blocks|key|2537734|text|您的login+JSP应该指向j_security_check。用户名和密码应分别命名为j_username和j_password。如果您的自定义登录模块在WAS中配置正确，则它应该从此登录页面获得用户名和密码。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|2537735|下面是一个登录JSP的示例：|2537736|<html>
++++<head>
++++++++<title>Login</title>
++++</head>
++++<body>
++++++++<form+method="post"+action="<%25=request.getContextPath()%25>/j_security_check">
++++++++++++<table+width="80%25">
++++++++++++<tr>
++++++++++++++++<td+width="20%25"+align="right">Username:</td>
++++++++++++++++<td><input+size="20"+type="text"+name="j_username"+maxlength="25"></td>
++++++++++++</tr>
++++++++++++<tr>
++++++++++++++++<td+align="right">Password:</td>
++++++++++++++++<td><input+size="20"+type="password"+name="j_password"+maxlength="25"></td>
++++++++++++</tr>
++++++++++++<tr>
++++++++++++++++<td></td>
++++++++++++++++<td><input+type="submit"+name="action"+value="Login">&nbsp;
++++++++++++++++<input+type="reset"+name="reset"+value="Clear"></td>
++++++++++++</tr>
++++++++</table>
++++++++</form>
++++</body>
</html>|code-block|syntax|javascript|2537737|接下来，您必须定义auth方法、login和loginerror+JSP，以及安全角色。这是在web应用程序的web.xml中定义的。|2537738|这是一个简单的登录配置示例，其中允许所有经过身份验证的用户访问受保护的资源(您必须根据您的设置更改servlet名称)：|2537739|<login-config>
++++<auth-method>FORM</auth-method>
++++<realm-name>My+Realm</realm-name>
++++<form-login-config>
++++++++<form-login-page>login.jsp</form-login-page>
++++++++<form-error-page>loginerror.jsp</form-error-page>
++++</form-login-config>
</login-config>

<security-role>
++++<role-name>users</role-name>
</security-role>

<security-constraint>
++++<web-resource-collection>
++++++++<web-resource-name>appServlet</web-resource-name>
++++++++<url-pattern>/app/*</url-pattern>
++++</web-resource-collection>
++++<auth-constraint>
++++++++<role-name>users</role-name>
++++</auth-constraint>
</security-constraint>|2537740|注意:如果JSP驻留在WEB-INF中，则不能直接访问它，因为您应该有一个服务器端控制器将其重定向到这些JSP。|2537741|最后，您必须定义安全角色映射用户，例如映射到所有经过身份验证的用户。|2537742|这是在EAR绑定文件ibm-application-bnd.xml中定义的(把它放到application.xml旁边的EAR+META-INF目录中)：|2537743|<?xml+version="1.0"+encoding="UTF-8"?>
<application-bnd+xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
++++xmlns="http://websphere.ibm.com/xml/ns/javaee"
++++xsi:schemaLocation="http://websphere.ibm.com/xml/ns/javaee+http://websphere.ibm.com/xml/ns/javaee/ibm-application-bnd_1_0.xsd"
++++version="1.0">
++++<security-role+name="users">
++++++++<special-subject+type="ALL_AUTHENTICATED_USERS"+/>
++++</security-role>
</application-bnd>|2537744|(这是WAS8.0的设置，如果您有较早的EAR版本，则此文件名为ibm-application.xmi，并且具有不同的语法)。|2537745|如果您没有EAR，这并不重要，因为WAS会要求您将安全角色"users“映射到适当的用户/组，或者映射到一个特殊的主题"all+authenticated+users"，如本例所示。|2537746|此机制可用于执行细粒度映射，您可以为组定义单独的角色，并将其映射到用户存储库组等。|2537747|entityMap^0|0|0|0|0|0|0|0|0|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|14|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|15|8|@]|9|@]|A|$]]|$1|D|3|E|5|F|7|16|8|@]|9|@]|A|$G|H]]|$1|I|3|J|5|6|7|17|8|@]|9|@]|A|$]]|$1|K|3|L|5|6|7|18|8|@]|9|@]|A|$]]|$1|M|3|N|5|F|7|19|8|@]|9|@]|A|$G|H]]|$1|O|3|P|5|6|7|1A|8|@]|9|@]|A|$]]|$1|Q|3|R|5|6|7|1B|8|@]|9|@]|A|$]]|$1|S|3|T|5|6|7|1C|8|@]|9|@]|A|$]]|$1|U|3|V|5|F|7|1D|8|@]|9|@]|A|$G|H]]|$1|W|3|X|5|6|7|1E|8|@]|9|@]|A|$]]|$1|Y|3|Z|5|6|7|1F|8|@]|9|@]|A|$]]|$1|10|3|11|5|6|7|1G|8|@]|9|@]|A|$]]|$1|12|3|-4|5|6|7|1H|8|@]|9|@]|A|$]]]|13|$]]

