EP 6 /WAS620 : SM_USER header login and userid/pwd ...how ?

[Former Member]

Hi all ,

we would like :

a) External users to login to the portal using Siteminder (SM_USER) and

b) internal users to login via the default userid/pwd

We can configure SM_USER access in the authschemes.xml successfully ...

but when we try to add the userid/pwd module as follows ...

<loginModuleName>com.sap.security.core.logon.imp.HeaderVariableLoginModule</loginModuleName>^M

<controlFlag>SUFFICIENT</controlFlag>^M

<options>Header=SM_USER</options>^M

</loginmodule>^M

<loginmodule>^M

<loginModuleName>com.sap.security.core.logon.imp.DefaultLoginModule</loginModuleName>^M

<controlFlag>REQUISITE</controlFlag>^M

<options></options>^M

</loginmodule>^M

<priority>20</priority>^M

<frontendtype>2</frontendtype>^M

^M <frontendtarget>com.sap.portal.runtime.logon.header</frontendtarget>

</authscheme>^M

^M

..the portal will not present the userid/pwd page for non-Siteminder users .

We get the error message

"Cannot logon user defined in header variable! "

SAP say the frontendtarget>com.sap.portal.runtime.logon.header

does not support form data so this will not work .

Has anybody done this successfully ?

Regards

Daniel

[Former Member · Accepted solution]

Any ideas out there ?

[Former Member · Accepted solution]

Daniel,

=========================================================

<authscheme name="uidpwdlogon">

<!-- multiple login modules can be defined -->

<loginmodule>

<loginModuleName>

com.sap.security.core.logon.imp.HeaderVariableLoginModule

</loginModuleName>

<controlFlag>SUFFICIENT</controlFlag>

<options>Header=SM_USER</options>

</loginmodule>

<loginmodule>

<loginModuleName>

com.sap.security.core.logon.imp.DefaultLoginModule

</loginModuleName>

<!-- specifying whether this LoginModule is REQUIRED, REQUISITE, SUFFICIENT, or OPTIONAL -->

<controlFlag>OPTIONAL</controlFlag>

<options></options>

</loginmodule>

<priority>20</priority>

<!-- the frontendtype TARGET_FORWARD = 0, TARGET_REDIRECT = 1, TARGET_JAVAIVIEW = 2 -->

<frontendtype>2</frontendtype>

<!-- target object --> <frontendtarget>com.sap.portal.runtime.logon.basicauthentication</frontendtarget>

</authscheme>

=========================================================

Try the above configuration scheme. If the user is not

authenticated then prompts browser logon/password. Passing control back to Default logon page I could not get it working as that may mean mucking with the delivered module and couldn't spend that kind of time..

-Venkat Malempati