_afrLoop causing endless loop in my login.jspx in ADF Security
701676Apr 13 2010 — edited Jan 14 2013I upgraded to Jdeveloper 11.1.1.2.0 last december. My application uses ADF security (authentication and authorization). The application works fine when I run it from the JDeveloper.
My problem comes when I deploy my application to the standalone Weblogic server (10.3.2.0) running on a linux server.
I get my welcome page, but when I try to log by clicking the login icon, which should bring up login.jspx page, I get a loop. Here is the access.log:
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------
172.29.40.41 - - [13/apr/2010:11:02:01 +0200] "GET /hrsus/adfAuthentication HTTP/1.1" 302 307
172.29.40.41 - - [13/apr/2010:11:02:01 +0200] "GET /hrsus/faces/login.jspx HTTP/1.1" 200 4929
172.29.40.41 - - [13/apr/2010:11:02:01 +0200] "GET /hrsus/faces/login.jspx?_afrLoop=13630737319581456&_afrWindowMode=0&_afrWindowId=xfpvt7i35_1 HTTP/1.1" 302 309
172.29.40.41 - - [13/apr/2010:11:02:01 +0200] "GET /hrsus/adfAuthentication HTTP/1.1" 302 307
172.29.40.41 - - [13/apr/2010:11:02:01 +0200] "GET /hrsus/faces/login.jspx HTTP/1.1" 200 4929
172.29.40.41 - - [13/apr/2010:11:02:01 +0200] "GET /hrsus/faces/login.jspx?_afrLoop=13630737347489456&_afrWindowMode=0&_afrWindowId=xfpvt7i35_1 HTTP/1.1" 302 309
172.29.40.41 - - [13/apr/2010:11:02:01 +0200] "GET /hrsus/adfAuthentication HTTP/1.1" 302 307
172.29.40.41 - - [13/apr/2010:11:02:01 +0200] "GET /hrsus/faces/login.jspx HTTP/1.1" 200 4929
172.29.40.41 - - [13/apr/2010:11:02:01 +0200] "GET /hrsus/faces/login.jspx?_afrLoop=13630737395251456&_afrWindowMode=0&_afrWindowId=xfpvt7i35_1 HTTP/1.1" 302 309
172.29.40.41 - - [13/apr/2010:11:02:01 +0200] "GET /hrsus/adfAuthentication HTTP/1.1" 302 307
172.29.40.41 - - [13/apr/2010:11:02:01 +0200] "GET /hrsus/faces/login.jspx HTTP/1.1" 200 4929
172.29.40.41 - - [13/apr/2010:11:02:01 +0200] "GET /hrsus/faces/login.jspx?_afrLoop=13630737434734456&_afrWindowMode=0&_afrWindowId=xfpvt7i35_1 HTTP/1.1" 302 309
172.29.40.41 - - [13/apr/2010:11:02:01 +0200] "GET /hrsus/adfAuthentication HTTP/1.1" 302 307
172.29.40.41 - - [13/apr/2010:11:02:01 +0200] "GET /hrsus/faces/login.jspx HTTP/1.1" 200 4929
172.29.40.41 - - [13/apr/2010:11:02:01 +0200] "GET /hrsus/faces/login.jspx?_afrLoop=13630737489153456&_afrWindowMode=0&_afrWindowId=xfpvt7i35_1 HTTP/1.1" 302 309
172.29.40.41 - - [13/apr/2010:11:02:01 +0200] "GET /hrsus/adfAuthentication HTTP/1.1" 302 307
172.29.40.41 - - [13/apr/2010:11:02:02 +0200] "GET /hrsus/faces/login.jspx HTTP/1.1" 200 4929
172.29.40.41 - - [13/apr/2010:11:02:02 +0200] "GET /hrsus/faces/login.jspx?_afrLoop=13630737538576456&_afrWindowMode=0&_afrWindowId=xfpvt7i35_1 HTTP/1.1" 302 309
172.29.40.41 - - [13/apr/2010:11:02:02 +0200] "GET /hrsus/adfAuthentication HTTP/1.1" 302 307
