Mailing-List: contact jetspeed-dev-help@portals.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Jetspeed Developers List" <jetspeed-dev@portals.apache.org>
Message-ID: <1770938677.1214352345536.JavaMail.jira@brutus>
Date: Tue, 24 Jun 2008 17:05:45 -0700 (PDT)
From: "David Sean Taylor (JIRA)" <jetspeed-dev@portals.apache.org>
To: jetspeed-dev@portals.apache.org
Subject: [jira] Commented: (JS2-828) JAAS authentication failure with Tomcat
 5.5.24 and above.
In-Reply-To: <2143164.1197149684130.JavaMail.jira@brutus>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit


    [ https://issues.apache.org/jira/browse/JS2-828?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12607810#action_12607810 ] 

David Sean Taylor commented on JS2-828:
---------------------------------------

Note: changing        useContextClassLoader="true"  now breaks 5.5.20 (I have not tested with each and every Tomcat version)
To summarize, recommend:

All new development on the 2.2 trunk should be done with 5.5.26 or higher
If you want to develop with the 2.2 and use 5.5.23 or lower, change the useContextClassLoader='false'

Do not use versions 5.5.24 or 5.5..25 as they are broken with the way Jetspeed creates its own realm


> JAAS authentication failure with Tomcat 5.5.24 and above.
> ---------------------------------------------------------
>
>                 Key: JS2-828
>                 URL: https://issues.apache.org/jira/browse/JS2-828
>             Project: Jetspeed 2
>          Issue Type: Bug
>         Environment: Tomcat >= 5.5.24
>            Reporter: Mohan Kannapareddy
>            Assignee: Ate Douma
>            Priority: Critical
>             Fix For: 2.2
>
>
> Immediately after logging into the portal, the URL address box in the browser displays:
>  http://localhost:20000/jetspeed/login/redirector
> ======================
> And the page displays:
> HTTP Status 403 - Access to the requested resource has been denied
> type Status report
> message Access to the requested resource has been denied
> description Access to the specified resource (Access to the requested resource has been denied) has been forbidden.
> Apache Tomcat/5.5.25
> ======================
> I believe this is the same behavior in Tomcat 6.0.x and I get the same thing in GlassFish v2-b58g.
> This does *NOT* happen in Tomcat 5.5.23 or lower versions. Something changed between 5.5.23 and 5.5.25.
> Also, after the login post if you just type in the URL http://<>/jetspeed, the page appears normally and you can
> function.
> I do not know whether it is relevant but at least GlassFish appears to record the following in the server.log.
> Unable to set request character encoding to UTF-8 from context /jetspeed, because request parameters have already been read, or ServletRequest.getReader() has already been called

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


---------------------------------------------------------------------
To unsubscribe, e-mail: jetspeed-dev-unsubscribe@portals.apache.org
For additional commands, e-mail: jetspeed-dev-help@portals.apache.org