This problen is most probably caused by  the inability of tomcat services to pass on 
the credential properly to the jBoss. The
solution is to update your  tomcat-services.jar with the latest code in contrib module.

good luck

~jm

Hein Saris wrote:

> Hi,
>
> I have successfully installed jBoss2.2+Tomcat and have deployed an
> application.
> I have secured my EJB beans with JAAS.
> When I access my beans with a Java client, I can use my ejb beans without any
> problem after logging in.
> If I try to access my beans from within a jsp (through a bean), I get the
> following error:
>
> [PersonBean] javax.security.auth.login.LoginException:
> java.lang.NullPointerException
>         at
> 
>org.jboss.security.auth.SecurityAssociationHandler.getPassword(SecurityAssociationHandler.java:125)
>         at
> 
>org.jboss.security.auth.SecurityAssociationHandler.handle(SecurityAssociationHandler.java:83)
>         at
> javax.security.auth.login.LoginContext$4.run(LoginContext.java:731)
> at java.security.AccessController.doPrivileged(Native Method)
>         at
> 
>javax.security.auth.login.LoginContext$SecureCallbackHandler.handle(LoginContext.java:727)
>         at
> 
>org.jboss.security.plugins.samples.UsernamePasswordLoginModule.getUsernameAndPassword(UsernamePasswordLoginModule.java:133)
>         at
> 
>org.jboss.security.plugins.samples.UsernamePasswordLoginModule.login(UsernamePasswordLoginModule.java:76)
>         at
> 
>org.jboss.security.plugins.samples.JaasServerLoginModule.login(JaasServerLoginModule.java:105)
>         at java.lang.reflect.Method.invoke(Native Method)
>         at
> javax.security.auth.login.LoginContext.invoke(LoginContext.java:595)
> at javax.security.auth.login.LoginContext.access$000(LoginContext.java:125)
>         at
> javax.security.auth.login.LoginContext$3.run(LoginContext.java:531)
> at java.security.AccessController.doPrivileged(Native Method)
>         at
> javax.security.auth.login.LoginContext.invokeModule(LoginContext.java:528)
>         at
> javax.security.auth.login.LoginContext.login(LoginContext.java:449)
> at
> 
>org.jboss.security.plugins.JaasSecurityManager.defaultLogin(JaasSecurityManager.java:332)
>         at
> 
>org.jboss.security.plugins.JaasSecurityManager.authenticate(JaasSecurityManager.java:301)
>         at
> org.jboss.security.plugins.JaasSecurityManager.isValid(JaasSecurityManager.java:193)
>         at
> 
>org.jboss.ejb.plugins.SecurityInterceptor.checkSecurityAssociation(SecurityInterceptor.java:209)
>         at
> org.jboss.ejb.plugins.SecurityInterceptor.invokeHome(SecurityInterceptor.java:144)
>         at
> org.jboss.ejb.plugins.LogInterceptor.invokeHome(LogInterceptor.java:106)
>         at org.jboss.ejb.EntityContainer.invokeHome(EntityContainer.java:316)
>         at
> 
>org.jboss.ejb.plugins.jrmp.server.JRMPContainerInvoker.invokeHome(JRMPContainerInvoker.java:436)
>         at
> org.jboss.ejb.plugins.jrmp.interfaces.HomeProxy.invoke(HomeProxy.java:212)
>         at $Proxy62.findByPrimaryKey(Unknown Source)
>         at
> be.idewe.planning.bean.PersonBean.processRequest(PersonBean.java:68)
> at
> 
>planning._0002fplanning_0002fperson_0002ejspperson_jsp_1._jspService(_0002fplanning_0002fperson_0002ejspperson_jsp_1.java:102)
>         at
> org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:119)
> at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
>         at
> org.apache.jasper.servlet.JspServlet$JspServletWrapper.service(JspServlet.java:177)
>         at
> org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:318)
>         at org.apache.jasper.servlet.JspServlet.service(JspServlet.java:391)
>         at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
>         at
> org.apache.tomcat.core.ServletWrapper.doService(ServletWrapper.java:404)
>         at org.apache.tomcat.core.Handler.service(Handler.java:286)
>         at
> org.apache.tomcat.core.ServletWrapper.service(ServletWrapper.java:372)
>         at
> org.apache.tomcat.core.ContextManager.internalService(ContextManager.java:797)
>         at
> org.apache.tomcat.core.ContextManager.service(ContextManager.java:743)
