[ http://issues.apache.org/jira/browse/GERONIMO-1791?page=all ]
Matt Hogstrom updated GERONIMO-1791: ------------------------------------ Fix Version: 1.1.1 (was: 1.1) > LDAP Security Realm created via Console can fail deployment > ----------------------------------------------------------- > > Key: GERONIMO-1791 > URL: http://issues.apache.org/jira/browse/GERONIMO-1791 > Project: Geronimo > Type: Bug > Security: public(Regular issues) > Components: security > Versions: 1.0, 1.1, 1.2 > Environment: Geronimo 1.0.0 > Reporter: Donald Woods > Assignee: Donald Woods > Priority: Minor > Fix For: 1.1.1 > Attachments: G1791.patch, Geronimo-1791.patch > > Creation of an LDAP Security Realm through the Console can fail at runtime, > due to a NullPointerException being thrown by the LDAPLoginModule not > checking that the optional connectionProtocl and authentication attributes > have not been supplied, while other attributes are being checked for null and > empty string. > 655: 17:43:45,328 WARN [TomcatGeronimoRealm] Login exception authenticating > username "system" > 656: javax.security.auth.login.LoginException: Error filling callback list > 657: at > org.apache.geronimo.security.jaas.client.ServerLoginProxy.login(ServerLoginProxy.java:78) > 658: at > org.apache.geronimo.security.jaas.client.JaasLoginCoordinator.performLogin(JaasLoginCoordinator.java:189) > 659: at > org.apache.geronimo.security.jaas.client.JaasLoginCoordinator.login(JaasLoginCoordinator.java:113) > 660: at sun.reflect.GeneratedMethodAccessor218.invoke(Unknown Source) > 661: at > sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java(Compiled > Code)) > 662: at java.lang.reflect.Method.invoke(Method.java(Compiled Code)) > 663: at javax.security.auth.login.LoginContext.invoke(LoginContext.java:699) > 664: at > javax.security.auth.login.LoginContext.access$000(LoginContext.java:151) > 665: at javax.security.auth.login.LoginContext$4.run(LoginContext.java:634) > 666: at java.security.AccessController.doPrivileged1(Native Method) > 667: at > java.security.AccessController.doPrivileged(AccessController.java(Compiled > Code)) > 668: at > javax.security.auth.login.LoginContext.invokeModule(LoginContext.java:631) > 669: at javax.security.auth.login.LoginContext.login(LoginContext.java:557) > 670: at > org.apache.geronimo.tomcat.realm.TomcatGeronimoRealm.authenticate(TomcatGeronimoRealm.java:332) > 671: at > org.apache.geronimo.tomcat.realm.TomcatGeronimoRealm.authenticate(TomcatGeronimoRealm.java:282) > 672: at > org.apache.catalina.authenticator.FormAuthenticator.authenticate(FormAuthenticator.java:256) > 673: at > org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:391) > 674: at > org.apache.geronimo.tomcat.GeronimoStandardContext$SystemMethodValve.invoke(GeronimoStandardContext.java:273) > 675: at > org.apache.geronimo.tomcat.valve.GeronimoBeforeAfterValve.invoke(GeronimoBeforeAfterValve.java:31) > 676: at > org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:126) > 677: at > org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:105) > 678: at > org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:107) > 679: at > org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:526) > 680: at > org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:148) > 681: at > org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:856) > 682: at > org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.processConnection(Http11Protocol.java:744) > 683: at > org.apache.tomcat.util.net.PoolTcpEndpoint.processSocket(PoolTcpEndpoint.java:527) > 684: at > org.apache.tomcat.util.net.LeaderFollowerWorkerThread.runIt(LeaderFollowerWorkerThread.java:80) > 685: at > org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:684) > 686: at java.lang.Thread.run(Thread.java:570) > 687: Caused by: javax.security.auth.login.LoginException: LDAP Error > 688: at > org.apache.geronimo.security.realm.providers.LDAPLoginModule.login(LDAPLoginModule.java:162) > 689: at > org.apache.geronimo.security.jaas.server.JaasLoginService.performLogin(JaasLoginService.java:236) > 690: at > org.apache.geronimo.security.jaas.server.JaasLoginService$$FastClassByCGLIB$$95b84fc9.invoke(<generated>) > 691: at net.sf.cglib.reflect.FastMethod.invoke(FastMethod.java(Inlined > Compiled Code)) > 692: at > org.apache.geronimo.gbean.runtime.FastMethodInvoker.invoke(FastMethodInvoker.java(Compiled > Code)) > 693: at > org.apache.geronimo.gbean.runtime.GBeanOperation.invoke(GBeanOperation.java(Inlined > Compiled Code)) > 694: at > org.apache.geronimo.gbean.runtime.GBeanInstance.invoke(GBeanInstance.java(Compiled > Code)) > 695: at > org.apache.geronimo.gbean.runtime.RawInvoker.invoke(RawInvoker.java(Inlined > Compiled Code)) > 696: at > org.apache.geronimo.kernel.basic.RawOperationInvoker.invoke(RawOperationInvoker.java(Compiled > Code)) > 697: at > org.apache.geronimo.kernel.basic.ProxyMethodInterceptor.intercept(ProxyMethodInterceptor.java(Compiled > Code)) > 698: at > org.apache.geronimo.security.jaas.server.JaasLoginServiceMBean$$EnhancerByCGLIB$$4883447f.performLogin(<gene > rated>) > 699: at > org.apache.geronimo.security.jaas.client.ServerLoginProxy.login(ServerLoginProxy.java:74) > 700: ... 29 more > 701: Caused by: java.lang.NullPointerException > 702: at java.util.Hashtable.put(Hashtable.java(Compiled Code)) > 703: at > org.apache.geronimo.security.realm.providers.LDAPLoginModule.open(LDAPLoginModule.java:422) > 704: at > org.apache.geronimo.security.realm.providers.LDAPLoginModule.authenticate(LDAPLoginModule.java:200) > 705: at > org.apache.geronimo.security.realm.providers.LDAPLoginModule.login(LDAPLoginModule.java:155) > 706: ... 40 more > Thanks to VAMSAVARDHANA Vamsi for finding this problem. -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://issues.apache.org/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira