6 Replies Latest reply: May 31, 2011 10:03 AM by 865062 RSS

    agent filter location in web.xml for websphere v7.0

    865062
      In the document:
      Sun OpenSSO Enterprise Policy Agent 3.0 Guide for IBM WebSphere Application Server 6.1/7.0 and WebSphere Portal Server 6.1
      I'm and tying to do this part:
      Installing the Agent Filter for the WebSphere Application Server 6.1/7.0 Administration Console

      for my WebSphere 7.0 installation.

      My issue is the placement of the second filter.
      <filter-mapping>
      <filter-name>Agent</filter-name>
      <url-pattern>/*</url-pattern>
      </filter-mapping>

      the doc says to put it under:
      <filter-mapping>
      <filter-name>WSCUrlFilter</filter-name>
      <servlet-name>action</servlet-name>
      </filter-mapping>
      <filter-mapping>
           <filter-name>WSCUrlFilter</filter-name>
      <url-pattern>/federatedlogoff</url-pattern>
      </filter-mapping>


      however, my Websphere 7.0 web.xml does not have this section in the file.

      Can some one assist me with proper placement?

      here is the first few lines of my xml:

      <?xml version="1.0" encoding="UTF-8"?><web-app xmlns="http://java.sun.com/xml/ns/j2ee" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" id="WebApp_1" version="2.4" xsi:schemaLocation="http://java.sun.co
      m/xml/ns/j2ee http://java.sun.com/xml/ns/j2ee/web-app_2_4.xsd">
      <display-name>isclite</display-name>
      <filter>
      <filter-name>WSCUrlFilter</filter-name>
      <filter-class>com.ibm.ws.console.core.servlet.WSCUrlFilter</filter-class>
      </filter>
      <filter>
      <filter-name>Trace_Tree_Cache_Init_Filter</filter-name>
      <filter-class>com.ibm.ws.console.probdetermination.trace.tree.TraceTreeCacheInit</filter-class>
      </filter>
      <filter-mapping>
      <filter-name>WSCUrlFilter</filter-name>
      <url-pattern>/*</url-pattern>
      </filter-mapping>
      <filter-mapping>
      <filter-name>Trace_Tree_Cache_Init_Filter</filter-name>
      <servlet-name>Trace Tree Servlet</servlet-name>
      </filter-mapping>
      <listener>
      <listener-class>com.ibm.isclite.SessionListener</listener-class>
      </listener>
      <listener>
      <listener-class>com.ibm.ws.console.appmanagement.SessionListener</listener-class>
      </listener>
      <servlet>
      <servlet-name>action</servlet-name>
      <servlet-class>org.apache.struts.action.ActionServlet</servlet-class>
      <init-param>
      <param-name>config</param-name>
      <param-value>/WEB-INF/config/struts-config.xml</param-value>
      </init-param>
      </servlet>
      <servlet>
      <servlet-name>SecureCleanup</servlet-name>
      <servlet-class>com.ibm.ws.console.core.servlet.SecureCleanupServlet</servlet-class>
      </servlet>
      <servlet>
      <servlet-name>FederationServlet</servlet-name>
      <servlet-class>com.ibm.ws.console.core.servlet.FederationServlet</servlet-class>
      </servlet>
      <servlet>
      <servlet-name>ProfileSelectionServlet</servlet-name>
      <servlet-class>com.ibm.ws.console.core.servlet.ProfileSelectionServlet</servlet-class>
      </servlet>
      <servlet>
      <servlet-name>ConsoleCSS</servlet-name>
      <jsp-file>secure/layouts/console_css.jsp</jsp-file>
      </servlet>
      <servlet>
      <servlet-name>EventInitializer</servlet-name>
      <servlet-class>com.ibm.ws.console.events.EventListenerServlet</servlet-class>
      <load-on-startup>2</load-on-startup>
      </servlet>
      <servlet>
      <servlet-name>downloadFile</servlet-name>
      <servlet-class>com.ibm.ws.console.core.servlet.DownloadFileServlet</servlet-class>
      </servlet>
      <servlet>
      <servlet-name>StatusServlet</servlet-name>
      <servlet-class>com.ibm.ws.console.core.servlet.StatusServlet</servlet-class>
      </servlet>
      <servlet>
        • 1. Re: agent filter location in web.xml for websphere v7.0
          handat
          See below. You just have additional probe filters.
          862059 wrote:
          In the document:
          Sun OpenSSO Enterprise Policy Agent 3.0 Guide for IBM WebSphere Application Server 6.1/7.0 and WebSphere Portal Server 6.1
          I'm and tying to do this part:
          Installing the Agent Filter for the WebSphere Application Server 6.1/7.0 Administration Console

