This discussion is archived
6 Replies Latest reply: May 31, 2011 8:03 AM by 865062 RSS

agent filter location in web.xml for websphere v7.0

865062 Newbie
Currently Being Moderated
In the document:
Sun OpenSSO Enterprise Policy Agent 3.0 Guide for IBM WebSphere Application Server 6.1/7.0 and WebSphere Portal Server 6.1
I'm and tying to do this part:
Installing the Agent Filter for the WebSphere Application Server 6.1/7.0 Administration Console

for my WebSphere 7.0 installation.

My issue is the placement of the second filter.
<filter-mapping>
<filter-name>Agent</filter-name>
<url-pattern>/*</url-pattern>
</filter-mapping>

the doc says to put it under:
<filter-mapping>
<filter-name>WSCUrlFilter</filter-name>
<servlet-name>action</servlet-name>
</filter-mapping>
<filter-mapping>
     <filter-name>WSCUrlFilter</filter-name>
<url-pattern>/federatedlogoff</url-pattern>
</filter-mapping>


however, my Websphere 7.0 web.xml does not have this section in the file.

Can some one assist me with proper placement?

here is the first few lines of my xml:

<?xml version="1.0" encoding="UTF-8"?><web-app xmlns="http://java.sun.com/xml/ns/j2ee" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" id="WebApp_1" version="2.4" xsi:schemaLocation="http://java.sun.co
m/xml/ns/j2ee http://java.sun.com/xml/ns/j2ee/web-app_2_4.xsd">
<display-name>isclite</display-name>
<filter>
<filter-name>WSCUrlFilter</filter-name>
<filter-class>com.ibm.ws.console.core.servlet.WSCUrlFilter</filter-class>
</filter>
<filter>
<filter-name>Trace_Tree_Cache_Init_Filter</filter-name>
<filter-class>com.ibm.ws.console.probdetermination.trace.tree.TraceTreeCacheInit</filter-class>
</filter>
<filter-mapping>
<filter-name>WSCUrlFilter</filter-name>
<url-pattern>/*</url-pattern>
</filter-mapping>
<filter-mapping>
<filter-name>Trace_Tree_Cache_Init_Filter</filter-name>
<servlet-name>Trace Tree Servlet</servlet-name>
</filter-mapping>
<listener>
<listener-class>com.ibm.isclite.SessionListener</listener-class>
</listener>
<listener>
<listener-class>com.ibm.ws.console.appmanagement.SessionListener</listener-class>
</listener>
<servlet>
<servlet-name>action</servlet-name>
<servlet-class>org.apache.struts.action.ActionServlet</servlet-class>
<init-param>
<param-name>config</param-name>
<param-value>/WEB-INF/config/struts-config.xml</param-value>
</init-param>
</servlet>
<servlet>
<servlet-name>SecureCleanup</servlet-name>
<servlet-class>com.ibm.ws.console.core.servlet.SecureCleanupServlet</servlet-class>
</servlet>
<servlet>
<servlet-name>FederationServlet</servlet-name>
<servlet-class>com.ibm.ws.console.core.servlet.FederationServlet</servlet-class>
</servlet>
<servlet>
<servlet-name>ProfileSelectionServlet</servlet-name>
<servlet-class>com.ibm.ws.console.core.servlet.ProfileSelectionServlet</servlet-class>
</servlet>
<servlet>
<servlet-name>ConsoleCSS</servlet-name>
<jsp-file>secure/layouts/console_css.jsp</jsp-file>
</servlet>
<servlet>
<servlet-name>EventInitializer</servlet-name>
<servlet-class>com.ibm.ws.console.events.EventListenerServlet</servlet-class>
<load-on-startup>2</load-on-startup>
</servlet>
<servlet>
<servlet-name>downloadFile</servlet-name>
<servlet-class>com.ibm.ws.console.core.servlet.DownloadFileServlet</servlet-class>
</servlet>
<servlet>
<servlet-name>StatusServlet</servlet-name>
<servlet-class>com.ibm.ws.console.core.servlet.StatusServlet</servlet-class>
</servlet>
<servlet>
  • 1. Re: agent filter location in web.xml for websphere v7.0
    handat Expert
    Currently Being Moderated
    See below. You just have additional probe filters.
    862059 wrote:
    In the document:
    Sun OpenSSO Enterprise Policy Agent 3.0 Guide for IBM WebSphere Application Server 6.1/7.0 and WebSphere Portal Server 6.1
    I'm and tying to do this part:
    Installing the Agent Filter for the WebSphere Application Server 6.1/7.0 Administration Console

    for my WebSphere 7.0 installation.

