Loosing my SecureContext

[sklakken]

I've got a situation where it appears that my browser isn't saving the Secure Context until after a second login. When I go to my home page directly after a login, I can reload repeatedly without loosing my context, but when I step of the page and go to another page in the application, the SecureContext is lost and I'm redirected to the login screen. After re-logging in, everything works great. The following are the steps taken to work in the application w/o issue:

1. Open Browser
2. Log into Application
3. Forwarded to application's home page
4. Reload home page without any problems
5. Go to another page
6. Loose my SecureContext
7. Returned back to Login Screen
8. Login and returned to "Gone To" page
9. Everything's okay from here on.

I'm not able to figure out what's needed to save the Secure Context directly after the first login, so any help/workaround would be greatly appreciated.

[Luke Taylor]

Have you looked at the debug log to see what's happening? This would be likely to shed more light on where you're "losing the context". Also some information on the version you're using, what filters you have etc. might be useful.

Does the application reset the context anywhere, invalidate the session or anything like that?

[sklakken]

Luke,

I'm not making any headway on this. Hopefully, you see something I don't.



[code:1:572d67b1c5]
DEBUG ManagerBase:653 - Start expire sessions StandardManager at 1121964659064 sessioncount 4
DEBUG ManagerBase:662 - End expire sessions StandardManager processingTime 0 expired sessions: 2
DEBUG ManagerBase:653 - Start expire sessions StandardManager at 1121964719098 sessioncount 2
DEBUG ManagerBase:662 - End expire sessions StandardManager processingTime 0 expired sessions: 1
DEBUG PathBasedFilterInvocationDefinitionMap:110 - Converted URL to lowercase, from: '/logon.htm'; to: '/logon.htm'
DEBUG PathBasedFilterInvocationDefinitionMap:121 - Candidate is: '/logon.htm'; pattern is /**; matched=true
DEBUG DefaultListableBeanFactory:186 - Returning cached instance of singleton bean 'httpSessionContextIntegrationFilter'
DEBUG DefaultListableBeanFactory:186 - Returning cached instance of singleton bean 'authenticationProcessingFilter'
DEBUG DefaultListableBeanFactory:186 - Returning cached instance of singleton bean 'securityEnforcementFilter'
DEBUG FilterChainProxy:297 - /logon.htm at position 1 of 3 in additional filter chain; firing Filter: 'net.sf.acegisecurity.context.HttpSessionContextIn tegrationFilter@1dcb3cd'
DEBUG HttpSessionContextIntegrationFilter:205 - No HttpSession currently exists
DEBUG HttpSessionContextIntegrationFilter:213 - As ContextHolder null, setup ContextHolder with a fresh new instance: 'net.sf.acegisecurity.context.security.SecureConte xtImpl@9e4dc0: Null authentication'
DEBUG FilterChainProxy:297 - /logon.htm at position 2 of 3 in additional filter chain; firing Filter: 'net.sf.acegisecurity.ui.webapp.AuthenticationProc essingFilter@1082661'
DEBUG FilterChainProxy:297 - /logon.htm at position 3 of 3 in additional filter chain; firing Filter: 'net.sf.acegisecurity.intercept.web.SecurityEnforc ementFilter@1d2162c'
DEBUG PathBasedFilterInvocationDefinitionMap:110 - Converted URL to lowercase, from: '/logon.htm'; to: '/logon.htm'
DEBUG PathBasedFilterInvocationDefinitionMap:121 - Candidate is: '/logon.htm'; pattern is /home.htm; matched=false
DEBUG PathBasedFilterInvocationDefinitionMap:121 - Candidate is: '/logon.htm'; pattern is /project/**; matched=false
DEBUG PathBasedFilterInvocationDefinitionMap:121 - Candidate is: '/logon.htm'; pattern is /element/**; matched=false
DEBUG PathBasedFilterInvocationDefinitionMap:121 - Candidate is: '/logon.htm'; pattern is /admin/**; matched=false
DEBUG AbstractSecurityInterceptor:436 - Public object - authentication not attempted
DEBUG XmlWebApplicationContext:218 - Publishing event in context [org.springframework.web.context.support.XmlWe bApplicationContext;hashCode=21648869]: net.sf.acegisecurity.intercept.event.PublicInvocat ionEvent[source=FilterInvocation: URL: /logon.htm]
DEBUG FilterChainProxy:288 - /logon.htm reached end of additional filter chain; proceeding with original chain
DEBUG DispatcherServlet:811 - Testing handler map [org.springframework.web.servlet.handler.Simpl eUrlHandlerMapping@1fa487f] in DispatcherServlet with name 'star'
DEBUG SimpleUrlHandlerMapping:130 - Looking up handler for [/logon.htm]
DEBUG DispatcherServlet:850 - Testing handler adapter [org.springframework.web.servlet.mvc.SimpleCon trollerHandlerAdapter@ada795]
DEBUG DispatcherServlet:757 - Last-Modified value for [/star/logon.htm] is [-1]
DEBUG DispatcherServlet:600 - DispatcherServlet with name 'star' received request for [/star/logon.htm]
DEBUG DispatcherServlet:850 - Testing handler adapter [org.springframework.web.servlet.mvc.SimpleCon trollerHandlerAdapter@ada795]
DEBUG LogonFormController:305 - Displaying new form
DEBUG SessionFactoryUtils:326 - Opening Hibernate session
DEBUG DriverManagerDataSource:232 - Creating new JDBC connection to [jdbc:mysql:///jbossportal?useServerPrepStmts=false]
DEBUG HibernateTemplate:209 - Eagerly flushing Hibernate session
DEBUG SessionFactoryUtils:733 - Closing Hibernate session
DEBUG LogonFormController:476 - Setting form session attribute [com.sainc.web.logon.LogonFormController.FORM. credentials] to: com.sainc.dao.model.Credentials@6a4268
DEBUG DispatcherServlet:926 - Rendering view [org.springframework.web.servlet.view.Internal ResourceView: name 'logon'; URL [/WEB-INF/jsp/logon.jsp]] in DispatcherServlet with name 'star'
DEBUG InternalResourceView:234 - Rendering view with name 'logon' with model {credentials=com.sainc.dao.model.Credentials@ 6a4268, org.springframework.validation.BindException.crede ntials=org.springframework.validation.BindExceptio n: BindException: 0 errors} and static attributes {}
DEBUG InternalResourceView:127 - Added model object 'credentials' of type [com.sainc.dao.model.Credentials] to request in InternalResourceView 'logon'
DEBUG InternalResourceView:127 - Added model object 'org.springframework.validation.BindException.cred entials' of type [org.springframework.validation.BindException& #93; to request in InternalResourceView 'logon'
DEBUG ApplicationDispatcher:143 - servletPath=/WEB-INF/jsp/logon.jsp, pathInfo=null, queryString=null, name=null
DEBUG ApplicationDispatcher:370 - Path Based Forward
DEBUG JspServlet:224 - JspEngine --> /WEB-INF/jsp/logon.jsp
DEBUG JspServlet:225 - ServletPath: /WEB-INF/jsp/logon.jsp
DEBUG JspServlet:226 - PathInfo: null
DEBUG JspServlet:227 - RealPath: C:\Tomcat 5.5\webapps\star\WEB-INF\jsp\logon.jsp
DEBUG JspServlet:228 - RequestURI: /star/WEB-INF/jsp/logon.jsp
DEBUG JspServlet:229 - QueryString: null
DEBUG JspServlet:230 - Request Params:
DEBUG CachedIntrospectionResults:96 - Using cached introspection results for class [com.sainc.dao.model.Credentials]
DEBUG BeanWrapperImpl:592 - About to invoke read method [public java.lang.String com.sainc.dao.model.Credentials.getJ_username( )] on object of class [com.sainc.dao.model.Credentials]
DEBUG BeanWrapperImpl:592 - About to invoke read method [public java.lang.String com.sainc.dao.model.Credentials.getJ_password( )] on object of class [com.sainc.dao.model.Credentials]
DEBUG ApplicationDispatcher:407 - Disabling the response for futher output
DEBUG InternalResourceView:99 - Forwarded to resource [/WEB-INF/jsp/logon.jsp] in InternalResourceView 'logon'
DEBUG DispatcherServlet:409 - Successfully completed request