172.29.40.41 - - [13/apr/2010:11:02:02 +0200] "GET /hrsus/faces/login.jspx HTTP/1.1" 200 4929
172.29.40.41 - - [13/apr/2010:11:02:02 +0200] "GET /hrsus/faces/login.jspx?_afrLoop=13630737565960456&_afrWindowMode=0&_afrWindowId=xfpvt7i35_1 HTTP/1.1" 302 309
172.29.40.41 - - [13/apr/2010:11:02:02 +0200] "GET /hrsus/adfAuthentication HTTP/1.1" 302 307
172.29.40.41 - - [13/apr/2010:11:02:02 +0200] "GET /hrsus/faces/login.jspx HTTP/1.1" 200 4929
172.29.40.41 - - [13/apr/2010:11:02:02 +0200] "GET /hrsus/faces/login.jspx?_afrLoop=13630737596724456&_afrWindowMode=0&_afrWindowId=xfpvt7i35_1 HTTP/1.1" 302 309
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------
The only solution I found on the net was to remove the trinidad filter (http://www.yenlo.nl/harryvanoosten/2010/03/26/endless-redirect-refresh-with-_afrloop-parameter-adf-11g-webcenter-enabled/) but I am not happy with that solution, besides it doesn't work for me. I get an error in firefox "Firefox has detected that the server is redirecting the request for this address in a way that will never complete." and the access.log looks like this:
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------
172.29.40.41 - - [13/apr/2010:11:19:13 +0200] "GET /hrsus/adfAuthentication?success_url=/faces/welcome HTTP/1.1" 302 307
172.29.40.41 - - [13/apr/2010:11:19:13 +0200] "GET /hrsus/faces/login.jspx HTTP/1.1" 302 309
172.29.40.41 - - [13/apr/2010:11:19:13 +0200] "GET /hrsus/adfAuthentication HTTP/1.1" 302 307
172.29.40.41 - - [13/apr/2010:11:19:13 +0200] "GET /hrsus/faces/login.jspx HTTP/1.1" 302 309
172.29.40.41 - - [13/apr/2010:11:19:13 +0200] "GET /hrsus/adfAuthentication HTTP/1.1" 302 307
172.29.40.41 - - [13/apr/2010:11:19:13 +0200] "GET /hrsus/faces/login.jspx HTTP/1.1" 302 309
172.29.40.41 - - [13/apr/2010:11:19:13 +0200] "GET /hrsus/adfAuthentication HTTP/1.1" 302 307
172.29.40.41 - - [13/apr/2010:11:19:13 +0200] "GET /hrsus/faces/login.jspx HTTP/1.1" 302 309
172.29.40.41 - - [13/apr/2010:11:19:13 +0200] "GET /hrsus/adfAuthentication HTTP/1.1" 302 307
172.29.40.41 - - [13/apr/2010:11:19:13 +0200] "GET /hrsus/faces/login.jspx HTTP/1.1" 302 309
172.29.40.41 - - [13/apr/2010:11:19:13 +0200] "GET /hrsus/adfAuthentication HTTP/1.1" 302 307
172.29.40.41 - - [13/apr/2010:11:19:13 +0200] "GET /hrsus/faces/login.jspx HTTP/1.1" 302 309
172.29.40.41 - - [13/apr/2010:11:19:13 +0200] "GET /hrsus/adfAuthentication HTTP/1.1" 302 307
172.29.40.41 - - [13/apr/2010:11:19:13 +0200] "GET /hrsus/faces/login.jspx HTTP/1.1" 302 309
172.29.40.41 - - [13/apr/2010:11:19:13 +0200] "GET /hrsus/adfAuthentication HTTP/1.1" 302 307
172.29.40.41 - - [13/apr/2010:11:19:13 +0200] "GET /hrsus/faces/login.jspx HTTP/1.1" 302 309
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------
My login page is just a straight copy from the Jdeveloper manual.
Has anybody found a better solution than to remove the trinidad filter?