ToDecimal (type); Decimal value = convert toDecimal (aMyValue); // ** calculation calc = new calculation (); Decimal result = calorie.docalulation (typefarculation, value); I get an exception...
Read more

Calling GetGUIThreadInfo from Outlook VBA -

-
I need to find the active window'm writing a VBA macro in MS Outlook, which is a specific process. The goal of this is to get the active window / document name even if its original application has more than one document interface. User processor with GetCurrentThreadId is active, I am using GetGUIThreadInfo to get .dll. Here is the correct code: private type RECT as as Left LongPtr top LongPtr right LongPtr down LongPtr termination of private type GUITHREADINFO cbSize as LongPtr flags LongPtr hwndActive LongPtr hwndFocus LongPtr hwndCapture LongPtr as as as as as reset as LongPtr rcCaret as LongPtr hwndCreate as LongPtr hwndMoveSize as HwndMenuOwner end of Private Equity PtrSafe function GetWindowThreadProcessId Lib "user32" (_BVV hnw LongPtr as LongPtr Nig Mr. announced as PtrSafe function GetGUIThreadInfo Lib "user32" _ (ByVal dwthreadid as LongPtr, _ lpguithreadinfo as GUITHREADINFO) LongPtr Sub MyFunction () as dim strWindowTitle string = space as s...
Read more

Obfuscating Python code? -

-
I'm looking for a way to hide my Python source code. print "Hello World!" How can I encode this example so that it is not human-readable? I have been asked to use Base 64 but I'm not sure how. itemprop = "text"> It is limited only, first level ambiguous resolution, but has built-in: byte-code in Python Is a compiler for: dragon-o-m py_compile & lt; Your program.py & gt; creates a .pyo file with a byte-code, and where the docstrings are removed, etc. You can rename .pyo with the .py extension, and python & lt; Your program.py & gt; runs as your program, but it does not have your source code. PS : If your program blur modules like this, you need to rename them with the .pyc suffix (I Not sure it will not break a day), or you can work with .pyo and run them with python -o ... .pyo ( Import should work). This will allow dragon to search your modules (otherwise, Python looks for the .py module).
Read more