DEBUG XmlWebApplicationContext:218 - Publishing event in context [WebApplicationContext for namespace 'star-servlet']: RequestHandledEvent: url=[/star/logon.htm]; time=[141ms]; client=[192.168.1.101]; method=[GET]; servlet=[star]; session=[0BBA431BC186323D2FDB6CA027DF0926] ; user=[null]; status=[OK]
DEBUG XmlWebApplicationContext:218 - Publishing event in context [org.springframework.web.context.support.XmlWe bApplicationContext;hashCode=21648869]: RequestHandledEvent: url=[/star/logon.htm]; time=[141ms]; client=[192.168.1.101]; method=[GET]; servlet=[star]; session=[0BBA431BC186323D2FDB6CA027DF0926] ; user=[null]; status=[OK]
DEBUG SecurityEnforcementFilter:185 - Chain processed normally
DEBUG HttpSessionContextIntegrationFilter:271 - Context stored to HttpSession: 'net.sf.acegisecurity.context.security.SecureConte xtImpl@9e4dc0: Null authentication'
DEBUG HttpSessionContextIntegrationFilter:280 - ContextHolder set to null as request processing completed
DEBUG PathBasedFilterInvocationDefinitionMap:110 - Converted URL to lowercase, from: '/css/style.css'; to: '/css/style.css'
DEBUG PathBasedFilterInvocationDefinitionMap:121 - Candidate is: '/css/style.css'; pattern is /**; matched=true
DEBUG DefaultListableBeanFactory:186 - Returning cached instance of singleton bean 'httpSessionContextIntegrationFilter'
DEBUG DefaultListableBeanFactory:186 - Returning cached instance of singleton bean 'authenticationProcessingFilter'
DEBUG DefaultListableBeanFactory:186 - Returning cached instance of singleton bean 'securityEnforcementFilter'
DEBUG FilterChainProxy:297 - /css/style.css at position 1 of 3 in additional filter chain; firing Filter: 'net.sf.acegisecurity.context.HttpSessionContextIn tegrationFilter@1dcb3cd'
DEBUG HttpSessionContextIntegrationFilter:183 - Obtained from ACEGI_SECURITY_CONTEXT a valid Context and set to ContextHolder: 'net.sf.acegisecurity.context.security.SecureConte xtImpl@9e4dc0: Null authentication'
DEBUG FilterChainProxy:297 - /css/style.css at position 2 of 3 in additional filter chain; firing Filter: 'net.sf.acegisecurity.ui.webapp.AuthenticationProc essingFilter@1082661'
DEBUG FilterChainProxy:297 - /css/style.css at position 3 of 3 in additional filter chain; firing Filter: 'net.sf.acegisecurity.intercept.web.SecurityEnforc ementFilter@1d2162c'
DEBUG PathBasedFilterInvocationDefinitionMap:110 - Converted URL to lowercase, from: '/css/style.css'; to: '/css/style.css'
DEBUG PathBasedFilterInvocationDefinitionMap:121 - Candidate is: '/css/style.css'; pattern is /home.htm; matched=false
DEBUG PathBasedFilterInvocationDefinitionMap:121 - Candidate is: '/css/style.css'; pattern is /project/**; matched=false
DEBUG PathBasedFilterInvocationDefinitionMap:121 - Candidate is: '/css/style.css'; pattern is /element/**; matched=false
DEBUG PathBasedFilterInvocationDefinitionMap:121 - Candidate is: '/css/style.css'; pattern is /admin/**; matched=false
DEBUG AbstractSecurityInterceptor:436 - Public object - authentication not attempted
DEBUG XmlWebApplicationContext:218 - Publishing event in context [org.springframework.web.context.support.XmlWe bApplicationContext;hashCode=21648869]: net.sf.acegisecurity.intercept.event.PublicInvocat ionEvent[source=FilterInvocation: URL: /css/style.css]
DEBUG FilterChainProxy:288 - /css/style.css reached end of additional filter chain; proceeding with original chain
DEBUG SecurityEnforcementFilter:185 - Chain processed normally
DEBUG HttpSessionContextIntegrationFilter:271 - Context stored to HttpSession: 'net.sf.acegisecurity.context.security.SecureConte xtImpl@9e4dc0: Null authentication'
10:52:54,866 DEBUG HttpSessionContextIntegrationFilter:280 - ContextHolder set to null as request processing completed
10:52:54,928 DEBUG PathBasedFilterInvocationDefinitionMap:110 - Converted URL to lowercase, from: '/images/loginbanner.jpg'; to: '/images/loginbanner.jpg'
10:52:54,928 DEBUG PathBasedFilterInvocationDefinitionMap:121 - Candidate is: '/images/loginbanner.jpg'; pattern is /**; matched=true
10:52:54,928 DEBUG DefaultListableBeanFactory:186 - Returning cached instance of singleton bean 'httpSessionContextIntegrationFilter'
10:52:54,928 DEBUG DefaultListableBeanFactory:186 - Returning cached instance of singleton bean 'authenticationProcessingFilter'
10:52:54,928 DEBUG DefaultListableBeanFactory:186 - Returning cached instance of singleton bean 'securityEnforcementFilter'
10:52:54,928 DEBUG FilterChainProxy:297 - /images/loginbanner.jpg at position 1 of 3 in additional filter chain; firing Filter: 'net.sf.acegisecurity.context.HttpSessionContextIn tegrationFilter@1dcb3cd'
10:52:54,928 DEBUG HttpSessionContextIntegrationFilter:183 - Obtained from ACEGI_SECURITY_CONTEXT a valid Context and set to ContextHolder: 'net.sf.acegisecurity.context.security.SecureConte xtImpl@9e4dc0: Null authentication'
10:52:54,928 DEBUG FilterChainProxy:297 - /images/loginbanner.jpg at position 2 of 3 in additional filter chain; firing Filter: 'net.sf.acegisecurity.ui.webapp.AuthenticationProc essingFilter@1082661'
10:52:54,928 DEBUG FilterChainProxy:297 - /images/loginbanner.jpg at position 3 of 3 in additional filter chain; firing Filter: 'net.sf.acegisecurity.intercept.web.SecurityEnforc ementFilter@1d2162c'
10:52:54,928 DEBUG PathBasedFilterInvocationDefinitionMap:110 - Converted URL to lowercase, from: '/images/loginbanner.jpg'; to: '/images/loginbanner.jpg'
10:52:54,928 DEBUG PathBasedFilterInvocationDefinitionMap:121 - Candidate is: '/images/loginbanner.jpg'; pattern is /home.htm; matched=false
10:52:54,928 DEBUG PathBasedFilterInvocationDefinitionMap:121 - Candidate is: '/images/loginbanner.jpg'; pattern is /project/**; matched=false
10:52:54,928 DEBUG PathBasedFilterInvocationDefinitionMap:121 - Candidate is: '/images/loginbanner.jpg'; pattern is /element/**; matched=false
10:52:54,928 DEBUG PathBasedFilterInvocationDefinitionMap:121 - Candidate is: '/images/loginbanner.jpg'; pattern is /admin/**; matched=false
10:52:54,928 DEBUG AbstractSecurityInterceptor:436 - Public object - authentication not attempted
10:52:54,944 DEBUG XmlWebApplicationContext:218 - Publishing event in context [org.springframework.web.context.support.XmlWe bApplicationContext;hashCode=21648869]: net.sf.acegisecurity.intercept.event.PublicInvocat ionEvent[source=FilterInvocation: URL: /images/loginbanner.jpg]
10:52:54,944 DEBUG FilterChainProxy:288 - /images/loginbanner.jpg reached end of additional filter chain; proceeding with original chain
10:52:54,944 DEBUG SecurityEnforcementFilter:185 - Chain processed normally
10:52:54,944 DEBUG HttpSessionContextIntegrationFilter:271 - Context stored to HttpSession: 'net.sf.acegisecurity.context.security.SecureConte xtImpl@9e4dc0: Null authentication'
10:52:54,944 DEBUG HttpSessionContextIntegrationFilter:280 - ContextHolder set to null as request processing completed
10:52:58,022 DEBUG PathBasedFilterInvocationDefinitionMap:110 - Converted URL to lowercase, from: '/j_acegi_security_check'; to: '/j_acegi_security_check'
10:52:58,022 DEBUG PathBasedFilterInvocationDefinitionMap:121 - Candidate is: '/j_acegi_security_check'; pattern is /**; matched=true
10:52:58,022 DEBUG DefaultListableBeanFactory:186 - Returning cached instance of singleton bean 'httpSessionContextIntegrationFilter'
10:52:58,022 DEBUG DefaultListableBeanFactory:186 - Returning cached instance of singleton bean 'authenticationProcessingFilter'
10:52:58,022 DEBUG DefaultListableBeanFactory:186 - Returning cached instance of singleton bean 'securityEnforcementFilter'
