Skip to Main Content

Java Development Tools

Announcement

For appeals, questions and feedback about Oracle Forums, please email oracle-forums-moderators_us@oracle.com. Technical questions should be asked in the appropriate category. Thank you!

_afrLoop causing endless loop in my login.jspx in ADF Security

701676Apr 13 2010 — edited Jan 14 2013
I upgraded to Jdeveloper 11.1.1.2.0 last december. My application uses ADF security (authentication and authorization). The application works fine when I run it from the JDeveloper.

My problem comes when I deploy my application to the standalone Weblogic server (10.3.2.0) running on a linux server.

I get my welcome page, but when I try to log by clicking the login icon, which should bring up login.jspx page, I get a loop. Here is the access.log:
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------
172.29.40.41 - - [13/apr/2010:11:02:01 +0200] "GET /hrsus/adfAuthentication HTTP/1.1" 302 307
172.29.40.41 - - [13/apr/2010:11:02:01 +0200] "GET /hrsus/faces/login.jspx HTTP/1.1" 200 4929
172.29.40.41 - - [13/apr/2010:11:02:01 +0200] "GET /hrsus/faces/login.jspx?_afrLoop=13630737319581456&_afrWindowMode=0&_afrWindowId=xfpvt7i35_1 HTTP/1.1" 302 309
172.29.40.41 - - [13/apr/2010:11:02:01 +0200] "GET /hrsus/adfAuthentication HTTP/1.1" 302 307
172.29.40.41 - - [13/apr/2010:11:02:01 +0200] "GET /hrsus/faces/login.jspx HTTP/1.1" 200 4929
172.29.40.41 - - [13/apr/2010:11:02:01 +0200] "GET /hrsus/faces/login.jspx?_afrLoop=13630737347489456&_afrWindowMode=0&_afrWindowId=xfpvt7i35_1 HTTP/1.1" 302 309
172.29.40.41 - - [13/apr/2010:11:02:01 +0200] "GET /hrsus/adfAuthentication HTTP/1.1" 302 307
172.29.40.41 - - [13/apr/2010:11:02:01 +0200] "GET /hrsus/faces/login.jspx HTTP/1.1" 200 4929
172.29.40.41 - - [13/apr/2010:11:02:01 +0200] "GET /hrsus/faces/login.jspx?_afrLoop=13630737395251456&_afrWindowMode=0&_afrWindowId=xfpvt7i35_1 HTTP/1.1" 302 309
172.29.40.41 - - [13/apr/2010:11:02:01 +0200] "GET /hrsus/adfAuthentication HTTP/1.1" 302 307
172.29.40.41 - - [13/apr/2010:11:02:01 +0200] "GET /hrsus/faces/login.jspx HTTP/1.1" 200 4929
172.29.40.41 - - [13/apr/2010:11:02:01 +0200] "GET /hrsus/faces/login.jspx?_afrLoop=13630737434734456&_afrWindowMode=0&_afrWindowId=xfpvt7i35_1 HTTP/1.1" 302 309
172.29.40.41 - - [13/apr/2010:11:02:01 +0200] "GET /hrsus/adfAuthentication HTTP/1.1" 302 307
172.29.40.41 - - [13/apr/2010:11:02:01 +0200] "GET /hrsus/faces/login.jspx HTTP/1.1" 200 4929
172.29.40.41 - - [13/apr/2010:11:02:01 +0200] "GET /hrsus/faces/login.jspx?_afrLoop=13630737489153456&_afrWindowMode=0&_afrWindowId=xfpvt7i35_1 HTTP/1.1" 302 309
172.29.40.41 - - [13/apr/2010:11:02:01 +0200] "GET /hrsus/adfAuthentication HTTP/1.1" 302 307
172.29.40.41 - - [13/apr/2010:11:02:02 +0200] "GET /hrsus/faces/login.jspx HTTP/1.1" 200 4929
172.29.40.41 - - [13/apr/2010:11:02:02 +0200] "GET /hrsus/faces/login.jspx?_afrLoop=13630737538576456&_afrWindowMode=0&_afrWindowId=xfpvt7i35_1 HTTP/1.1" 302 309
172.29.40.41 - - [13/apr/2010:11:02:02 +0200] "GET /hrsus/adfAuthentication HTTP/1.1" 302 307
172.29.40.41 - - [13/apr/2010:11:02:02 +0200] "GET /hrsus/faces/login.jspx HTTP/1.1" 200 4929
172.29.40.41 - - [13/apr/2010:11:02:02 +0200] "GET /hrsus/faces/login.jspx?_afrLoop=13630737565960456&_afrWindowMode=0&_afrWindowId=xfpvt7i35_1 HTTP/1.1" 302 309
172.29.40.41 - - [13/apr/2010:11:02:02 +0200] "GET /hrsus/adfAuthentication HTTP/1.1" 302 307
172.29.40.41 - - [13/apr/2010:11:02:02 +0200] "GET /hrsus/faces/login.jspx HTTP/1.1" 200 4929
172.29.40.41 - - [13/apr/2010:11:02:02 +0200] "GET /hrsus/faces/login.jspx?_afrLoop=13630737596724456&_afrWindowMode=0&_afrWindowId=xfpvt7i35_1 HTTP/1.1" 302 309
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------