    My issue is the placement of the second filter.
    <filter-mapping>
    <filter-name>Agent</filter-name>
    <url-pattern>/*</url-pattern>
    </filter-mapping>

    the doc says to put it under:
    <filter-mapping>
    <filter-name>WSCUrlFilter</filter-name>
    <servlet-name>action</servlet-name>
    </filter-mapping>
    <filter-mapping>
         <filter-name>WSCUrlFilter</filter-name>
    <url-pattern>/federatedlogoff</url-pattern>
    </filter-mapping>


    however, my Websphere 7.0 web.xml does not have this section in the file.

    Can some one assist me with proper placement?

    here is the first few lines of my xml:

    <?xml version="1.0" encoding="UTF-8"?><web-app xmlns="http://java.sun.com/xml/ns/j2ee" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" id="WebApp_1" version="2.4" xsi:schemaLocation="http://java.sun.co
    m/xml/ns/j2ee http://java.sun.com/xml/ns/j2ee/web-app_2_4.xsd">
    <display-name>isclite</display-name>
    <filter>
    <filter-name>WSCUrlFilter</filter-name>
    <filter-class>com.ibm.ws.console.core.servlet.WSCUrlFilter</filter-class>
    </filter>
    <filter>
    <filter-name>Trace_Tree_Cache_Init_Filter</filter-name>
    <filter-class>com.ibm.ws.console.probdetermination.trace.tree.TraceTreeCacheInit</filter-class>
    </filter>
    <filter-mapping>
    <filter-name>WSCUrlFilter</filter-name>
    <url-pattern>/*</url-pattern>
    </filter-mapping>
    <filter-mapping>
    <filter-name>Trace_Tree_Cache_Init_Filter</filter-name>
    <servlet-name>Trace Tree Servlet</servlet-name>
    </filter-mapping>
    <filter-mapping>
    <filter-name>Agent</filter-name>
    <url-pattern>/*</url-pattern>
    </filter-mapping>
    <listener>
    <listener-class>com.ibm.isclite.SessionListener</listener-class>
    </listener>
    <listener>
    <listener-class>com.ibm.ws.console.appmanagement.SessionListener</listener-class>
    </listener>
    <servlet>
    <servlet-name>action</servlet-name>
    <servlet-class>org.apache.struts.action.ActionServlet</servlet-class>
    <init-param>
    <param-name>config</param-name>
    <param-value>/WEB-INF/config/struts-config.xml</param-value>
    </init-param>
    </servlet>
    <servlet>
    <servlet-name>SecureCleanup</servlet-name>
    <servlet-class>com.ibm.ws.console.core.servlet.SecureCleanupServlet</servlet-class>
    </servlet>
    <servlet>
    <servlet-name>FederationServlet</servlet-name>
    <servlet-class>com.ibm.ws.console.core.servlet.FederationServlet</servlet-class>
    </servlet>
    <servlet>
    <servlet-name>ProfileSelectionServlet</servlet-name>
    <servlet-class>com.ibm.ws.console.core.servlet.ProfileSelectionServlet</servlet-class>
    </servlet>
    <servlet>
    <servlet-name>ConsoleCSS</servlet-name>
    <jsp-file>secure/layouts/console_css.jsp</jsp-file>
    </servlet>
    <servlet>
    <servlet-name>EventInitializer</servlet-name>
    <servlet-class>com.ibm.ws.console.events.EventListenerServlet</servlet-class>
    <load-on-startup>2</load-on-startup>
    </servlet>
    <servlet>
    <servlet-name>downloadFile</servlet-name>
    <servlet-class>com.ibm.ws.console.core.servlet.DownloadFileServlet</servlet-class>
    </servlet>
    <servlet>
    <servlet-name>StatusServlet</servlet-name>
    <servlet-class>com.ibm.ws.console.core.servlet.StatusServlet</servlet-class>
    </servlet>
    <servlet>
  • 2. Re: agent filter location in web.xml for websphere v7.0
    865062 Newbie
    Currently Being Moderated
    so I should just verify, both parts ;) Here's what I have:

