WebSphere Application Server - Using Windows 2000 Groups as Roles for Security

This is Interesting: Free IT Magazines  
Home > Archive > WebSphere Application Server > January 2004 > Using Windows 2000 Groups as Roles for Security





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author Using Windows 2000 Groups as Roles for Security
Ramana

2004-01-19, 2:54 pm

I am trying to test a small application by defining the declarative security
in deployment of web application. Authentication is working fine against
windows user and password account , but it is failing in authorization i.e.
in verifying the role against Windows 2000 groups. It is giving the
following error message
[12/26/03 6:19:09:303 EST] 5abafc56 WebCollaborat A SECJ0129E: Authorization
failed for RAMANA while invoking GET on
default_host:/TestSecurityWeb/TestTeamServlet, Authorization failed, Not
granted any of the required roles: "webuser"But I have verified that the
user RAMANA is associated to "webuser" group. Does SWAM works with the
WINDOWS 2000 local groups ? I have set the custom registry implementation
properrty to local.It is giving the same error message.

Can you please advise. Thanks Ramana





Bibhas Bhattacharya

2004-01-19, 2:54 pm

WAS v5 works fine with Win2K groups. Havn't tested 5.1.

PS. WAS caches security info. Try restarting the server for immediate
effect.

--
Thank you,

Bibhas Bhattacharya
--
Web Age Solutions Inc.
WebSphere and WebLogic Training and Consulting Services
www.webagesolutions.com

"Ramana" <ramanapv@hotmail.com> wrote in message
news:bsh5ti$5r3a$1@news.boulder.ibm.com...
quote:

> I am trying to test a small application by defining the declarative


security
quote:

> in deployment of web application. Authentication is working fine against
> windows user and password account , but it is failing in authorization


i.e.
quote:

> in verifying the role against Windows 2000 groups. It is giving the
> following error message
> [12/26/03 6:19:09:303 EST] 5abafc56 WebCollaborat A SECJ0129E:


Authorization
quote:

> failed for RAMANA while invoking GET on
> default_host:/TestSecurityWeb/TestTeamServlet, Authorization failed, Not
> granted any of the required roles: "webuser"But I have verified that the
> user RAMANA is associated to "webuser" group. Does SWAM works with the
> Windows 2000 local groups ? I have set the custom registry implementation
> properrty to local.It is giving the same error message.
>
> Can you please advise. Thanks Ramana
>
>
>
>
>




Ramana

2004-01-19, 2:54 pm

I am running this test using WSAD/Websphere Test Environment with the groups
that are defined on WIN2000 workstation
Installation Platform.
----------------------------------------------------------------------------
---

Name IBM WebSphere Application Server
Version 5.0

Technology List
----------------------------------------------------------------------------
---

BASE installed

Installed Product
----------------------------------------------------------------------------
---

Name IBM WebSphere Application Server
Version 5.0.2
ID BASE
Build Level ptf2M0325.01
Build Date 6/23/03

Do I need to apply any ptfs to make it work. Can you please provide your
system versioninfo.

Thank You, Ramana

"Bibhas Bhattacharya" <bibhas@webagesolutions-NO-SPAM.com> wrote in message
news:bsj2fm$2qgo$1@news.boulder.ibm.com...
quote:

> WAS v5 works fine with Win2K groups. Havn't tested 5.1.
>
> PS. WAS caches security info. Try restarting the server for immediate
> effect.
>
> --
> Thank you,
>
> Bibhas Bhattacharya
> --
> Web Age Solutions Inc.
> WebSphere and WebLogic Training and Consulting Services
> www.webagesolutions.com
>
> "Ramana" <ramanapv@hotmail.com> wrote in message
> news:bsh5ti$5r3a$1@news.boulder.ibm.com...
> security
against[QUOTE][color=darkred]
> i.e.
> Authorization
implementation[QUOTE][color=darkred]
>
>




Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com