asked on

JAAS authentication on JBoss giving HTTP Status 408 error on logging in

I am working on adding JAAS authentication for our enterprise web application which is deployed on JBoss 4.2.2. We are using our own custom LoginModule and custom principal. Have made the code changes required, but the problem is after logging in, it shows

HTTP Status 408 - The time allowed for the login process has been exceeded. If you wish to continue you must either click back twice and re-click the link you requested or close and re-open your browser

--------------------------------------------------------------------------------

type Status report

message The time allowed for the login process has been exceeded. If you wish to continue you must either click back twice and re-click the link you requested or close and re-open your browser

description The client did not produce a request within the time that the server was prepared to wait (The time allowed for the login process has been exceeded. If you wish to continue you must either click back twice and re-click the link you requested or close and re-open your browser).

The JAAS authentication is working fine and login is success after that only the above error is shown. Googled a lot and found that this issue is reported by many people, but one solution I was able to find was that to change the privacy setting for IE to accept cookies. But this also didn't work for me. Pls help

Thx. in advance
Gibu

Nellios

You could perform the following test in order to check if it is a browser / client configuration issue or a JAAS misconfiguration.

1) Change the Authentication type in your deployment descriptor from basic to form based.
2) Implement and use login form in jsp
3) If it is working that way then it is definitly a client issue (Try switch browsers or settings).

A login form and the chanes in web.xml are listed here:

web.xml modification:
    <login-config>
        <auth-method>FORM</auth-method>
        <realm-name>JAAS_REALM_NAME</realm-name>
        <form-login-config>
            <form-login-page>/login.jsp</form-login-page>
            <form-error-page>/loginerror.jsp</form-error-page>
        </form-login-config>
    </login-config>
 
login.jsp:
 
    <form method="POST" action="j_security_check">
        <table>
        <tr><td>User name:</td><td><input type="text" name="j_username" /></td></tr>
        <tr><td>Password:</td><td><input type="password" name="j_password" /></td></tr>
        <tr><td><input type="submit" value="Login" /></td></tr>
        </table>
    </form>

Open in new window

ASKER CERTIFIED SOLUTION

Gibu George

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

sbhati6

This is not the solution that I was looking for