<p>Your login JSP should point to j_security_check. Username and password should be named j_username and j_password, respectively.
If your custom login module is configured correctly in WAS, it should get username and password from this login page.</p>

<p>Here is an example of login JSP:</p>

<pre><code>&lt;html&gt;
    &lt;head&gt;
        &lt;title&gt;Login&lt;/title&gt;
    &lt;/head&gt;
    &lt;body&gt;
        &lt;form method="post" action="&lt;%=request.getContextPath()%&gt;/j_security_check"&gt;
            &lt;table width="80%"&gt;
            &lt;tr&gt;
                &lt;td width="20%" align="right"&gt;Username:&lt;/td&gt;
                &lt;td&gt;&lt;input size="20" type="text" name="j_username" maxlength="25"&gt;&lt;/td&gt;
            &lt;/tr&gt;
            &lt;tr&gt;
                &lt;td align="right"&gt;Password:&lt;/td&gt;
                &lt;td&gt;&lt;input size="20" type="password" name="j_password" maxlength="25"&gt;&lt;/td&gt;
            &lt;/tr&gt;
            &lt;tr&gt;
                &lt;td&gt;&lt;/td&gt;
                &lt;td&gt;&lt;input type="submit" name="action" value="Login"&gt;&amp;nbsp;
                &lt;input type="reset" name="reset" value="Clear"&gt;&lt;/td&gt;
            &lt;/tr&gt;
        &lt;/table&gt;
        &lt;/form&gt;
    &lt;/body&gt;
&lt;/html&gt;
</code></pre>

<p>Next, you have to define auth method, login and loginerror JSPs, together with security roles. This is defined in web.xml of your web application.</p>

<p>This is an example of a simple login config where all authenticated users are allowed to access protected resource (you have to change servlet name according to your setup):</p>

<pre><code>&lt;login-config&gt;
    &lt;auth-method&gt;FORM&lt;/auth-method&gt;
    &lt;realm-name&gt;My Realm&lt;/realm-name&gt;
    &lt;form-login-config&gt;
        &lt;form-login-page&gt;login.jsp&lt;/form-login-page&gt;
        &lt;form-error-page&gt;loginerror.jsp&lt;/form-error-page&gt;
    &lt;/form-login-config&gt;
&lt;/login-config&gt;

&lt;security-role&gt;
    &lt;role-name&gt;users&lt;/role-name&gt;
&lt;/security-role&gt;

&lt;security-constraint&gt;
    &lt;web-resource-collection&gt;
        &lt;web-resource-name&gt;appServlet&lt;/web-resource-name&gt;
        &lt;url-pattern&gt;/app/*&lt;/url-pattern&gt;
    &lt;/web-resource-collection&gt;
    &lt;auth-constraint&gt;
        &lt;role-name&gt;users&lt;/role-name&gt;
    &lt;/auth-constraint&gt;
&lt;/security-constraint&gt;
</code></pre>

<p>Note: if your JSPs reside inside WEB-INF, you cannot access it directly, in that cas you should have a server-side controller that redirects it to these JSPs.</p>

<p>Lastly, you have to define security role mapping users that maps e.g. to all authenticated users.</p>

<p>This is defined in EAR binding file ibm-application-bnd.xml (put it into EAR's META-INF directory next to application.xml):</p>

<pre><code>&lt;?xml version="1.0" encoding="UTF-8"?&gt;
&lt;application-bnd xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    xmlns="http://websphere.ibm.com/xml/ns/javaee"
    xsi:schemaLocation="http://websphere.ibm.com/xml/ns/javaee http://websphere.ibm.com/xml/ns/javaee/ibm-application-bnd_1_0.xsd"
    version="1.0"&gt;
    &lt;security-role name="users"&gt;
        &lt;special-subject type="ALL_AUTHENTICATED_USERS" /&gt;
    &lt;/security-role&gt;
&lt;/application-bnd&gt;
</code></pre>

