Skip to main content

I lost myself in OpenSSO redirection loop

These days i am working with some identity management technologies for secure roles and policy based authentication.I came across one almost closed project OpenSSO which is no doubt excellent.I am telling
it closed because it is a open source software initiated by Sun Microsystem and inspired by Sun Access Manager.After the Sun-Oracle merger the oracle has decided to close this project and stopped all the
support that Sun was providing earlier.Well the you can use this OpenSSO server for your all applicaiton server ,No matters it is tomcat,Jetty ,JBoss or any other application server.You can achieve single sign on by two ways either use the policy agent and deploy it in your applicaiton server or use the OpenSSOClientSdk .
Different policy agents are available for different servers.
I choosed the openssoclientsdk for my java web applicaiton.I am using tomcat 6.0 and openSSO 8.0 enterprise edition.I have integrated the spring security and the openSSO through
opensso client sdk .After finishing all the steps of installation.when my application is redirecting to opensso server for authentication it is going to indefinite redirection loop, i have tried every thing that i can to resolve this issue,posted in forums ,joined a opensso community in linked in , i got some suggestions but all are useless. God knows this is bug in OpenSSO.
God Bless OpenSSO
Labels:

Comments

Post a Comment

Popular posts from this blog

The Bourne Betrayal | Book Review

Novel by Eric Van Lustbader and Robert Ludlum I like all Robert Ludlum’s novels including those which are written by Evan Lastbadder. To me his novels have taken fiction to the next level. During my way back to Hyderabad from my last summer trip to hometown I bought paperback version of “The Bourne Betryal”. This novel was full of Lastbadder’s style of writing than Robert Ludlum’s one.  I took almost 6 months to complete it. This novel has something different to offer actually. Plot is exciting but the story is not very accelerating. Jason bourn and Martin Lindros, When martin Lindros decided to come back in the field operations with the aim to destroy Fadi and When Martin is out the track , Jason is the only help possible in the situation. Story takes you through various struggle of Jason to bring Martin back home. There are few things where author has not even paid any attention for example how does an ordinary Pakistani Waiter will have that much of information   Towa...
Post a Comment
Read more

Mobile Message Organizer

Got a basic requirement that i think every mobile should have, all the mail clients have this facility and i dont see any big difficulties on this other than the storage problem which is not a problem at all as we got GB of spaces in our memory cards. Well i am talking about the organizing the messages in Inbox , categorization of messages. Suppose i want to store all the messages from one of my friend say A in a folder called Personal, my existing mobile device Nokai E71 doesn't have this feature inbuilt (Ofcourse if you want you can make a folder and move the messages manually but here i am talking about the idea of automating this procedure). Only thing we need to do is , we have to store the rules in separate location , rules will be defined by the user and then device will follow these rules.There are no or very less software available which satisfy this requirement for mobile device.this is so simple but basic requirement as per the end user. I am going to make this one ...
2 comments
Read more

Information Security and Development Skills

From one of my quora answers What jobs in the information security realm require strong development skills? By development skills if you mean application development skills then yes what Andrew Olson  pointed out seems correct, You can use those skills during the static analysis code review. Code review has always been part of security engineering in most of the organizatons. When you come to offensive security you should have strong development skills as you will be developing exploits in order to publish or test the vulnerabilities. Skills that you need at this level are completely differnt from the application development skills which is largely based on Language and thrid part libraries available in the language. Its kind of hard to segregate responsibilities based on the job role but let me try and list some for you Information security engineer (Application Security)  - Code Review(Both manual and automated using the tools), Should have good knowledge of the fr...
3 comments
Read more