10:52:58,022 DEBUG FilterChainProxy:297 - /j_acegi_security_check at position 1 of 3 in additional filter chain; firing Filter: 'net.sf.acegisecurity.context.HttpSessionContextIn tegrationFilter@1dcb3cd'
10:52:58,022 DEBUG HttpSessionContextIntegrationFilter:183 - Obtained from ACEGI_SECURITY_CONTEXT a valid Context and set to ContextHolder: 'net.sf.acegisecurity.context.security.SecureConte xtImpl@9e4dc0: Null authentication'
10:52:58,022 DEBUG FilterChainProxy:297 - /j_acegi_security_check at position 2 of 3 in additional filter chain; firing Filter: 'net.sf.acegisecurity.ui.webapp.AuthenticationProc essingFilter@1082661'
10:52:58,022 DEBUG AbstractProcessingFilter:279 - Request is to process authentication
10:52:58,038 DEBUG ProviderManager:156 - Authentication attempt using net.sf.acegisecurity.providers.dao.PasswordDaoAuth enticationProvider
10:52:58,241 INFO LdapPasswordAuthenticationImpl:163 - sklakken connected to ldap://madison:3268
10:52:58,350 DEBUG LdapPasswordAuthenticationImpl:179 - Directory entry for user sklakken@ird.local found
10:52:58,350 DEBUG LdapPasswordAuthenticationImpl:208 - Role STAR_ADMINISTRATOR found for user sklakken
10:52:58,350 DEBUG LdapPasswordAuthenticationImpl:208 - Role IRD_ADMINISTRATOR found for user sklakken
10:52:58,350 DEBUG LdapPasswordAuthenticationImpl:208 - Role Domain Admins found for user sklakken
10:52:58,350 INFO LdapPasswordAuthenticationImpl:219 - Ending Role STAR_ADMINISTRATOR
10:52:58,350 INFO LdapPasswordAuthenticationImpl:219 - Ending Role IRD_ADMINISTRATOR
10:52:58,350 INFO LdapPasswordAuthenticationImpl:219 - Ending Role Domain Admins
10:52:58,850 INFO LdapPasswordAuthenticationImpl:231 - sklakken disconnected from ldap://madison:3268
10:52:58,850 DEBUG XmlWebApplicationContext:218 - Publishing event in context [org.springframework.web.context.support.XmlWe bApplicationContext;hashCode=21648869]: net.sf.acegisecurity.providers.dao.event.Authentic ationSuccessEvent[source=net.sf.acegisecurity. providers.UsernamePasswordAuthenticationToken@db4b cf: Username: sklakken; Password: [PROTECTED]; Authenticated: false; Details: net.sf.acegisecurity.ui.WebAuthenticationDetails@1 4e1f2b: RemoteIpAddress: 192.168.1.101; SessionId: 0BBA431BC186323D2FDB6CA027DF0926; Not granted any authorities]
10:52:58,850 DEBUG AbstractProcessingFilter:365 - Authentication success: net.sf.acegisecurity.providers.UsernamePasswordAut henticationToken@1e07d3e: Username: net.sf.acegisecurity.providers.dao.User@13e86ec&#5 8; Username: sklakken; Password: [PROTECTED]; Enabled: true; AccountNonExpired: true; credentialsNonExpired: true; AccountNonLocked: true; Granted Authorities: STAR_ADMINISTRATOR, IRD_ADMINISTRATOR, Domain Admins; Password: [PROTECTED]; Authenticated: false; Details: net.sf.acegisecurity.ui.WebAuthenticationDetails@1 4e1f2b: RemoteIpAddress: 192.168.1.101; SessionId: 0BBA431BC186323D2FDB6CA027DF0926; Granted Authorities: STAR_ADMINISTRATOR, IRD_ADMINISTRATOR, Domain Admins
10:52:58,866 DEBUG AbstractProcessingFilter:372 - Updated ContextHolder to contain the following Authentication: 'net.sf.acegisecurity.providers.UsernamePasswordAu thenticationToken@1e07d3e: Username: net.sf.acegisecurity.providers.dao.User@13e86ec&#5 8; Username: sklakken; Password: [PROTECTED]; Enabled: true; AccountNonExpired: true; credentialsNonExpired: true; AccountNonLocked: true; Granted Authorities: STAR_ADMINISTRATOR, IRD_ADMINISTRATOR, Domain Admins; Password: [PROTECTED]; Authenticated: false; Details: net.sf.acegisecurity.ui.WebAuthenticationDetails@1 4e1f2b: RemoteIpAddress: 192.168.1.101; SessionId: 0BBA431BC186323D2FDB6CA027DF0926; Granted Authorities: STAR_ADMINISTRATOR, IRD_ADMINISTRATOR, Domain Admins'
10:52:58,866 DEBUG AbstractProcessingFilter:389 - Redirecting to target URL from HTTP Session (or default): /star/home.htm
10:52:58,866 DEBUG HttpSessionContextIntegrationFilter:271 - Context stored to HttpSession: 'net.sf.acegisecurity.context.security.SecureConte xtImpl@9e4dc0: Authentication: net.sf.acegisecurity.providers.UsernamePasswordAut henticationToken@1e07d3e: Username: net.sf.acegisecurity.providers.dao.User@13e86ec&#5 8; Username: sklakken; Password: [PROTECTED]; Enabled: true; AccountNonExpired: true; credentialsNonExpired: true; AccountNonLocked: true; Granted Authorities: STAR_ADMINISTRATOR, IRD_ADMINISTRATOR, Domain Admins; Password: [PROTECTED]; Authenticated: false; Details: net.sf.acegisecurity.ui.WebAuthenticationDetails@1 4e1f2b: RemoteIpAddress: 192.168.1.101; SessionId: 0BBA431BC186323D2FDB6CA027DF0926; Granted Authorities: STAR_ADMINISTRATOR, IRD_ADMINISTRATOR, Domain Admins'
10:52:58,866 DEBUG HttpSessionContextIntegrationFilter:280 - ContextHolder set to null as request processing completed
10:52:58,866 DEBUG PathBasedFilterInvocationDefinitionMap:110 - Converted URL to lowercase, from: '/home.htm'; to: '/home.htm'
10:52:58,866 DEBUG PathBasedFilterInvocationDefinitionMap:121 - Candidate is: '/home.htm'; pattern is /**; matched=true
10:52:58,881 DEBUG DefaultListableBeanFactory:186 - Returning cached instance of singleton bean 'httpSessionContextIntegrationFilter'
10:52:58,881 DEBUG DefaultListableBeanFactory:186 - Returning cached instance of singleton bean 'authenticationProcessingFilter'
10:52:58,881 DEBUG DefaultListableBeanFactory:186 - Returning cached instance of singleton bean 'securityEnforcementFilter'
10:52:58,881 DEBUG FilterChainProxy:297 - /home.htm at position 1 of 3 in additional filter chain; firing Filter: 'net.sf.acegisecurity.context.HttpSessionContextIn tegrationFilter@1dcb3cd'
10:52:58,881 DEBUG HttpSessionContextIntegrationFilter:183 - Obtained from ACEGI_SECURITY_CONTEXT a valid Context and set to ContextHolder: 'net.sf.acegisecurity.context.security.SecureConte xtImpl@9e4dc0: Authentication: net.sf.acegisecurity.providers.UsernamePasswordAut henticationToken@1e07d3e: Username: net.sf.acegisecurity.providers.dao.User@13e86ec&#5 8; Username: sklakken; Password: [PROTECTED]; Enabled: true; AccountNonExpired: true; credentialsNonExpired: true; AccountNonLocked: true; Granted Authorities: STAR_ADMINISTRATOR, IRD_ADMINISTRATOR, Domain Admins; Password: [PROTECTED]; Authenticated: false; Details: net.sf.acegisecurity.ui.WebAuthenticationDetails@1 4e1f2b: RemoteIpAddress: 192.168.1.101; SessionId: 0BBA431BC186323D2FDB6CA027DF0926; Granted Authorities: STAR_ADMINISTRATOR, IRD_ADMINISTRATOR, Domain Admins'
10:52:58,881 DEBUG FilterChainProxy:297 - /home.htm at position 2 of 3 in additional filter chain; firing Filter: 'net.sf.acegisecurity.ui.webapp.AuthenticationProc essingFilter@1082661'
10:52:58,881 DEBUG FilterChainProxy:297 - /home.htm at position 3 of 3 in additional filter chain; firing Filter: 'net.sf.acegisecurity.intercept.web.SecurityEnforc ementFilter@1d2162c'
10:52:58,881 DEBUG PathBasedFilterInvocationDefinitionMap:110 - Converted URL to lowercase, from: '/home.htm'; to: '/home.htm'
10:52:58,881 DEBUG PathBasedFilterInvocationDefinitionMap:121 - Candidate is: '/home.htm'; pattern is /home.htm; matched=true
10:52:58,881 DEBUG AbstractSecurityInterceptor:348 - Secure object: FilterInvocation: URL: /home.htm; ConfigAttributes: [STAR_ADMINISTRATOR, STAR_APPROVER, STAR_PROJECTELEMENT, STAR_READONLY]
10:52:58,881 DEBUG ProviderManager:156 - Authentication attempt using net.sf.acegisecurity.providers.dao.PasswordDaoAuth enticationProvider
10:52:59,116 INFO LdapPasswordAuthenticationImpl:163 - sklakken connected to ldap://madison:3268
10:52:59,131 DEBUG ManagerBase:653 - Start expire sessions StandardManager at 1121964779131 sessioncount 2
10:52:59,131 DEBUG ManagerBase:662 - End expire sessions StandardManager processingTime 0 expired sessions: 0