          for my WebSphere 7.0 installation.

          My issue is the placement of the second filter.
          <filter-mapping>
          <filter-name>Agent</filter-name>
          <url-pattern>/*</url-pattern>
          </filter-mapping>

          the doc says to put it under:
          <filter-mapping>
          <filter-name>WSCUrlFilter</filter-name>
          <servlet-name>action</servlet-name>
          </filter-mapping>
          <filter-mapping>
               <filter-name>WSCUrlFilter</filter-name>
          <url-pattern>/federatedlogoff</url-pattern>
          </filter-mapping>


          however, my Websphere 7.0 web.xml does not have this section in the file.

          Can some one assist me with proper placement?

          here is the first few lines of my xml:

          <?xml version="1.0" encoding="UTF-8"?><web-app xmlns="http://java.sun.com/xml/ns/j2ee" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" id="WebApp_1" version="2.4" xsi:schemaLocation="http://java.sun.co
          m/xml/ns/j2ee http://java.sun.com/xml/ns/j2ee/web-app_2_4.xsd">
          <display-name>isclite</display-name>
          <filter>
          <filter-name>WSCUrlFilter</filter-name>
          <filter-class>com.ibm.ws.console.core.servlet.WSCUrlFilter</filter-class>
          </filter>
          <filter>
          <filter-name>Trace_Tree_Cache_Init_Filter</filter-name>
          <filter-class>com.ibm.ws.console.probdetermination.trace.tree.TraceTreeCacheInit</filter-class>
          </filter>
          <filter-mapping>
          <filter-name>WSCUrlFilter</filter-name>
          <url-pattern>/*</url-pattern>
          </filter-mapping>
          <filter-mapping>
          <filter-name>Trace_Tree_Cache_Init_Filter</filter-name>
          <servlet-name>Trace Tree Servlet</servlet-name>
          </filter-mapping>
          <filter-mapping>
          <filter-name>Agent</filter-name>
          <url-pattern>/*</url-pattern>
          </filter-mapping>
          <listener>
          <listener-class>com.ibm.isclite.SessionListener</listener-class>
          </listener>
          <listener>
          <listener-class>com.ibm.ws.console.appmanagement.SessionListener</listener-class>
          </listener>
          <servlet>
          <servlet-name>action</servlet-name>
          <servlet-class>org.apache.struts.action.ActionServlet</servlet-class>
          <init-param>
          <param-name>config</param-name>
          <param-value>/WEB-INF/config/struts-config.xml</param-value>
          </init-param>
          </servlet>
          <servlet>
          <servlet-name>SecureCleanup</servlet-name>
          <servlet-class>com.ibm.ws.console.core.servlet.SecureCleanupServlet</servlet-class>
          </servlet>
          <servlet>
          <servlet-name>FederationServlet</servlet-name>
          <servlet-class>com.ibm.ws.console.core.servlet.FederationServlet</servlet-class>
          </servlet>
          <servlet>
          <servlet-name>ProfileSelectionServlet</servlet-name>
          <servlet-class>com.ibm.ws.console.core.servlet.ProfileSelectionServlet</servlet-class>
          </servlet>
          <servlet>
          <servlet-name>ConsoleCSS</servlet-name>
          <jsp-file>secure/layouts/console_css.jsp</jsp-file>
          </servlet>
          <servlet>
          <servlet-name>EventInitializer</servlet-name>
          <servlet-class>com.ibm.ws.console.events.EventListenerServlet</servlet-class>
          <load-on-startup>2</load-on-startup>
          </servlet>
          <servlet>
          <servlet-name>downloadFile</servlet-name>
          <servlet-class>com.ibm.ws.console.core.servlet.DownloadFileServlet</servlet-class>
          </servlet>
          <servlet>
          <servlet-name>StatusServlet</servlet-name>
          <servlet-class>com.ibm.ws.console.core.servlet.StatusServlet</servlet-class>
          </servlet>
          <servlet>
          • 2. Re: agent filter location in web.xml for websphere v7.0
            865062
            so I should just verify, both parts ;) Here's what I have:

