SJWS 7.0, Broadvision Portal, and Certificate Authentication
807567Mar 3 2009 — edited Mar 3 2009I have the following situation:
SJWS 7.0
Broadvision 1-to1 Portal
I would like to implement client authentication via CAC card. I have successfully turned on client auth, and am prompted with my CAC card certificate info. The problem comes when i try to do something with the certificate info. I have deployed a small webapp with a servlet filter (as advised earlier) with (for now) some simple X509Certificate stuff. The problem is that the servlet never gets executed because the web server is configured such that the broadvision app 'takes over' immediately - it uses an NSAPI plugin
What I would like to do is this:
On my initial page, have a link that says 'CAC Login'
When CAC Login link is selected, get certificate data (using my servlet filter), build a request block with that info and
Forward (or redirect) to Broadvision app for processing (i.e. authenticate against cert store)
I need to build a bridge between my servlet filter on the webserver and the broadvision code on the app server and I don't know how. Here are some pertinent lines from my magnus.conf:
Init fn=load-modules shlib="/opt/webserver7/bin/https/lib/bvensapi60.so funcs="bvsm-init,bvsm-process-cgi,bvsm-fake-path
Init fn=bvsm-init application_name="mycg"
and from obj.conf:
NameTrans fn="bvsm-fake-path" gateway_name="/mycg" redirect="redirect.bvc"
thanks in advance for any ideas on how I can do this
Gregg