10:52:59,225 DEBUG LdapPasswordAuthenticationImpl:179 - Directory entry for user sklakken@ird.local found
10:52:59,225 DEBUG LdapPasswordAuthenticationImpl:208 - Role STAR_ADMINISTRATOR found for user sklakken
10:52:59,225 DEBUG LdapPasswordAuthenticationImpl:208 - Role IRD_ADMINISTRATOR found for user sklakken
10:52:59,241 DEBUG LdapPasswordAuthenticationImpl:208 - Role Domain Admins found for user sklakken
10:52:59,241 INFO LdapPasswordAuthenticationImpl:219 - Ending Role STAR_ADMINISTRATOR
10:52:59,241 INFO LdapPasswordAuthenticationImpl:219 - Ending Role IRD_ADMINISTRATOR
10:52:59,241 INFO LdapPasswordAuthenticationImpl:219 - Ending Role Domain Admins
10:52:59,741 INFO LdapPasswordAuthenticationImpl:231 - sklakken disconnected from ldap://madison:3268
10:52:59,741 DEBUG XmlWebApplicationContext:218 - Publishing event in context [org.springframework.web.context.support.XmlWe bApplicationContext;hashCode=21648869]: net.sf.acegisecurity.providers.dao.event.Authentic ationSuccessEvent[source=net.sf.acegisecurity. providers.UsernamePasswordAuthenticationToken@1e07 d3e: Username: net.sf.acegisecurity.providers.dao.User@13e86ec&#5 8; Username: sklakken; Password: [PROTECTED]; Enabled: true; AccountNonExpired: true; credentialsNonExpired: true; AccountNonLocked: true; Granted Authorities: STAR_ADMINISTRATOR, IRD_ADMINISTRATOR, Domain Admins; Password: [PROTECTED]; Authenticated: false; Details: net.sf.acegisecurity.ui.WebAuthenticationDetails@1 4e1f2b: RemoteIpAddress: 192.168.1.101; SessionId: 0BBA431BC186323D2FDB6CA027DF0926; Granted Authorities: STAR_ADMINISTRATOR, IRD_ADMINISTRATOR, Domain Admins]
10:52:59,756 DEBUG AbstractSecurityInterceptor:386 - Authenticated: net.sf.acegisecurity.providers.UsernamePasswordAut henticationToken@10b8d03: Username: net.sf.acegisecurity.providers.dao.User@157011e&#5 8; Username: sklakken; Password: [PROTECTED]; Enabled: true; AccountNonExpired: true; credentialsNonExpired: true; AccountNonLocked: true; Granted Authorities: STAR_ADMINISTRATOR, IRD_ADMINISTRATOR, Domain Admins; Password: [PROTECTED]; Authenticated: true; Details: net.sf.acegisecurity.ui.WebAuthenticationDetails@1 4e1f2b: RemoteIpAddress: 192.168.1.101; SessionId: 0BBA431BC186323D2FDB6CA027DF0926; Granted Authorities: STAR_ADMINISTRATOR, IRD_ADMINISTRATOR, Domain Admins
10:52:59,756 DEBUG AbstractSecurityInterceptor:404 - Authorization successful
10:52:59,756 DEBUG XmlWebApplicationContext:218 - Publishing event in context [org.springframework.web.context.support.XmlWe bApplicationContext;hashCode=21648869]: net.sf.acegisecurity.intercept.event.AuthorizedEve nt[source=FilterInvocation: URL: /home.htm]
10:52:59,756 DEBUG AbstractSecurityInterceptor:417 - RunAsManager did not change Authentication object
10:52:59,756 DEBUG FilterChainProxy:288 - /home.htm reached end of additional filter chain; proceeding with original chain
10:52:59,756 DEBUG DispatcherServlet:811 - Testing handler map [org.springframework.web.servlet.handler.Simpl eUrlHandlerMapping@1fa487f] in DispatcherServlet with name 'star'
10:52:59,756 DEBUG SimpleUrlHandlerMapping:130 - Looking up handler for [/home.htm]
10:52:59,756 DEBUG DispatcherServlet:850 - Testing handler adapter [org.springframework.web.servlet.mvc.SimpleCon trollerHandlerAdapter@ada795]
10:52:59,756 DEBUG DispatcherServlet:757 - Last-Modified value for [/star/home.htm] is [-1]
10:52:59,756 DEBUG DispatcherServlet:600 - DispatcherServlet with name 'star' received request for [/star/home.htm]
10:52:59,756 DEBUG DispatcherServlet:850 - Testing handler adapter [org.springframework.web.servlet.mvc.SimpleCon trollerHandlerAdapter@ada795]
10:52:59,756 DEBUG HomeController:305 - Displaying new form
10:52:59,756 DEBUG AbstractSecurityInterceptor:436 - Public object - authentication not attempted
10:52:59,756 DEBUG XmlWebApplicationContext:218 - Publishing event in context [org.springframework.web.context.support.XmlWe bApplicationContext;hashCode=21648869]: net.sf.acegisecurity.intercept.event.PublicInvocat ionEvent[source=Invocation: method 'findByJbpUname', arguments [sklakken]; target is of class [com.sainc.web.user.UserService]]
10:52:59,756 DEBUG AbstractSecurityInterceptor:449 - Authentication object detected and tagged as unauthenticated
10:52:59,772 DEBUG SessionFactoryUtils:326 - Opening Hibernate session
10:52:59,772 DEBUG DriverManagerDataSource:232 - Creating new JDBC connection to [jdbc:mysql:///jbossportal?useServerPrepStmts=false]
10:52:59,835 DEBUG HibernateTemplate:209 - Eagerly flushing Hibernate session
10:52:59,835 DEBUG SessionFactoryUtils:733 - Closing Hibernate session
10:52:59,850 DEBUG AbstractSecurityInterceptor:436 - Public object - authentication not attempted
10:52:59,850 DEBUG XmlWebApplicationContext:218 - Publishing event in context [org.springframework.web.context.support.XmlWe bApplicationContext;hashCode=21648869]: net.sf.acegisecurity.intercept.event.PublicInvocat ionEvent[source=Invocation: method 'findByName', arguments [IRD_ADMINISTRATOR]; target is of class [com.sainc.web.role.RoleService]]
10:52:59,850 DEBUG AbstractSecurityInterceptor:449 - Authentication object detected and tagged as unauthenticated
10:52:59,850 DEBUG SessionFactoryUtils:326 - Opening Hibernate session
10:52:59,850 DEBUG DriverManagerDataSource:232 - Creating new JDBC connection to [jdbc:mysql:///jbossportal?useServerPrepStmts=false]
10:52:59,897 DEBUG HibernateTemplate:209 - Eagerly flushing Hibernate session
10:52:59,897 DEBUG SessionFactoryUtils:733 - Closing Hibernate session
10:52:59,897 DEBUG AbstractSecurityInterceptor:436 - Public object - authentication not attempted
10:52:59,897 DEBUG XmlWebApplicationContext:218 - Publishing event in context [org.springframework.web.context.support.XmlWe bApplicationContext;hashCode=21648869]: net.sf.acegisecurity.intercept.event.PublicInvocat ionEvent[source=Invocation: method 'findByName', arguments [Domain Admins]; target is of class [com.sainc.web.role.RoleService]]
10:52:59,897 DEBUG AbstractSecurityInterceptor:449 - Authentication object detected and tagged as unauthenticated
10:52:59,897 DEBUG SessionFactoryUtils:326 - Opening Hibernate session
10:52:59,897 DEBUG DriverManagerDataSource:232 - Creating new JDBC connection to [jdbc:mysql:///jbossportal?useServerPrepStmts=false]
10:52:59,944 DEBUG HibernateTemplate:209 - Eagerly flushing Hibernate session
10:52:59,944 DEBUG SessionFactoryUtils:733 - Closing Hibernate session
10:52:59,944 DEBUG AbstractSecurityInterceptor:436 - Public object - authentication not attempted

10:52:59,960 DEBUG XmlWebApplicationContext:218 - Publishing event in context [org.springframework.web.context.support.XmlWe bApplicationContext;hashCode=21648869]: net.sf.acegisecurity.intercept.event.PublicInvocat ionEvent[source=Invocation: method 'draftElements', arguments [sklakken, false]; target is of class [com.sainc.web.element.ElementService]&#93 ;
10:52:59,960 DEBUG AbstractSecurityInterceptor:449 - Authentication object detected and tagged as unauthenticated
10:52:59,960 DEBUG SessionFactoryUtils:326 - Opening Hibernate session
10:52:59,960 DEBUG DriverManagerDataSource:232 - Creating new JDBC connection to [jdbc:mysql:///jbossportal?useServerPrepStmts=false]
10:52:59,991 DEBUG HibernateTemplate:209 - Eagerly flushing Hibernate session
10:52:59,991 DEBUG SessionFactoryUtils:733 - Closing Hibernate session
10:53:00,006 DEBUG AbstractSecurityInterceptor:436 - Public object - authentication not attempted
