Login module BasicPasswordLoginModule

[Former Member]

Hi all!

I need to configure a Web application on the SAP J2EE engine to use BasiPasswordLoginModule, so it could ask for user and pasword, but it doesn´t work.

I have configured it in the visual adminstrator Security Provider Service, and I have write this code in my servlet

LoginContext lc;

try{

lc = new LoginContext("sap.com/belma4asdfEAR*belma4asdf");

lc.login();

}catch(LoginException le){

PrintWriter pw = response.getWriter();

pw.print(le.getMessage());

pw.print("
");
pw.print(le.getCause());
pw.flush();
return;
}

It produces the output

Access Denied.
com.sap.engine.services.security.exceptions.BaseSecurityException: Internal server error. An error log with ID is created. For more information contact your system administrator.

Access Denied.

com.sap.engine.services.security.exceptions.BaseLoginException: Access Denied.

at com.sap.engine.services.security.login.FastLoginContext.login(FastLoginContext.java:233)

at com.sap.engine.system.SystemLoginModule.login(SystemLoginModule.java:90)

at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)

at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)

at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)

at java.lang.reflect.Method.invoke(Method.java:324)

at javax.security.auth.login.LoginContext.invoke(LoginContext.java:675)

at javax.security.auth.login.LoginContext.access$000(LoginContext.java:129)

at javax.security.auth.login.LoginContext$4.run(LoginContext.java:610)

at java.security.AccessController.doPrivileged(Native Method)

at javax.security.auth.login.LoginContext.invokeModule(LoginContext.java:607)

at javax.security.auth.login.LoginContext.login(LoginContext.java:534)

at eds.hcenergia.pruebas.belma.Belma.process(Belma.java:53)

at eds.hcenergia.pruebas.belma.Belma.doGet(Belma.java:20)

at javax.servlet.http.HttpServlet.service(HttpServlet.java:740)

....

It looks like if it was trying to access another login module, instead of the BasicPasswordLoginModule.

Do I need any other configuration?

Thank in advance,

[ravindra_bollapalli2 · Accepted solution]

hi,

/message/366940#366940 [original link is broken]

let me know u need any further info

bvr

[Former Member]

Thanks bvr, but that´s not the problem.

As I´m using a standard login module, there is no problem with the class loader.

I have found that I was wrong, because I found in a log that the BasicPasswordLoginModule is been called, an ended with an error.

There is an entry in the log with the exception:

Caught java.lang.NullPointerException

at com.sap.engine.services.security.resource.ResourceHandleImpl.listResources(ResourceHandleImpl.java:49)

at com.sap.engine.services.security.resource.ResourceContextImpl.getResourceAliases(ResourceContextImpl.java:147)

at com.sap.engine.services.security.remoteimpl.resource.RemoteSecurityResourcesImpl.getResourceAliases(RemoteSecurityResourcesImpl.java:131)

at com.sap.engine.services.security.remoteimpl.resource.RemoteSecurityResourcesImplp4_Skel.dispatch(RemoteSecurityResourcesImplp4_Skel.java:128)

at com.sap.engine.services.rmi_p4.DispatchImpl._runInternal(DispatchImpl.java:304)

at com.sap.engine.services.rmi_p4.DispatchImpl._run(DispatchImpl.java:193)

at com.sap.engine.services.rmi_p4.server.P4SessionProcessor.request(P4SessionProcessor.java:122)

at com.sap.engine.core.service630.context.cluster.session.ApplicationSessionMessageListener.process(ApplicationSessionMessageListener.java:33)

at com.sap.engine.core.cluster.impl6.session.MessageRunner.run(MessageRunner.java:41)

at com.sap.engine.core.thread.impl3.ActionObject.run(ActionObject.java:37)

at java.security.AccessController.doPrivileged(Native Method)

at com.sap.engine.core.thread.impl3.SingleThread.execute(SingleThread.java:100)

at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:170)

Then, another entry saying:

"Login module com.sap.engine.services.security.server.jaas.BasicPasswordLoginModule from authentication stack basic errors while authenticating the caller. Most probably the authentication stack is not set up correctly."

And finally an entry with the exception I have copy above in the post.

Thanks in advance for any answer.