csf ejb ws report authorization failures as 500 internal server error
---------------------------------------------------------------------

                 Key: GERONIMO-4738
                 URL: https://issues.apache.org/jira/browse/GERONIMO-4738
             Project: Geronimo
          Issue Type: Bug
      Security Level: public (Regular issues)
          Components: webservices
    Affects Versions: 2.2
            Reporter: David Jencks


If you secure an ejb web service with ejb security constraints cxf reports 
authorization failures as 500 internal server error and doesn't log much 
useful.  Axis2 logs the auth failure and IIRC reports 401 or 403.

I think this can be reproduced by removing the ejb-jar.xml security constraints 
from   
testsuite/webservices-testsuite/jaxws-tests/jaxws-ejb-sec/src/main/resources/META-INF/ejb-jar.xml

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

Reply via email to