10:53:00,006 DEBUG XmlWebApplicationContext:218 - Publishing event in context [org.springframework.web.context.support.XmlWe bApplicationContext;hashCode=21648869]: net.sf.acegisecurity.intercept.event.PublicInvocat ionEvent[source=Invocation: method 'draftElements', arguments [sklakken, false]; target is of class [com.sainc.web.element.ElementService]&#93 ;
10:53:00,006 DEBUG AbstractSecurityInterceptor:449 - Authentication object detected and tagged as unauthenticated
10:53:00,006 DEBUG SessionFactoryUtils:326 - Opening Hibernate session
10:53:00,006 DEBUG DriverManagerDataSource:232 - Creating new JDBC connection to [jdbc:mysql:///jbossportal?useServerPrepStmts=false]
10:53:00,022 DEBUG HibernateTemplate:209 - Eagerly flushing Hibernate session
10:53:00,022 DEBUG SessionFactoryUtils:733 - Closing Hibernate session
10:53:00,038 DEBUG AbstractSecurityInterceptor:436 - Public object - authentication not attempted
10:53:00,038 DEBUG XmlWebApplicationContext:218 - Publishing event in context [org.springframework.web.context.support.XmlWe bApplicationContext;hashCode=21648869]: net.sf.acegisecurity.intercept.event.PublicInvocat ionEvent[source=Invocation: method 'pendingElements', arguments [sklakken, false]; target is of class [com.sainc.web.element.ElementService]&#93 ;
10:53:00,038 DEBUG AbstractSecurityInterceptor:449 - Authentication object detected and tagged as unauthenticated
10:53:00,038 DEBUG SessionFactoryUtils:326 - Opening Hibernate session
10:53:00,038 DEBUG DriverManagerDataSource:232 - Creating new JDBC connection to [jdbc:mysql:///jbossportal?useServerPrepStmts=false]
10:53:00,069 DEBUG HibernateTemplate:209 - Eagerly flushing Hibernate session
10:53:00,069 DEBUG SessionFactoryUtils:733 - Closing Hibernate session
10:53:00,069 DEBUG AbstractSecurityInterceptor:436 - Public object - authentication not attempted
10:53:00,069 DEBUG XmlWebApplicationContext:218 - Publishing event in context [org.springframework.web.context.support.XmlWe bApplicationContext;hashCode=21648869]: net.sf.acegisecurity.intercept.event.PublicInvocat ionEvent[source=Invocation: method 'awaitingElements', arguments [sklakken, false]; target is of class [com.sainc.web.element.ElementService]&#93 ;
10:53:00,069 DEBUG AbstractSecurityInterceptor:449 - Authentication object detected and tagged as unauthenticated
10:53:00,069 DEBUG SessionFactoryUtils:326 - Opening Hibernate session
10:53:00,069 DEBUG DriverManagerDataSource:232 - Creating new JDBC connection to [jdbc:mysql:///jbossportal?useServerPrepStmts=false]
10:53:00,085 DEBUG HibernateTemplate:209 - Eagerly flushing Hibernate session
10:53:00,085 DEBUG SessionFactoryUtils:733 - Closing Hibernate session
10:53:00,100 DEBUG AbstractSecurityInterceptor:436 - Public object - authentication not attempted
10:53:00,100 DEBUG XmlWebApplicationContext:218 - Publishing event in context [org.springframework.web.context.support.XmlWe bApplicationContext;hashCode=21648869]: net.sf.acegisecurity.intercept.event.PublicInvocat ionEvent[source=Invocation: method 'rejectedElements', arguments [sklakken, false]; target is of class [com.sainc.web.element.ElementService]&#93 ;
10:53:00,100 DEBUG AbstractSecurityInterceptor:449 - Authentication object detected and tagged as unauthenticated
10:53:00,100 DEBUG SessionFactoryUtils:326 - Opening Hibernate session
10:53:00,100 DEBUG DriverManagerDataSource:232 - Creating new JDBC connection to [jdbc:mysql:///jbossportal?useServerPrepStmts=false]
10:53:00,116 DEBUG HibernateTemplate:209 - Eagerly flushing Hibernate session
10:53:00,116 DEBUG SessionFactoryUtils:733 - Closing Hibernate session
10:53:00,116 DEBUG HomeController:476 - Setting form session attribute [com.sainc.web.main.HomeController.FORM.consol e] to: com.sainc.web.command.MainConsole@16b7e0e
10:53:00,116 DEBUG DispatcherServlet:926 - Rendering view [org.springframework.web.servlet.view.Internal ResourceView: name '/home'; URL [/WEB-INF/jsp//home.jsp]] in DispatcherServlet with name 'star'
10:53:00,116 DEBUG InternalResourceView:234 - Rendering view with name '/home' with model {console=com.sainc.web.command.MainConsole@16 b7e0e, org.springframework.validation.BindException.conso le=org.springframework.validation.BindException&#5 8; BindException: 0 errors} and static attributes {}
10:53:00,116 DEBUG InternalResourceView:127 - Added model object 'org.springframework.validation.BindException.cons ole' of type [org.springframework.validation.BindException& #93; to request in InternalResourceView '/home'
10:53:00,116 DEBUG InternalResourceView:127 - Added model object 'console' of type [com.sainc.web.command.MainConsole] to request in InternalResourceView '/home'
10:53:00,116 DEBUG ApplicationDispatcher:143 - servletPath=/WEB-INF/jsp//home.jsp, pathInfo=null, queryString=null, name=null
10:53:00,116 DEBUG ApplicationDispatcher:370 - Path Based Forward
10:53:00,116 DEBUG JspServlet:224 - JspEngine --> /WEB-INF/jsp//home.jsp
10:53:00,116 DEBUG JspServlet:225 - ServletPath: /WEB-INF/jsp//home.jsp
10:53:00,116 DEBUG JspServlet:226 - PathInfo: null
10:53:00,116 DEBUG JspServlet:227 - RealPath: C:\Tomcat 5.5\webapps\star\WEB-INF\jsp\home.jsp
10:53:00,116 DEBUG JspServlet:228 - RequestURI: /star/WEB-INF/jsp//home.jsp
10:53:00,116 DEBUG JspServlet:229 - QueryString: null
10:53:00,116 DEBUG JspServlet:230 - Request Params:
10:53:00,131 DEBUG CachedIntrospectionResults:96 - Using cached introspection results for class [com.sainc.web.command.MainConsole]
10:53:00,131 DEBUG BeanWrapperImpl:592 - About to invoke read method [public java.lang.String com.sainc.web.command.MainConsole.getSearchVal&#40 ;)] on object of class [com.sainc.web.command.MainConsole]
10:53:00,131 DEBUG BeanWrapperImpl:592 - About to invoke read method [public boolean com.sainc.web.command.MainConsole.getIsResults&#40 ;)] on object of class [com.sainc.web.command.MainConsole]
10:53:00,131 DEBUG BeanWrapperImpl:592 - About to invoke read method [public boolean com.sainc.web.command.MainConsole.getIsInactive&#4 0;)] on object of class [com.sainc.web.command.MainConsole]
10:53:00,163 DEBUG ApplicationDispatcher:407 - Disabling the response for futher output
10:53:00,163 DEBUG InternalResourceView:99 - Forwarded to resource [/WEB-INF/jsp//home.jsp] in InternalResourceView '/home'
10:53:00,163 DEBUG DispatcherServlet:409 - Successfully completed request
10:53:00,163 DEBUG XmlWebApplicationContext:218 - Publishing event in context [WebApplicationContext for namespace 'star-servlet']: RequestHandledEvent: url=[/star/home.htm]; time=[407ms]; client=[192.168.1.101]; method=[GET]; servlet=[star]; session=[0BBA431BC186323D2FDB6CA027DF0926] ; user=[null]; status=[OK]
10:53:00,163 DEBUG XmlWebApplicationContext:218 - Publishing event in context [org.springframework.web.context.support.XmlWe bApplicationContext;hashCode=21648869]: RequestHandledEvent: url=[/star/home.htm]; time=[407ms]; client=[192.168.1.101]; method=[GET]; servlet=[star]; session=[0BBA431BC186323D2FDB6CA027DF0926] ; user=[null]; status=[OK]
10:53:00,163 DEBUG SecurityEnforcementFilter:185 - Chain processed normally
10:53:00,163 DEBUG HttpSessionContextIntegrationFilter:271 - Context stored to HttpSession: 'net.sf.acegisecurity.context.security.SecureConte xtImpl@9e4dc0: Authentication: net.sf.acegisecurity.providers.UsernamePasswordAut henticationToken@10b8d03: Username: net.sf.acegisecurity.providers.dao.User@157011e&#5 8; Username: sklakken; Password: [PROTECTED]; Enabled: true; AccountNonExpired: true; credentialsNonExpired: true; AccountNonLocked: true; Granted Authorities: STAR_ADMINISTRATOR, IRD_ADMINISTRATOR, Domain Admins; Password: [PROTECTED]; Authenticated: false; Details: net.sf.acegisecurity.ui.WebAuthenticationDetails@1 4e1f2b: RemoteIpAddress: 192.168.1.101; SessionId: 0BBA431BC186323D2FDB6CA027DF0926; Granted Authorities: STAR_ADMINISTRATOR, IRD_ADMINISTRATOR, Domain Admins'