    <?xml version="1.0" encoding="UTF-8"?><web-app xmlns="http://java.sun.com/xml/ns/j2ee" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" id="WebApp_1" version="2.4" xsi:sch
    emaLocation="http://java.sun.com/xml/ns/j2ee http://java.sun.com/xml/ns/j2ee/web-app_2_4.xsd">
    <display-name>isclite</display-name>
    <filter>
    <filter-name>WSCUrlFilter</filter-name>
    <filter-class>com.ibm.ws.console.core.servlet.WSCUrlFilter</filter-class>
    </filter>
    _<filter>_
    _<filter-name>Agent</filter-name>_
    _<filter-class>com.sun.identity.agents.filter.AmAgentFilter</filter-class>_
    _</filter>_
    <filter>
    <filter-name>Trace_Tree_Cache_Init_Filter</filter-name>
    <filter-class>com.ibm.ws.console.probdetermination.trace.tree.TraceTreeCacheInit</filter-class>
    </filter>
    <filter-mapping>
    <filter-name>WSCUrlFilter</filter-name>
    <url-pattern>/*</url-pattern>
    </filter-mapping>
    <filter-mapping>
    <filter-name>Trace_Tree_Cache_Init_Filter</filter-name>
    <servlet-name>Trace Tree Servlet</servlet-name>
    </filter-mapping>
    _<filter-mapping>_
    _<filter-name>Agent</filter-name>_
    _<url-pattern>/*</url-pattern>_
    _</filter-mapping>_
    <listener>
    <listener-class>com.ibm.isclite.SessionListener</listener-class>
    </listener>
    <listener>
    <listener-class>com.ibm.ws.console.appmanagement.SessionListener</listener-class>
    </listener>
    <servlet>
    <servlet-name>action</servlet-name>
    <servlet-class>org.apache.struts.action.ActionServlet</servlet-class>
    <init-param>
    <param-name>config</param-name>
    <param-value>/WEB-INF/config/struts-config.xml</param-value>
    </init-param>

    ...

    Edited by: 862059 on May 30, 2011 7:48 AM
  • 3. Re: agent filter location in web.xml for websphere v7.0
    865062 Newbie
    Currently Being Moderated
    I tried the above, and it seems to break my console access. After I add in the filters like I did above, when I try to log into the console I get this error message:
    Login failed. Check the user ID and password and try again. Login failed. Check the user ID and password and try again.


    If I remove these lines, I can then access the console properly again.

    Thoughts?
  • 4. Re: agent filter location in web.xml for websphere v7.0
    handat Expert
    Currently Being Moderated
    Change your WSCUrlFilter mapping from <url-pattern>/*</url-pattern> to <url-pattern>/federatedlogoff</url-pattern>
    Have you done the other configuration requirements as well? WebSphere requires additional steps to other app servers.
  • 5. Re: agent filter location in web.xml for websphere v7.0
    865062 Newbie
    Currently Being Moderated
    Yeah I'm pretty sure I followed all the other steps. Fortunately this is a new install and there are no running application servers ;).

    We're testing IAM/OpenSSO on WebSphere 7.0 for an upgrade from 6.1.

    Note that when I put this xml into production it kills my access into the console.. I have to remove these lines.

    I will try your recommendation and get back soon, thanks for responding again.
  • 6. Re: agent filter location in web.xml for websphere v7.0
    865062 Newbie
    Currently Being Moderated
    just tried the above, and still get the message:
    "Login failed. Check the user ID and password and try again. Login failed. Check the user ID and password and try again."

    at the Console page, after I edit the web.xml with the above information.

Legend

  • Correct Answers - 10 points
  • Helpful Answers - 5 points