[JSPWIKI-389] Container managed login fails with Geronimo

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Invalid
• Fix Version/s: 3.0
• Component/s: Authentication & Authorization
• Assignee: Harry Metske
• Reporter: Jürgen Weber
• Created: 29/Sep/08 20:22
• Updated: 15/Nov/21 13:49
• Resolved: 06/Oct/08 20:56

Description

I tried JSPWiki v2.8.0-beta-10 on Geronimo 2.1.3 (Sun 1.6.0_07 on Ubuntu 8.0.4)

JSPWiki comes up fine, but when I try to log in, the
http://linda:8080/JSPWiki/Login.jsp?redirect=Main
is forbidden.

jspwiki.policy unchanged, web.xml uncommented container managed security, geronimo-web.xml as below.

Apache JSPWiki should work on Apache Geronimo.

------------

<?xml version="1.0" encoding="UTF-8"?>
<web-app xmlns="http://geronimo.apache.org/xml/ns/j2ee/web-2.0"
xmlns:naming="http://geronimo.apache.org/xml/ns/naming-1.2"
xmlns:sec="http://geronimo.apache.org/xml/ns/security-2.0"
xmlns:sys="http://geronimo.apache.org/xml/ns/deployment-1.2">

<security-realm-name>jspwiki-properties-realm</security-realm-name>

<sec:security>
<sec:role-mappings>
<sec:role role-name="Authenticated">
<sec:principal class="org.apache.geronimo.security.realm.providers.GeronimoGroupPrincipal" name="Authenticated" designated-run-as="true"/>
</sec:role>
<sec:role role-name="admin">
<sec:principal class="org.apache.geronimo.security.realm.providers.GeronimoGroupPrincipal" name="admin" designated-run-as="true"/>
</sec:role>

</sec:role-mappings>
</sec:security>

</web-app>

Issue Links

• is related to: JSPWIKI-212 transport-guarantee CONFIDENTIAL should be removed from web.xml