10:53:00,163 DEBUG HttpSessionContextIntegrationFilter:280 - ContextHolder set to null as request processing completed
10:53:00,194 DEBUG PathBasedFilterInvocationDefinitionMap:110 - Converted URL to lowercase, from: '/images/topbanner.jpg'; to: '/images/topbanner.jpg'
10:53:00,194 DEBUG PathBasedFilterInvocationDefinitionMap:121 - Candidate is: '/images/topbanner.jpg'; pattern is /**; matched=true
10:53:00,194 DEBUG DefaultListableBeanFactory:186 - Returning cached instance of singleton bean 'httpSessionContextIntegrationFilter'
10:53:00,194 DEBUG DefaultListableBeanFactory:186 - Returning cached instance of singleton bean 'authenticationProcessingFilter'
10:53:00,194 DEBUG DefaultListableBeanFactory:186 - Returning cached instance of singleton bean 'securityEnforcementFilter'
10:53:00,194 DEBUG FilterChainProxy:297 - /images/topbanner.jpg at position 1 of 3 in additional filter chain; firing Filter: 'net.sf.acegisecurity.context.HttpSessionContextIn tegrationFilter@1dcb3cd'
10:53:00,194 DEBUG HttpSessionContextIntegrationFilter:183 - Obtained from ACEGI_SECURITY_CONTEXT a valid Context and set to ContextHolder: 'net.sf.acegisecurity.context.security.SecureConte xtImpl@9e4dc0: Authentication: net.sf.acegisecurity.providers.UsernamePasswordAut henticationToken@10b8d03: Username: net.sf.acegisecurity.providers.dao.User@157011e&#5 8; Username: sklakken; Password: [PROTECTED]; Enabled: true; AccountNonExpired: true; credentialsNonExpired: true; AccountNonLocked: true; Granted Authorities: STAR_ADMINISTRATOR, IRD_ADMINISTRATOR, Domain Admins; Password: [PROTECTED]; Authenticated: false; Details: net.sf.acegisecurity.ui.WebAuthenticationDetails@1 4e1f2b: RemoteIpAddress: 192.168.1.101; SessionId: 0BBA431BC186323D2FDB6CA027DF0926; Granted Authorities: STAR_ADMINISTRATOR, IRD_ADMINISTRATOR, Domain Admins'
10:53:00,194 DEBUG FilterChainProxy:297 - /images/topbanner.jpg at position 2 of 3 in additional filter chain; firing Filter: 'net.sf.acegisecurity.ui.webapp.AuthenticationProc essingFilter@1082661'
10:53:00,194 DEBUG FilterChainProxy:297 - /images/topbanner.jpg at position 3 of 3 in additional filter chain; firing Filter: 'net.sf.acegisecurity.intercept.web.SecurityEnforc ementFilter@1d2162c'
10:53:00,194 DEBUG PathBasedFilterInvocationDefinitionMap:110 - Converted URL to lowercase, from: '/images/topbanner.jpg'; to: '/images/topbanner.jpg'
10:53:00,194 DEBUG PathBasedFilterInvocationDefinitionMap:121 - Candidate is: '/images/topbanner.jpg'; pattern is /home.htm; matched=false
10:53:00,194 DEBUG PathBasedFilterInvocationDefinitionMap:121 - Candidate is: '/images/topbanner.jpg'; pattern is /project/**; matched=false
10:53:00,194 DEBUG PathBasedFilterInvocationDefinitionMap:121 - Candidate is: '/images/topbanner.jpg'; pattern is /element/**; matched=false
10:53:00,194 DEBUG PathBasedFilterInvocationDefinitionMap:121 - Candidate is: '/images/topbanner.jpg'; pattern is /admin/**; matched=false
10:53:00,194 DEBUG AbstractSecurityInterceptor:436 - Public object - authentication not attempted
10:53:00,194 DEBUG XmlWebApplicationContext:218 - Publishing event in context [org.springframework.web.context.support.XmlWe bApplicationContext;hashCode=21648869]: net.sf.acegisecurity.intercept.event.PublicInvocat ionEvent[source=FilterInvocation: URL: /images/topbanner.jpg]
10:53:00,194 DEBUG AbstractSecurityInterceptor:449 - Authentication object detected and tagged as unauthenticated
10:53:00,194 DEBUG FilterChainProxy:288 - /images/topbanner.jpg reached end of additional filter chain; proceeding with original chain
10:53:00,194 DEBUG SecurityEnforcementFilter:185 - Chain processed normally
10:53:00,194 DEBUG HttpSessionContextIntegrationFilter:271 - Context stored to HttpSession: 'net.sf.acegisecurity.context.security.SecureConte xtImpl@9e4dc0: Authentication: net.sf.acegisecurity.providers.UsernamePasswordAut henticationToken@10b8d03: Username: net.sf.acegisecurity.providers.dao.User@157011e&#5 8; Username: sklakken; Password: [PROTECTED]; Enabled: true; AccountNonExpired: true; credentialsNonExpired: true; AccountNonLocked: true; Granted Authorities: STAR_ADMINISTRATOR, IRD_ADMINISTRATOR, Domain Admins; Password: [PROTECTED]; Authenticated: false; Details: net.sf.acegisecurity.ui.WebAuthenticationDetails@1 4e1f2b: RemoteIpAddress: 192.168.1.101; SessionId: 0BBA431BC186323D2FDB6CA027DF0926; Granted Authorities: STAR_ADMINISTRATOR, IRD_ADMINISTRATOR, Domain Admins'
10:53:00,194 DEBUG HttpSessionContextIntegrationFilter:280 - ContextHolder set to null as request processing completed
10:53:05,475 DEBUG PathBasedFilterInvocationDefinitionMap:110 - Converted URL to lowercase, from: '/admin/listsystemoptions.htm'; to: '/admin/listsystemoptions.htm'
10:53:05,475 DEBUG PathBasedFilterInvocationDefinitionMap:121 - Candidate is: '/admin/listsystemoptions.htm'; pattern is /**; matched=true
10:53:05,475 DEBUG DefaultListableBeanFactory:186 - Returning cached instance of singleton bean 'httpSessionContextIntegrationFilter'
10:53:05,475 DEBUG DefaultListableBeanFactory:186 - Returning cached instance of singleton bean 'authenticationProcessingFilter'
10:53:05,475 DEBUG DefaultListableBeanFactory:186 - Returning cached instance of singleton bean 'securityEnforcementFilter'
10:53:05,475 DEBUG FilterChainProxy:297 - /admin/listSystemOptions.htm at position 1 of 3 in additional filter chain; firing Filter: 'net.sf.acegisecurity.context.HttpSessionContextIn tegrationFilter@1dcb3cd'
10:53:05,475 DEBUG HttpSessionContextIntegrationFilter:183 - Obtained from ACEGI_SECURITY_CONTEXT a valid Context and set to ContextHolder: 'net.sf.acegisecurity.context.security.SecureConte xtImpl@9e4dc0: Authentication: net.sf.acegisecurity.providers.UsernamePasswordAut henticationToken@10b8d03: Username: net.sf.acegisecurity.providers.dao.User@157011e&#5 8; Username: sklakken; Password: [PROTECTED]; Enabled: true; AccountNonExpired: true; credentialsNonExpired: true; AccountNonLocked: true; Granted Authorities: STAR_ADMINISTRATOR, IRD_ADMINISTRATOR, Domain Admins; Password: [PROTECTED]; Authenticated: false; Details: net.sf.acegisecurity.ui.WebAuthenticationDetails@1 4e1f2b: RemoteIpAddress: 192.168.1.101; SessionId: 0BBA431BC186323D2FDB6CA027DF0926; Granted Authorities: STAR_ADMINISTRATOR, IRD_ADMINISTRATOR, Domain Admins'
10:53:05,475 DEBUG FilterChainProxy:297 - /admin/listSystemOptions.htm at position 2 of 3 in additional filter chain; firing Filter: 'net.sf.acegisecurity.ui.webapp.AuthenticationProc essingFilter@1082661'
10:53:05,475 DEBUG FilterChainProxy:297 - /admin/listSystemOptions.htm at position 3 of 3 in additional filter chain; firing Filter: 'net.sf.acegisecurity.intercept.web.SecurityEnforc ementFilter@1d2162c'
10:53:05,475 DEBUG PathBasedFilterInvocationDefinitionMap:110 - Converted URL to lowercase, from: '/admin/listsystemoptions.htm'; to: '/admin/listsystemoptions.htm'
10:53:05,475 DEBUG PathBasedFilterInvocationDefinitionMap:121 - Candidate is: '/admin/listsystemoptions.htm'; pattern is /home.htm; matched=false
10:53:05,475 DEBUG PathBasedFilterInvocationDefinitionMap:121 - Candidate is: '/admin/listsystemoptions.htm'; pattern is /project/**; matched=false
10:53:05,491 DEBUG PathBasedFilterInvocationDefinitionMap:121 - Candidate is: '/admin/listsystemoptions.htm'; pattern is /element/**; matched=false