<p>(this is a setup for WAS 8.0, if you have an older EAR version this file is named ibm-application.xmi and has a different syntax).</p>

<p>If you do not have EAR, it doesn't matter because WAS will ask you to map security role "users" to appropriate user/group or to a special subject "all authenticated users", as in this case.</p>

<p>This mechanism can be used to perform a fine-grained mapping, you can define separate roles for groups and map it to user repository groups etc.</p>


blocks|key|2550774|text|如果您使用j_security_check，那么它将转到WEB_INBOUND登录模块。请查看此页面Developing+custom+login+modules+for+a+system+login+configuration+for+JAAS以了解更多详细信息。但是，有时最好提供您自己的登录方法，制作一份WEB_INBOUND的副本，并通过插入您自己的登录模块来自定义该副本。取决于您的要求和服务器上安装的其他应用程序。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|2550775|entityMap|0|LINK|mutability|MUTABLE|url|http://www-01.ibm.com/support/knowledgecenter/SSAW57_8.5.5/com.ibm.websphere.nd.doc/ae/tsec_jaascustlogmod.html?lang=en^0|S|B|4B|B|1E|21|0|0^^$0|@$1|2|3|4|5|6|7|N|8|@$9|O|A|P|B|C]|$9|Q|A|R|B|C]]|D|@$9|S|A|T|1|U]]|E|$]]|$1|F|3|-4|5|6|7|V|8|@]|D|@]|E|$]]]|G|$H|$5|I|J|K|E|$L|M]]]]

<p>If you use j_security_check, then it will go to the <code>WEB_INBOUND</code> login module. Check this page <a href="http://www-01.ibm.com/support/knowledgecenter/SSAW57_8.5.5/com.ibm.websphere.nd.doc/ae/tsec_jaascustlogmod.html?lang=en" rel="nofollow">Developing custom login modules for a system login configuration for JAAS</a> for more details. However sometimes it is better to provide your own login method, make a copy of <code>WEB_INBOUND</code> and customize that copy with inserting your own login module. Depends on your requirement and other applications installed on the server.</p>


<p>I have written a custom login module and called it in navigator (application login module for content navigator), and it runs very well, but it doesn't work on the login page when we call the j_security_check url.</p>

<p>Is there a way, I can configure it there? Since it is a jsp page I will get much more things to do .</p>


Which login module is called by WebSphere when j_security_check is called?

翻译质量差，导致语言生硬或混乱。

没有提供实际的解决方法或示例。

解答不清晰，无法理解或解决问题。

页面排版不美观，阅读体验差。

文章

问答

视频

学习中心

腾讯云实验室

直播

竞赛

腾讯云代码分析专区

腾讯iOA零信任安全管理系统专区

腾讯云架构师技术同盟交流圈

腾讯云数据库专区

腾讯云顾问专区

腾讯云原生专区

腾讯混元专区

腾讯云TCE专区

腾讯云Lighthouse专区

腾讯云HAI专区

腾讯云Edgeone专区

腾讯云存储专区

腾讯云智能专区

腾讯轻联专区 

腾讯云开发专区

TAPD专区

腾讯轻量云游戏服专区

腾讯云最具价值专家

腾讯云架构师技术同盟

腾讯云创作之星

腾讯云开发者先锋

腾讯云代码助手

云原生构建

TAPD 敏捷项目管理

Cloud Studio

SDK中心

API中心

命令行工具

涵盖代码开发、场景应用、自动测试全流程，助你从零构建专属AI助手

一站式MCP教程库，解锁AI应用新玩法

我已经编写了一个自定义登录模块，并在导航器(内容导航器的应用程序登录模块)中调用它，它运行得很好，但当我们调用j_security_check url时，它在登录页面上不起作用。有没有办法，我可以在那里配置它？因为它是一个jsp页面，所以我会有更多的事情要做。

问调用j_security_check时，WebSphere会调用哪个登录模块？
EN

Stack Overflow用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问调用j_security_check时，WebSphere会调用哪个登录模块？EN