[Geoserver-devel] dedicated login page broken?

Hi all,

When I log into the web ui via the main page (using the form at the top) it works great. But say if i try to visit a page that requires auth directly say like:

http://localhost:8080/geoserver/web/?wicket:bookmarkablePage=:org.geoserver.web.data.store.StorePage

And get greeted with the dedicated login page, login fails. I did not look into it too closely but perhaps this has something to do with the recent acegi upgrade? What is strange is that both forms have the same action:

Login from main page:

Login from the dedicated page:

However changing the latter to just “j_acegi_security_check” fixed the problem.

Any ideas?


Justin Deoliveira
OpenGeo - http://opengeo.org
Enterprise support for open source geospatial.

On Tue, Nov 9, 2010 at 7:32 PM, Justin Deoliveira <jdeolive@anonymised.com> wrote:

Hi all,
When I log into the web ui via the main page (using the form at the top) it
works great. But say if i try to visit a page that requires auth directly
say like:
http://localhost:8080/geoserver/web/?wicket:bookmarkablePage=:org.geoserver.web.data.store.StorePage
And get greeted with the dedicated login page, login fails. I did not look
into it too closely but perhaps this has something to do with the recent
acegi upgrade? What is strange is that both forms have the same action:
Login from main page:

<form wicket:id="loginform" method="post"
action="../j_acegi_security_check">

Login from the dedicated page:

<form method="post" action="../j_acegi_security_check">

However changing the latter to just "j_acegi_security_check" fixed the
problem.
Any ideas?

Hmmm... nope? Has the spring security upgrade landed? I didn't notice?
Anyways, if that fixes it, if fixes it :-p
Go for it

Cheers
Andrea

-----------------------------------------------------
Ing. Andrea Aime
Senior Software Engineer

GeoSolutions S.A.S.
Via Poggio alle Viti 1187
55054 Massarosa (LU)
Italy

phone: +39 0584962313
fax: +39 0584962313

http://www.geo-solutions.it
http://geo-solutions.blogspot.com/
http://www.linkedin.com/in/andreaaime
http://twitter.com/geowolf

-----------------------------------------------------

Ahh so this was the problem i reported few days ago:
http://old.nabble.com/Failing-to-start-geoserver-trunk-ts30130459.html

I didnt notice it was redirecting me outside geoserver path with
../j_acegi_security_check :slight_smile:

Thanks Justin!

Regards,
Ivan

On Tue, Nov 9, 2010 at 9:03 PM, Andrea Aime
<andrea.aime@anonymised.com> wrote:

On Tue, Nov 9, 2010 at 7:32 PM, Justin Deoliveira <jdeolive@anonymised.com> wrote:

Hi all,
When I log into the web ui via the main page (using the form at the top) it
works great. But say if i try to visit a page that requires auth directly
say like:
http://localhost:8080/geoserver/web/?wicket:bookmarkablePage=:org.geoserver.web.data.store.StorePage
And get greeted with the dedicated login page, login fails. I did not look
into it too closely but perhaps this has something to do with the recent
acegi upgrade? What is strange is that both forms have the same action:
Login from main page:

<form wicket:id="loginform" method="post"
action="../j_acegi_security_check">

Login from the dedicated page:

<form method="post" action="../j_acegi_security_check">

However changing the latter to just "j_acegi_security_check" fixed the
problem.
Any ideas?

Hmmm... nope? Has the spring security upgrade landed? I didn't notice?
Anyways, if that fixes it, if fixes it :-p
Go for it

Cheers
Andrea

-----------------------------------------------------
Ing. Andrea Aime
Senior Software Engineer

GeoSolutions S.A.S.
Via Poggio alle Viti 1187
55054 Massarosa (LU)
Italy

phone: +39 0584962313
fax: +39 0584962313

http://www.geo-solutions.it
http://geo-solutions.blogspot.com/
http://www.linkedin.com/in/andreaaime
http://twitter.com/geowolf

-----------------------------------------------------

------------------------------------------------------------------------------
The Next 800 Companies to Lead America's Growth: New Video Whitepaper
David G. Thomson, author of the best-selling book "Blueprint to a
Billion" shares his insights and actions to help propel your
business during the next growth cycle. Listen Now!
http://p.sf.net/sfu/SAP-dev2dev
_______________________________________________
Geoserver-devel mailing list
Geoserver-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-devel

--
Ivan Grcic