portals-jetspeed-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "David Sean Taylor (JIRA)" <jetspeed-...@portals.apache.org>
Subject [jira] Commented: (JS2-828) JAAS authentication failure with Tomcat 5.5.24 and above.
Date Wed, 25 Jun 2008 00:05:45 GMT

    [ https://issues.apache.org/jira/browse/JS2-828?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12607810#action_12607810
] 

David Sean Taylor commented on JS2-828:
---------------------------------------

Note: changing        useContextClassLoader="true"  now breaks 5.5.20 (I have not tested with
each and every Tomcat version)
To summarize, recommend:

All new development on the 2.2 trunk should be done with 5.5.26 or higher
If you want to develop with the 2.2 and use 5.5.23 or lower, change the useContextClassLoader='false'

Do not use versions 5.5.24 or 5.5..25 as they are broken with the way Jetspeed creates its
own realm


> JAAS authentication failure with Tomcat 5.5.24 and above.
> ---------------------------------------------------------
>
>                 Key: JS2-828
>                 URL: https://issues.apache.org/jira/browse/JS2-828
>             Project: Jetspeed 2
>          Issue Type: Bug
>         Environment: Tomcat >= 5.5.24
>            Reporter: Mohan Kannapareddy
>            Assignee: Ate Douma
>            Priority: Critical
>             Fix For: 2.2
>
>
> Immediately after logging into the portal, the URL address box in the browser displays:
>  http://localhost:20000/jetspeed/login/redirector
> ======================
> And the page displays:
> HTTP Status 403 - Access to the requested resource has been denied
> type Status report
> message Access to the requested resource has been denied
> description Access to the specified resource (Access to the requested resource has been
denied) has been forbidden.
> Apache Tomcat/5.5.25
> ======================
> I believe this is the same behavior in Tomcat 6.0.x and I get the same thing in GlassFish
v2-b58g.
> This does *NOT* happen in Tomcat 5.5.23 or lower versions. Something changed between
5.5.23 and 5.5.25.
> Also, after the login post if you just type in the URL http://<>/jetspeed, the
page appears normally and you can
> function.
> I do not know whether it is relevant but at least GlassFish appears to record the following
in the server.log.
> Unable to set request character encoding to UTF-8 from context /jetspeed, because request
parameters have already been read, or ServletRequest.getReader() has already been called

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


---------------------------------------------------------------------
To unsubscribe, e-mail: jetspeed-dev-unsubscribe@portals.apache.org
For additional commands, e-mail: jetspeed-dev-help@portals.apache.org


Mime
View raw message