10:53:05,491 DEBUG PathBasedFilterInvocationDefinitionMap:121 - Candidate is: '/admin/listsystemoptions.htm'; pattern is /admin/**; matched=true
10:53:05,491 DEBUG AbstractSecurityInterceptor:348 - Secure object: FilterInvocation: URL: /admin/listSystemOptions.htm; ConfigAttributes: [STAR_ADMINISTRATOR, STAR_READONLY]
10:53:05,491 DEBUG ProviderManager:156 - Authentication attempt using net.sf.acegisecurity.providers.dao.PasswordDaoAuth enticationProvider
10:53:05,835 INFO LdapPasswordAuthenticationImpl:163 - sklakken connected to ldap://madison:3268
10:53:05,944 DEBUG LdapPasswordAuthenticationImpl:179 - Directory entry for user sklakken@ird.local found
10:53:05,944 DEBUG LdapPasswordAuthenticationImpl:208 - Role STAR_ADMINISTRATOR found for user sklakken
10:53:05,944 DEBUG LdapPasswordAuthenticationImpl:208 - Role IRD_ADMINISTRATOR found for user sklakken
10:53:05,944 DEBUG LdapPasswordAuthenticationImpl:208 - Role Domain Admins found for user sklakken
10:53:05,944 INFO LdapPasswordAuthenticationImpl:219 - Ending Role STAR_ADMINISTRATOR
10:53:05,944 INFO LdapPasswordAuthenticationImpl:219 - Ending Role IRD_ADMINISTRATOR
10:53:05,944 INFO LdapPasswordAuthenticationImpl:219 - Ending Role Domain Admins
10:53:06,444 INFO LdapPasswordAuthenticationImpl:231 - sklakken disconnected from ldap://madison:3268
10:53:06,460 DEBUG XmlWebApplicationContext:218 - Publishing event in context [org.springframework.web.context.support.XmlWe bApplicationContext;hashCode=21648869]: net.sf.acegisecurity.providers.dao.event.Authentic ationSuccessEvent[source=net.sf.acegisecurity. providers.UsernamePasswordAuthenticationToken@10b8 d03: Username: net.sf.acegisecurity.providers.dao.User@157011e&#5 8; Username: sklakken; Password: [PROTECTED]; Enabled: true; AccountNonExpired: true; credentialsNonExpired: true; AccountNonLocked: true; Granted Authorities: STAR_ADMINISTRATOR, IRD_ADMINISTRATOR, Domain Admins; Password: [PROTECTED]; Authenticated: false; Details: net.sf.acegisecurity.ui.WebAuthenticationDetails@1 4e1f2b: RemoteIpAddress: 192.168.1.101; SessionId: 0BBA431BC186323D2FDB6CA027DF0926; Granted Authorities: STAR_ADMINISTRATOR, IRD_ADMINISTRATOR, Domain Admins]
10:53:06,460 DEBUG AbstractSecurityInterceptor:386 - Authenticated: net.sf.acegisecurity.providers.UsernamePasswordAut henticationToken@7c15c0: Username: net.sf.acegisecurity.providers.dao.User@7800e9&#58 ; Username: sklakken; Password: [PROTECTED]; Enabled: true; AccountNonExpired: true; credentialsNonExpired: true; AccountNonLocked: true; Granted Authorities: STAR_ADMINISTRATOR, IRD_ADMINISTRATOR, Domain Admins; Password: [PROTECTED]; Authenticated: true; Details: net.sf.acegisecurity.ui.WebAuthenticationDetails@1 4e1f2b: RemoteIpAddress: 192.168.1.101; SessionId: 0BBA431BC186323D2FDB6CA027DF0926; Granted Authorities: STAR_ADMINISTRATOR, IRD_ADMINISTRATOR, Domain Admins
10:53:06,460 DEBUG AbstractSecurityInterceptor:404 - Authorization successful
10:53:06,460 DEBUG XmlWebApplicationContext:218 - Publishing event in context [org.springframework.web.context.support.XmlWe bApplicationContext;hashCode=21648869]: net.sf.acegisecurity.intercept.event.AuthorizedEve nt[source=FilterInvocation: URL: /admin/listSystemOptions.htm]
10:53:06,460 DEBUG AbstractSecurityInterceptor:417 - RunAsManager did not change Authentication object
10:53:06,460 DEBUG FilterChainProxy:288 - /admin/listSystemOptions.htm reached end of additional filter chain; proceeding with original chain
10:53:06,460 DEBUG DispatcherServlet:811 - Testing handler map [org.springframework.web.servlet.handler.Simpl eUrlHandlerMapping@1fa487f] in DispatcherServlet with name 'star'
10:53:06,460 DEBUG SimpleUrlHandlerMapping:130 - Looking up handler for [/admin/listSystemOptions.htm]
10:53:06,460 DEBUG DispatcherServlet:850 - Testing handler adapter [org.springframework.web.servlet.mvc.SimpleCon trollerHandlerAdapter@ada795]
10:53:06,460 DEBUG DispatcherServlet:757 - Last-Modified value for [/star/admin/listSystemOptions.htm] is [-1]
10:53:06,460 DEBUG DispatcherServlet:600 - DispatcherServlet with name 'star' received request for [/star/admin/listSystemOptions.htm]
10:53:06,460 DEBUG DispatcherServlet:850 - Testing handler adapter [org.springframework.web.servlet.mvc.SimpleCon trollerHandlerAdapter@ada795]
10:53:06,460 DEBUG SessionFactoryUtils:326 - Opening Hibernate session
10:53:06,475 DEBUG DriverManagerDataSource:232 - Creating new JDBC connection to [jdbc:mysql:///jbossportal?useServerPrepStmts=false]
10:53:06,507 DEBUG HibernateTemplate:209 - Eagerly flushing Hibernate session
10:53:06,507 DEBUG SessionFactoryUtils:733 - Closing Hibernate session
10:53:06,522 DEBUG DispatcherServlet:926 - Rendering view [org.springframework.web.servlet.view.Internal ResourceView: name '/admin/listSystemOptions'; URL [/WEB-INF/jsp//admin/listSystemOptions.jsp]] in DispatcherServlet with name 'star'
10&#58;53&#58;06,522 DEBUG InternalResourceView&#58;234 - Rendering view with name '/admin/listSystemOptions' with model &#123;allSystemOptions=&#91;com.sainc.dao.model.St arSystemOptions@1136019&#91;idStarSystemOptions=1, Name=Splash,Value=<b>Welecome to the STAR 1.0 Beta Test Instance</b><br>
<br>Please <a href="mailto&#58;sklakken@sainc.com">email the system administrator</a>
or application support and/or additional reference data to include element/project attributes.
<br><br>
<u>Test user names/passwords are&#58;</u>
<br>
- readonly/readonly<br>
- owner/owner<br>
- approver/approver<br>
- admin/admin&#93;&#93;&#125; and static attributes &#123;&#125;
10&#58;53&#58;06,522 DEBUG InternalResourceView&#58;127 - Added model object 'allSystemOptions' of type &#91;java.util.ArrayList&#93; to request in InternalResourceView '/admin/listSystemOptions'
10&#58;53&#58;06,522 DEBUG ApplicationDispatcher&#58;143 - servletPath=/WEB-INF/jsp//admin/listSystemOptions.jsp, pathInfo=null, queryString=null, name=null
10&#58;53&#58;06,522 DEBUG ApplicationDispatcher&#58;370 - Path Based Forward
10&#58;53&#58;06,522 DEBUG JspServlet&#58;224 - JspEngine --> /WEB-INF/jsp//admin/listSystemOptions.jsp
10&#58;53&#58;06,522 DEBUG JspServlet&#58;225 - ServletPath&#58; /WEB-INF/jsp//admin/listSystemOptions.jsp
10&#58;53&#58;06,522 DEBUG JspServlet&#58;226 - PathInfo&#58; null
10&#58;53&#58;06,522 DEBUG JspServlet&#58;227 - RealPath&#58; C&#58;\Tomcat 5.5\webapps\star\WEB-INF\jsp\admin\listSystemOptions.jsp
10&#58;53&#58;06,522 DEBUG JspServlet&#58;228 - RequestURI&#58; /star/WEB-INF/jsp//admin/listSystemOptions.jsp
10&#58;53&#58;06,522 DEBUG JspServlet&#58;229 - QueryString&#58; null
10&#58;53&#58;06,522 DEBUG JspServlet&#58;230 - Request Params&#58;
10&#58;53&#58;06,554 DEBUG ApplicationDispatcher&#58;407 - Disabling the response for futher output
10&#58;53&#58;06,554 DEBUG InternalResourceView&#58;99 - Forwarded to resource &#91;/WEB-INF/jsp//admin/listSystemOptions.jsp&#93; in InternalResourceView '/admin/listSystemOptions'
10&#58;53&#58;06,554 DEBUG DispatcherServlet&#58;409 - Successfully completed request
10&#58;53&#58;06,554 DEBUG XmlWebApplicationContext&#58;218 - Publishing event in context &#91;WebApplicationContext for namespace 'star-servlet'&#93;&#58; RequestHandledEvent&#58; url=&#91;/star/admin/listSystemOptions.htm&#93;; time=&#91;94ms&#93;; client=&#91;192.168.1.101&#93;; method=&#91;GET&#93;; servlet=&#91;star&#93;; session=&#91;0BBA431BC186323D2FDB6CA027DF0926&#93; ; user=&#91;null&#93;; status=&#91;OK&#93;
