ibm-mobilefirstmobilefirst-adaptersmobilefirst-servermobilefirst-analytics

MobileFirst Server preparation for uploaded log data - Security


I am using MobileFirst Server MFPF 7.1, IF20151114-1616

WLClientLogReceiver adapter has the following settings. I tried changing the securityTest value to "LogUploadServlet", I still receive the same error below.

<procedure name="log" securityTest="wl_unprotected" audit="true" />

To enable security that protects the loguploader servlet, I followed the instruction given in the IBM document on step one.

Server preparation for uploaded log data - Security

Configuration in my aunthenticationConfig.xml

Under staticResources

<resource id="logUploadServlet" securityTest="LogUploadServlet">
    <urlPatterns>/apps/services/loguploader*</urlPatterns>
</resource>

Under securityTests

<customSecurityTest name="LogUploadServlet">
    <test realm="wl_anonymousUserRealm" step="1"/>
    <test realm="LogUploadServlet" isInternalUserID="true"/>
</customSecurityTest>

Under realms

<realm name="LogUploadServlet" loginModule="StrongDummy">
    <className>com.worklight.core.auth.ext.HeaderAuthenticator</className>
</realm>

Deployed the updated WAR file and adapter in server. I am receiving the below error while client send logs to server by calling send() method.

[2/12/16 14:14:28:768 CST] 0000014d LoginContext W com.worklight.core.auth.impl.LoginContext invokeLoginModule FWLSE0239W: Authentication failure in realm 'LogUploadServlet': Please check the credentials [project usbusiness] [2/12/16 14:14:28:933 CST] 000000d1 LoginContext W com.worklight.core.auth.impl.LoginContext invokeLoginModule FWLSE0239W: Authentication failure in realm 'LogUploadServlet': Please check the credentials [project usbusiness] [2/12/16 14:14:30:542 CST] 000000de SystemOut

Not sure what i a missing in this.


Solution

  • To not leave a question unanswered, from the comments section:

    Issue is with the realm com.worklight.core.auth.ext.HeaderAuthenticator that I set for logUploadServlet. after removing and make the security as isInternalUserID="true" its working fine.