Java Security no Glassfish v3

É, acho que estava bom demais pra ser verdade. :(
Ainda não consegui fazer um jdbcrealm funcionar no glassfish e qual é o segredo ? ALguém já conseguiu? Agradeceria se alguem pudesse me dar uma dica. :roll:

Estou usando o netbeans + glassfish.

Abaixo os arquivos de configuração e o log do problema ao tentar fazer o login na aplicação web.

web.xml

<?xml version="1.0" encoding="UTF-8"?>
<web-app version="2.5" xmlns="http://java.sun.com/xml/ns/javaee" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd">
    <session-config>
        <session-timeout>
            30
        </session-timeout>
    </session-config>
    <welcome-file-list>
        <welcome-file>index.jsp</welcome-file>
    </welcome-file-list>
    <security-constraint>
        <display-name>SecurityConstraint</display-name>
        <web-resource-collection>
            <web-resource-name>WRCollection</web-resource-name>
            <url-pattern>/*</url-pattern>
        </web-resource-collection>
        <auth-constraint>
            <role-name>User</role-name>
            <role-name>Admin</role-name>
            </auth-constraint>
        <user-data-constraint>
            <transport-guarantee>NONE</transport-guarantee>
        </user-data-constraint>
    </security-constraint>
    <login-config>
        <auth-method>FORM</auth-method>
        <realm-name>UsersDataBase</realm-name>
        <form-login-config>
            <form-login-page>/logon.jsp</form-login-page>
            <form-error-page>/logonError.jsp</form-error-page>
        </form-login-config>
    </login-config>
    <security-role>
        <role-name>User</role-name>
    </security-role>
    <security-role>
        <description/>
        <role-name>Admin</role-name>
    </security-role>
</web-app>

sun-web.xml

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE sun-web-app PUBLIC "-//Sun Microsystems, Inc.//DTD Application Server 9.0 Servlet 2.5//EN" "http://www.sun.com/software/appserver/dtds/sun-web-app_2_5-0.dtd">
<sun-web-app error-url="">
  <context-root>/sparkApp</context-root>
  <class-loader delegate="true"/>
  <jsp-config>
    <property name="keepgenerated" value="true">
      <description>Keep a copy of the generated servlet class' java code.</description>
    </property>
  </jsp-config>
  <security-role-mapping>
    <role-name>User</role-name>
    <principal-name>User</principal-name>
    <group-name>User</group-name>
  </security-role-mapping>
  <security-role-mapping>
    <role-name>Admin</role-name>
    <principal-name>Admin</principal-name>
    <group-name>Admin</group-name>
  </security-role-mapping>
</sun-web-app>

Erro ao tentar fazer o login:

;_RequestID=4d46badf-2b1d-4b76-926f-a8e1cd8579f8;|SEC1111: Cannot load group for JDBC realm user [teste], reason: java.sql.SQLException: ORA-00904: "LOGIN": identificador inválido
        [LoginContext]: original security exception with detail msg replaced by new exception with empty detail msg
        [LoginContext]: original security exception: com.sun.enterprise.security.LoginException: Failed jdbc login for teste.
        [LoginContext]: login REQUIRED failure
        [LoginContext]: abort ignored
SEC5046: Audit: Authentication refused for [teste].
Web login failed: Login failed: javax.security.auth.login.LoginException: Security Exception

Eu nao entendi que diabo de SQL é este que ele tenta fazer, já chequei as tabelas e os campos mas não vejo porque ele está dando pau...

abs

1 Resposta

Topicos relacionados