            <?xml version="1.0" encoding="UTF-8"?><web-app xmlns="http://java.sun.com/xml/ns/j2ee" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" id="WebApp_1" version="2.4" xsi:sch
            emaLocation="http://java.sun.com/xml/ns/j2ee http://java.sun.com/xml/ns/j2ee/web-app_2_4.xsd">
            <display-name>isclite</display-name>
            <filter>
            <filter-name>WSCUrlFilter</filter-name>
            <filter-class>com.ibm.ws.console.core.servlet.WSCUrlFilter</filter-class>
            </filter>
            _<filter>_
            _<filter-name>Agent</filter-name>_
            _<filter-class>com.sun.identity.agents.filter.AmAgentFilter</filter-class>_
            _</filter>_
            <filter>
            <filter-name>Trace_Tree_Cache_Init_Filter</filter-name>
            <filter-class>com.ibm.ws.console.probdetermination.trace.tree.TraceTreeCacheInit</filter-class>
            </filter>
            <filter-mapping>
            <filter-name>WSCUrlFilter</filter-name>
            <url-pattern>/*</url-pattern>
            </filter-mapping>
            <filter-mapping>
            <filter-name>Trace_Tree_Cache_Init_Filter</filter-name>
            <servlet-name>Trace Tree Servlet</servlet-name>
            </filter-mapping>
            _<filter-mapping>_
            _<filter-name>Agent</filter-name>_
            _<url-pattern>/*</url-pattern>_
            _</filter-mapping>_
            <listener>
            <listener-class>com.ibm.isclite.SessionListener</listener-class>
            </listener>
            <listener>
            <listener-class>com.ibm.ws.console.appmanagement.SessionListener</listener-class>
            </listener>
            <servlet>
            <servlet-name>action</servlet-name>
            <servlet-class>org.apache.struts.action.ActionServlet</servlet-class>
            <init-param>
            <param-name>config</param-name>
            <param-value>/WEB-INF/config/struts-config.xml</param-value>
            </init-param>

            ...

            Edited by: 862059 on May 30, 2011 7:48 AM
            • 3. Re: agent filter location in web.xml for websphere v7.0
              865062
              I tried the above, and it seems to break my console access. After I add in the filters like I did above, when I try to log into the console I get this error message:
              Login failed. Check the user ID and password and try again. Login failed. Check the user ID and password and try again.


              If I remove these lines, I can then access the console properly again.

              Thoughts?
              • 4. Re: agent filter location in web.xml for websphere v7.0
                handat
                Change your WSCUrlFilter mapping from <url-pattern>/*</url-pattern> to <url-pattern>/federatedlogoff</url-pattern>
                Have you done the other configuration requirements as well? WebSphere requires additional steps to other app servers.
                • 5. Re: agent filter location in web.xml for websphere v7.0
                  865062
                  Yeah I'm pretty sure I followed all the other steps. Fortunately this is a new install and there are no running application servers ;).

                  We're testing IAM/OpenSSO on WebSphere 7.0 for an upgrade from 6.1.

                  Note that when I put this xml into production it kills my access into the console.. I have to remove these lines.

                  I will try your recommendation and get back soon, thanks for responding again.
                  • 6. Re: agent filter location in web.xml for websphere v7.0
                    865062
                    just tried the above, and still get the message:
                    "Login failed. Check the user ID and password and try again. Login failed. Check the user ID and password and try again."

                    at the Console page, after I edit the web.xml with the above information.