10&#58;53&#58;06,554 DEBUG XmlWebApplicationContext&#58;218 - Publishing event in context &#91;org.springframework.web.context.support.XmlWe bApplicationContext;hashCode=21648869&#93;&#58; RequestHandledEvent&#58; url=&#91;/star/admin/listSystemOptions.htm&#93;; time=&#91;94ms&#93;; client=&#91;192.168.1.101&#93;; method=&#91;GET&#93;; servlet=&#91;star&#93;; session=&#91;0BBA431BC186323D2FDB6CA027DF0926&#93; ; user=&#91;null&#93;; status=&#91;OK&#93;
10&#58;53&#58;06,554 DEBUG SecurityEnforcementFilter&#58;185 - Chain processed normally
10&#58;53&#58;06,554 DEBUG HttpSessionContextIntegrationFilter&#58;271 - Context stored to HttpSession&#58; 'net.sf.acegisecurity.context.security.SecureConte xtImpl@9e4dc0&#58; Authentication&#58; net.sf.acegisecurity.providers.UsernamePasswordAut henticationToken@7c15c0&#58; Username&#58; net.sf.acegisecurity.providers.dao.User@7800e9&#58 ; Username&#58; sklakken; Password&#58; &#91;PROTECTED&#93;; Enabled&#58; true; AccountNonExpired&#58; true; credentialsNonExpired&#58; true; AccountNonLocked&#58; true; Granted Authorities&#58; STAR_ADMINISTRATOR, IRD_ADMINISTRATOR, Domain Admins; Password&#58; &#91;PROTECTED&#93;; Authenticated&#58; true; Details&#58; net.sf.acegisecurity.ui.WebAuthenticationDetails@1 4e1f2b&#58; RemoteIpAddress&#58; 192.168.1.101; SessionId&#58; 0BBA431BC186323D2FDB6CA027DF0926; Granted Authorities&#58; STAR_ADMINISTRATOR, IRD_ADMINISTRATOR, Domain Admins'
10&#58;53&#58;06,554 DEBUG HttpSessionContextIntegrationFilter&#58;280 - ContextHolder set to null as request processing completed
10&#58;53&#58;06,600 DEBUG PathBasedFilterInvocationDefinitionMap&#58;110 - Converted URL to lowercase, from&#58; '/admin/listsystemoptions.htm'; to&#58; '/admin/listsystemoptions.htm'
10&#58;53&#58;06,600 DEBUG PathBasedFilterInvocationDefinitionMap&#58;121 - Candidate is&#58; '/admin/listsystemoptions.htm'; pattern is /**; matched=true
10&#58;53&#58;06,600 DEBUG DefaultListableBeanFactory&#58;186 - Returning cached instance of singleton bean 'httpSessionContextIntegrationFilter'
10&#58;53&#58;06,600 DEBUG DefaultListableBeanFactory&#58;186 - Returning cached instance of singleton bean 'authenticationProcessingFilter'
10&#58;53&#58;06,600 DEBUG DefaultListableBeanFactory&#58;186 - Returning cached instance of singleton bean 'securityEnforcementFilter'
10&#58;53&#58;06,600 DEBUG FilterChainProxy&#58;297 - /admin/listSystemOptions.htm at position 1 of 3 in additional filter chain; firing Filter&#58; 'net.sf.acegisecurity.context.HttpSessionContextIn tegrationFilter@1dcb3cd'
10&#58;53&#58;06,600 DEBUG HttpSessionContextIntegrationFilter&#58;205 - No HttpSession currently exists
10&#58;53&#58;06,600 DEBUG HttpSessionContextIntegrationFilter&#58;213 - As ContextHolder null, setup ContextHolder with a fresh new instance&#58; 'net.sf.acegisecurity.context.security.SecureConte xtImpl@10a141e&#58; Null authentication'
10&#58;53&#58;06,600 DEBUG FilterChainProxy&#58;297 - /admin/listSystemOptions.htm at position 2 of 3 in additional filter chain; firing Filter&#58; 'net.sf.acegisecurity.ui.webapp.AuthenticationProc essingFilter@1082661'
10&#58;53&#58;06,600 DEBUG FilterChainProxy&#58;297 - /admin/listSystemOptions.htm at position 3 of 3 in additional filter chain; firing Filter&#58; 'net.sf.acegisecurity.intercept.web.SecurityEnforc ementFilter@1d2162c'
10&#58;53&#58;06,600 DEBUG PathBasedFilterInvocationDefinitionMap&#58;110 - Converted URL to lowercase, from&#58; '/admin/listsystemoptions.htm'; to&#58; '/admin/listsystemoptions.htm'
10&#58;53&#58;06,600 DEBUG PathBasedFilterInvocationDefinitionMap&#58;121 - Candidate is&#58; '/admin/listsystemoptions.htm'; pattern is /home.htm; matched=false
10&#58;53&#58;06,600 DEBUG PathBasedFilterInvocationDefinitionMap&#58;121 - Candidate is&#58; '/admin/listsystemoptions.htm'; pattern is /project/**; matched=false
10&#58;53&#58;06,600 DEBUG PathBasedFilterInvocationDefinitionMap&#58;121 - Candidate is&#58; '/admin/listsystemoptions.htm'; pattern is /element/**; matched=false
10&#58;53&#58;06,600 DEBUG PathBasedFilterInvocationDefinitionMap&#58;121 - Candidate is&#58; '/admin/listsystemoptions.htm'; pattern is /admin/**; matched=true
10&#58;53&#58;06,600 DEBUG AbstractSecurityInterceptor&#58;348 - Secure object&#58; FilterInvocation&#58; URL&#58; /admin/listSystemOptions.htm; ConfigAttributes&#58; &#91;STAR_ADMINISTRATOR, STAR_READONLY&#93;
10&#58;53&#58;06,616 DEBUG XmlWebApplicationContext&#58;218 - Publishing event in context &#91;org.springframework.web.context.support.XmlWe bApplicationContext;hashCode=21648869&#93;&#58; net.sf.acegisecurity.intercept.event.Authenticatio nCredentialsNotFoundEvent&#91;source=FilterInvocat ion&#58; URL&#58; /admin/listSystemOptions.htm&#93;
10&#58;53&#58;06,710 DEBUG SecurityEnforcementFilter&#58;189 - Authentication exception occurred; redirecting to authentication entry point
net.sf.acegisecurity.AuthenticationCredentialsNotF oundException&#58; Authentication credentials were not found in the SecureContext
at net.sf.acegisecurity.intercept.AbstractSecurityInt erceptor.credentialsNotFound&#40;AbstractSecurityI nterceptor.java&#58;477&#41;
at net.sf.acegisecurity.intercept.AbstractSecurityInt erceptor.beforeInvocation&#40;AbstractSecurityInte rceptor.java&#58;364&#41;
at net.sf.acegisecurity.intercept.web.FilterSecurityI nterceptor.invoke&#40;FilterSecurityInterceptor.ja va&#58;81&#41;
at net.sf.acegisecurity.intercept.web.SecurityEnforce mentFilter.doFilter&#40;SecurityEnforcementFilter. java&#58;182&#41;
at net.sf.acegisecurity.util.FilterChainProxy$Virtual FilterChain.doFilter&#40;FilterChainProxy.java&#58 ;303&#41;
at net.sf.acegisecurity.ui.AbstractProcessingFilter.d oFilter&#40;AbstractProcessingFilter.java&#58;305& #41;
at net.sf.acegisecurity.util.FilterChainProxy$Virtual FilterChain.doFilter&#40;FilterChainProxy.java&#58 ;303&#41;
at net.sf.acegisecurity.context.HttpSessionContextInt egrationFilter.doFilter&#40;HttpSessionContextInte grationFilter.java&#58;225&#41;
at net.sf.acegisecurity.util.FilterChainProxy$Virtual FilterChain.doFilter&#40;FilterChainProxy.java&#58 ;303&#41;
at net.sf.acegisecurity.util.FilterChainProxy.doFilte r&#40;FilterChainProxy.java&#58;173&#41;
at net.sf.acegisecurity.util.FilterToBeanProxy.doFilt er&#40;FilterToBeanProxy.java&#58;125&#41;
at org.apache.catalina.core.ApplicationFilterChain.in ternalDoFilter&#40;ApplicationFilterChain.java&#58 ;202&#41;
at org.apache.catalina.core.ApplicationFilterChain.do Filter&#40;ApplicationFilterChain.java&#58;173&#41 ;
at org.apache.catalina.core.StandardWrapperValve.invo ke&#40;StandardWrapperValve.java&#58;213&#41;
at org.apache.catalina.core.StandardContextValve.invo ke&#40;StandardContextValve.java&#58;178&#41;
at org.apache.catalina.core.StandardHostValve.invoke& #40;StandardHostValve.java&#58;126&#41;
at org.apache.catalina.valves.ErrorReportValve.invoke &#40;ErrorReportValve.java&#58;105&#41;
at org.apache.catalina.core.StandardEngineValve.invok e&#40;StandardEngineValve.java&#58;107&#41;
at org.apache.catalina.connector.CoyoteAdapter.servic e&#40;CoyoteAdapter.java&#58;148&#41;
at org.apache.jk.server.JkCoyoteHandler.invoke&#40;Jk CoyoteHandler.java&#58;307&#41;
at org.apache.jk.common.HandlerRequest.invoke&#40;Han dlerRequest.java&#58;385&#41;
at org.apache.jk.common.ChannelSocket.invoke&#40;Chan nelSocket.java&#58;748&#41;
at org.apache.jk.common.ChannelSocket.processConnecti on&#40;ChannelSocket.java&#58;678&#41;
at org.apache.jk.common.SocketConnection.runIt&#40;Ch a

[sklakken]

One thing to note that I just discovered. When I'm forcing https on the login page, the bad behavior occurs. When I don't force https, however, everything works fine. Go figure...