RE: [JBoss-user] help with security

Paul Austin Wed, 27 Jun 2001 06:30:36 -0700

Mike,

I have the same problem when I use a web app that is defined as a Context within the Tomcat server.xml configuration file. As you are using the admin context I presume you are using the standard configuration and placing your files in the admin web app directory. The only way I have been able to get round this problem is by creating a war file with all of my web pages and WEB-INF directory and copying that to the deploy directory.

I think that the problem here is that the jboss.xml file is not being loaded when the web app contexts are statically defined. Scott/Marc is this a bug?

Paul

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Mike Thompson
Sent: 27 June 2001 13:31
To: jboss
Subject: [JBoss-user] help with security

Now, word on the street is that the JBoss and Tomcat authentication is tied together, i.e. I can log into my web pages using my jboss users. So, I have set up a global security domain in my standardjboss.xml.

<jboss>

<security-domain>java:/jaas/instanton</secureity-domain>

    ...

</jboss>

The instanton entry for my auth.conf looks like

instanton
{
        org.jboss.security.auth.spi.DatabaseServerLoginModule required
        dsJndiName="java:/jdbc/authority"
        principalsQuery="select user_pass from User where user_name = ?"
        rolesQuery="select role_name, role_group from Roles where user_name = ?"
        ;
};

I have set up a jdbc driver and a minerva pool for authority. Here is the pool entry

    <mbean code="org.jboss.jdbc.XADataSourceLoader" name="DefaultDomain:service=XADataSource, name=jdbc/authority">
        <attribute name="DataSourceClass">org.opentools.minerva.jdbc.xa.wrapper.XADataSourceImpl</attribute>
        <attribute name="PoolName">jdbc/authority</attribute>
        <attribute name="URL">jdbc:mysql:///authority</attribute>
        <attribute name="JDBCUser">foo</attribute>
        <attribute name="Password">bar</attribute>
    </mbean>

Now when I go to http://localhost:8080/admin to access the tomcat admin stuff I get a javax.naming.NameNotFoundException(see below). Obviously I have something wrong setup, but I can't seem to figure it out. Any help is greatly appreciated!

    Thanks

        --m

[EmbeddedTomcatSX] javax.naming.NameNotFoundException: env not bound
[EmbeddedTomcatSX]      at org.jnp.server.NamingServer.getBinding(NamingServer.java:473)
[EmbeddedTomcatSX]      at org.jnp.server.NamingServer.getBinding(NamingServer.java:481)
[EmbeddedTomcatSX]      at org.jnp.server.NamingServer.getObject(NamingServer.java:487)
[EmbeddedTomcatSX]      at org.jnp.server.NamingServer.lookup(NamingServer.java:253)
[EmbeddedTomcatSX]      at org.jnp.interfaces.NamingContext.lookup(NamingContext.java:349)
[EmbeddedTomcatSX]      at org.jnp.interfaces.NamingContext.lookup(NamingContext.java:457)
[EmbeddedTomcatSX]      at org.jnp.interfaces.NamingContext.lookup(NamingContext.java:333)
[EmbeddedTomcatSX]      at javax.naming.InitialContext.lookup(InitialContext.java:350)
[EmbeddedTomcatSX]      at org.jboss.tomcat.security.JBossSecurityMgrRealm.authenticate(JBossSecurityMgrRealm.java:102)
[EmbeddedTomcatSX]      at org.apache.tomcat.core.ContextManager.doAuthenticate(ContextManager.java:837)
[EmbeddedTomcatSX]      at org.apache.tomcat.core.RequestImpl.getRemoteUser(RequestImpl.java:341)
[EmbeddedTomcatSX]      at org.jboss.tomcat.security.JBossSecurityMgrRealm.authorize(JBossSecurityMgrRealm.java:148)
[EmbeddedTomcatSX]      at org.apache.tomcat.core.ContextManager.doAuthorize(ContextManager.java:855)
[EmbeddedTomcatSX]      at org.apache.tomcat.core.ContextManager.internalService(ContextManager.java:789)
[EmbeddedTomcatSX]      at org.apache.tomcat.core.ContextManager.service(ContextManager.java:743)
[EmbeddedTomcatSX]      at org.apache.tomcat.service.http.HttpConnectionHandler.processConnection(HttpConnectionHandler.java:213)
[EmbeddedTomcatSX]      at org.apache.tomcat.service.TcpWorkerThread.runIt(PoolTcpEndpoint.java:416)
[EmbeddedTomcatSX]      at org.apache.tomcat.util.ThreadPool$ControlRunnable.run(ThreadPool.java:501)
[EmbeddedTomcatSX]      at java.lang.Thread.run(Thread.java:484)

Michael R. Thompson
http://www.instanton.com
512.439.3815

RE: [JBoss-user] help with security

Reply via email to