This is a bug in the JAAS login config file class. It is not thread safe and
when multiple login threads run at the same time it can produce the error
your seeing. I thought I added a synchronization that would prevent this
from happening. The workaround it to have a single thread force a
load of the login configuration file so that when the frames all try to
access secured beans they don't cause the ConfigFile to be loaded
by multiple threads.
----- Original Message -----
From: "Alex Radka" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, May 21, 2001 7:41 AM
Subject: [JBoss-user] problem with authentication
> Hi,
>
> I'm using JBoss-2.2.1 w/ the embedded Tomcat that comes with the release
> (3.2.1) on Win2000, and MySQL.
>
> I'm using Basic Authentication but to a DB instead of the prop files.
>
> My app uses frames with each frame calling a servlet which attaches to
> action classes which call stateless session beans. The start page has a
> tree navigation tool on one side, and an entry page on the other with some
> info based on who the user is.
>
> Everything works fine when my initial page has only one frame calling the
> servlet, so I'm pretty sure I have everything configured correctly. I get
> very odd behavior when both frames are hitting different session beans at
> the same time (which really only happens on the initial login).
>
> After login, depending on which frame gets 'there' first, a Security
> Exception is thrown, and the other frame builds correctly. What I mean by
> 'get there first', is that the next time I recreate, the other frame fails
> (with the same exception) while the original frame that failed builds
> correctly. All subsequent logins work fine until I restart JBoss.
>
> I'm not sure what info to include, so I'll start with the stack trace.
>
> Any help would be appreciated.
>
> Alex
>
> [ERROR] Mon May 21 09:18:23 EDT 2001--
> java.rmi.ServerException: Container exception. Notify the container
> developers :-); nested exception is:
> java.lang.SecurityException: Configuration Error:
> Line 55: expected '=', found 'null'
> java.lang.SecurityException: Configuration Error:
> Line 55: expected '=', found 'null'
> at
> com.sun.security.auth.login.ConfigFile.getAppConfigurationEntry(ConfigFile.j
> ava:221)
> at javax.security.auth.login.LoginContext.init(LoginContext.java:172)
> at javax.security.auth.login.LoginContext.<init>(LoginContext.java:266)
> at javax.security.auth.login.LoginContext.<init>(LoginContext.java:380)
> at
> org.jboss.security.plugins.JaasSecurityManager.defaultLogin(JaasSecurityMana
> ger.java:331)
_______________________________________________
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user