>         at
> 
>org.apache.tomcat.service.http.HttpConnectionHandler.processConnection(HttpConnectionHandler.java:210)
>         at
> org.apache.tomcat.service.TcpWorkerThread.runIt(PoolTcpEndpoint.java:416)
>         at
> org.apache.tomcat.util.ThreadPool$ControlRunnable.run(ThreadPool.java:498)
>         at java.lang.Thread.run(Thread.java:484)
>
> [PersonBean]    at
> javax.security.auth.login.LoginContext.invoke(LoginContext.java:650)
> [PersonBean]    at
> javax.security.auth.login.LoginContext.access$000(LoginContext.java:125)
> [PersonBean]    at
> javax.security.auth.login.LoginContext$3.run(LoginContext.java:531)
> [PersonBean]    at java.security.AccessController.doPrivileged(Native Method)
> [PersonBean]    at
> javax.security.auth.login.LoginContext.invokeModule(LoginContext.java:528)
> [PersonBean]    at
> javax.security.auth.login.LoginContext.login(LoginContext.java:449)
> [PersonBean]    at
> 
>org.jboss.security.plugins.JaasSecurityManager.defaultLogin(JaasSecurityManager.java:332)
> [PersonBean]    at
> 
>org.jboss.security.plugins.JaasSecurityManager.authenticate(JaasSecurityManager.java:301)
> [PersonBean]    at
> org.jboss.security.plugins.JaasSecurityManager.isValid(JaasSecurityManager.java:193)
> [PersonBean]    at
> 
>org.jboss.ejb.plugins.SecurityInterceptor.checkSecurityAssociation(SecurityInterceptor.java:209)
> [PersonBean]    at
> org.jboss.ejb.plugins.SecurityInterceptor.invokeHome(SecurityInterceptor.java:144)
> [PersonBean]    at
> org.jboss.ejb.plugins.LogInterceptor.invokeHome(LogInterceptor.java:106)
> [PersonBean]    at
> org.jboss.ejb.EntityContainer.invokeHome(EntityContainer.java:316)
> [PersonBean]    at
> 
>org.jboss.ejb.plugins.jrmp.server.JRMPContainerInvoker.invokeHome(JRMPContainerInvoker.java:436)
> [PersonBean]    at
> org.jboss.ejb.plugins.jrmp.interfaces.HomeProxy.invoke(HomeProxy.java:212)
> [PersonBean]    at $Proxy62.findByPrimaryKey(Unknown Source)
> [PersonBean]    at
> be.idewe.planning.bean.PersonBean.processRequest(PersonBean.java:68)
> [PersonBean]    at
> 
>planning._0002fplanning_0002fperson_0002ejspperson_jsp_1._jspService(_0002fplanning_0002fperson_0002ejspperson_jsp_1.java:102)
> [PersonBean]    at
> org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:119)
> [PersonBean]    at
> javax.servlet.http.HttpServlet.service(HttpServlet.java:853)[PersonBean]
> at
> org.apache.jasper.servlet.JspServlet$JspServletWrapper.service(JspServlet.java:177)
> [PersonBean]    at
> org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:318)
> [PersonBean]    at
> org.apache.jasper.servlet.JspServlet.service(JspServlet.java:391)
> [PersonBean]    at
> javax.servlet.http.HttpServlet.service(HttpServlet.java:853)[PersonBean]
> at org.apache.tomcat.core.ServletWrapper.doService(ServletWrapper.java:404)
> [PersonBean]    at org.apache.tomcat.core.Handler.service(Handler.java:286)
> [PersonBean]    at
> org.apache.tomcat.core.ServletWrapper.service(ServletWrapper.java:372)
> [PersonBean]    at
> org.apache.tomcat.core.ContextManager.internalService(ContextManager.java:797)
> [PersonBean]    at
> org.apache.tomcat.core.ContextManager.service(ContextManager.java:743)
> [PersonBean]    at
> 
>org.apache.tomcat.service.http.HttpConnectionHandler.processConnection(HttpConnectionHandler.java:210)
> [PersonBean]    at
> org.apache.tomcat.service.TcpWorkerThread.runIt(PoolTcpEndpoint.java:416)
> [PersonBean]    at
> org.apache.tomcat.util.ThreadPool$ControlRunnable.run(ThreadPool.java:498)
> [PersonBean]    at java.lang.Thread.run(Thread.java:484)
> [PersonBean] Authentication exception, principal=hein
>
> In other words. Tomcat passes the principal to jBoss, but not the password
> (my guess). What is going wrong?
> --
> Hein Saris - Beta Nine BVBA
> Villerspark 3/1 - B-3500 Hasselt - +32-11-21.31.92
> http://www.beta9.be - [EMAIL PROTECTED]
>
> _______________________________________________
> JBoss-user mailing list
> [EMAIL PROTECTED]
> http://lists.sourceforge.net/lists/listinfo/jboss-user


_______________________________________________
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user

Reply via email to