>>>>> "David" == David M Karr <[EMAIL PROTECTED]> writes:

    David> I have a simple EJB application.  It works fine from an application client,
    David> including JAAS through DatabaseServerLoginModule, using my "UserBean" table.

    David> I set up a web application to go with it.  I was able to set up form-based
    David> auth, and that also appears to work fine.

    David> However, after logging in, I try to execute a method on an EJB, which the 
user
    David> normally can access, and I get the following exception on the console:

    David> [ClassBean] Authentication exception, principal=null
    David> [Default] java.rmi.RemoteException: checkSecurityAssociation; nested 
exception is:
    David>         java.lang.SecurityException: Authentication exception, 
principal=null
    David> [Default] java.rmi.RemoteException: checkSecurityAssociation; nested 
exception is:
    David>         java.lang.SecurityException: Authentication exception, 
principal=null
    David> [Default] java.lang.SecurityException: Authentication exception, 
principal=null
    David> [Default]       at 
org.jboss.ejb.plugins.SecurityInterceptor.checkSecurityAssociation(SecurityInterceptor.java:168)

    David> What could I be missing?  The "auth.conf" with the 
DatabaseServerLoginModule is
    David> in the jboss/conf/tomcat subdirectory, which was my startup config.

Ok, I figured it out.  I had added a new subdir to the web app, but I forgot to
add a new "url-pattern" element to the "web-resource-collection".  Once I added
it, it worked fine.

-- 
===================================================================
David M. Karr          ; Best Consulting
[EMAIL PROTECTED]   ; Java/Unix/XML/C++/X ; BrainBench CJ12P (#12004)


_______________________________________________
JBoss-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/jboss-user

Reply via email to