Thursday, August 28, 2008

Customize 401 Error Page with HTTP Basic Authentication

For HTTP Basic Authentication, you define the auth type as BASIC.

After adding an error-page element in web.xml to customize 401 error page, HTTP auth will not work.

So far with Tomcat 6.0, I have found no way to make them work.

Monday, August 25, 2008

Tomcat DataSourceRealm

PostgreSQL version 8.

userTable="schema1.users" works and the schema name should be lower case too in the database.

Schema1 or SCHEMA1 won't work.

Wednesday, August 06, 2008

External JACC Provider in WebSphere 6.1

In WebSphere Application Server version 6.1, you can choose Default Authorization or External Authorization by JACC Provider.
  1. Internal accepts "welcome.do" but external TAM provider doesn't, it accepts "/welcome.do"
  2. I switched from Default to External but failed to switch it back. Even from the admin console it looked fine, but the server kept using TAM as authorization provider. What I had to do was to reinstall RSA.

Friday, August 01, 2008

TAM Error AWXJC0050E

[8/1/08 11:16:51:373 EDT] 00000020 SystemErr R Caused by:
com.tivoli.pd.as.jacc.cfg.TAMConfigException: AWXJC0048E An error occurred during the configuration. The details are:
com.tivoli.pd.as.jacc.cfg.ConfigActionFailedException: AWXJC0050E The Tivoli Access Manager user, sec_master, failed to add the Tivoli Access Manager user, JACC_-264539269/cledt-123691.agna.amgreetings.com, to the Tivoli
Access Manager group, iv-admin. The details are: Wrappered Exception:java.net.BindException: Address already in use:
NET_Bind[HPDCO1050E Socket could not be created (8920).].. at
com.tivoli.pd.as.jacc.cfg.TAMConfigController.execute(TAMConfigController.java:156)

For this error, note the port 8920 in the message, then change the client listener port from default 8900:8999 to 8921:8999.

Have a $ in your password?

In WAS 6.1 administrative console, when define a LDAP connection and enter the Bind password. It has a $. For example, the password is "abc$$cba".

What you need to enter is "abc$$$$cba".