JAAS authentication on JBoss giving HTTP Status 408 error on logging in

I am working on adding JAAS authentication for our enterprise web application which is deployed on JBoss 4.2.2. We are using our own custom LoginModule and custom principal. Have made the code changes required, but the problem is after logging in, it shows

HTTP Status 408 - The time allowed for the login process has been exceeded. If you wish to continue you must either click back twice and re-click the link you requested or close and re-open your browser

--------------------------------------------------------------------------------

type Status report

message The time allowed for the login process has been exceeded. If you wish to continue you must either click back twice and re-click the link you requested or close and re-open your browser

description The client did not produce a request within the time that the server was prepared to wait (The time allowed for the login process has been exceeded. If you wish to continue you must either click back twice and re-click the link you requested or close and re-open your browser).

The JAAS authentication is working fine and login is success after that only the above error is shown. Googled a lot and found that this issue is reported by many people, but one solution I was able to find was that to change the privacy setting for IE to accept cookies. But this also didn't work for me. Pls help

Thx. in advance
Gibu
LVL 12
Gibu GeorgeChief Technology OfficerAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

NelliosCommented:
You could perform the following test in order to check if it is a browser / client configuration issue or a JAAS misconfiguration.

1) Change the Authentication type in your deployment descriptor from basic to form based.
2) Implement and use login form in jsp
3) If it is working that way then it is definitly a client issue (Try switch browsers or settings).

A login form and the chanes in web.xml are listed here:

web.xml modification:
    <login-config>
        <auth-method>FORM</auth-method>
        <realm-name>JAAS_REALM_NAME</realm-name>
        <form-login-config>
            <form-login-page>/login.jsp</form-login-page>
            <form-error-page>/loginerror.jsp</form-error-page>
        </form-login-config>
    </login-config>
 
login.jsp:
 
    <form method="POST" action="j_security_check">
        <table>
        <tr><td>User name:</td><td><input type="text" name="j_username" /></td></tr>
        <tr><td>Password:</td><td><input type="password" name="j_password" /></td></tr>
        <tr><td><input type="submit" value="Login" /></td></tr>
        </table>
    </form>

Open in new window

0
Gibu GeorgeChief Technology OfficerAuthor Commented:
I found the actual issue, we were accessing the JBoss application through Apache Http Server, this was causing the issue. When we access it directly application allows to login. Thx. for the response. Also we are using FORM based authentication only
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
sbhati6Commented:
This is not the solution that I was looking for
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Java App Servers

From novice to tech pro — start learning today.