The only solution I found on the net was to remove the trinidad filter (http://www.yenlo.nl/harryvanoosten/2010/03/26/endless-redirect-refresh-with-_afrloop-parameter-adf-11g-webcenter-enabled/) but I am not happy with that solution, besides it doesn't work for me. I get an error in firefox "Firefox has detected that the server is redirecting the request for this address in a way that will never complete." and the access.log looks like this:
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------
172.29.40.41 - - [13/apr/2010:11:19:13 +0200] "GET /hrsus/adfAuthentication?success_url=/faces/welcome HTTP/1.1" 302 307
172.29.40.41 - - [13/apr/2010:11:19:13 +0200] "GET /hrsus/faces/login.jspx HTTP/1.1" 302 309
172.29.40.41 - - [13/apr/2010:11:19:13 +0200] "GET /hrsus/adfAuthentication HTTP/1.1" 302 307
172.29.40.41 - - [13/apr/2010:11:19:13 +0200] "GET /hrsus/faces/login.jspx HTTP/1.1" 302 309
172.29.40.41 - - [13/apr/2010:11:19:13 +0200] "GET /hrsus/adfAuthentication HTTP/1.1" 302 307
172.29.40.41 - - [13/apr/2010:11:19:13 +0200] "GET /hrsus/faces/login.jspx HTTP/1.1" 302 309
172.29.40.41 - - [13/apr/2010:11:19:13 +0200] "GET /hrsus/adfAuthentication HTTP/1.1" 302 307
172.29.40.41 - - [13/apr/2010:11:19:13 +0200] "GET /hrsus/faces/login.jspx HTTP/1.1" 302 309
172.29.40.41 - - [13/apr/2010:11:19:13 +0200] "GET /hrsus/adfAuthentication HTTP/1.1" 302 307
172.29.40.41 - - [13/apr/2010:11:19:13 +0200] "GET /hrsus/faces/login.jspx HTTP/1.1" 302 309
172.29.40.41 - - [13/apr/2010:11:19:13 +0200] "GET /hrsus/adfAuthentication HTTP/1.1" 302 307
172.29.40.41 - - [13/apr/2010:11:19:13 +0200] "GET /hrsus/faces/login.jspx HTTP/1.1" 302 309
172.29.40.41 - - [13/apr/2010:11:19:13 +0200] "GET /hrsus/adfAuthentication HTTP/1.1" 302 307
172.29.40.41 - - [13/apr/2010:11:19:13 +0200] "GET /hrsus/faces/login.jspx HTTP/1.1" 302 309
172.29.40.41 - - [13/apr/2010:11:19:13 +0200] "GET /hrsus/adfAuthentication HTTP/1.1" 302 307
172.29.40.41 - - [13/apr/2010:11:19:13 +0200] "GET /hrsus/faces/login.jspx HTTP/1.1" 302 309
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------

My login page is just a straight copy from the Jdeveloper manual.

Has anybody found a better solution than to remove the trinidad filter?
Comments
Locked Post
New comments cannot be posted to this locked post.
Post Details
Locked on Feb 11 2013
Added on Apr 13 2010
12 comments
5,208 views