RE: Security problem integration Tomcat (3.2.1) and Jonas (2.2.7)

[Erez Nahir]

Hello Philip,

Thanks for the quick response:

My implementation is as follows:

  public int authorize( Request request, Response response, String[] roles )
{
    System.out.println("In SecurityCtxInterceptor31");
    int result = super.authorize(request, response, roles );
    if( result == 0 ) {
      Principal principal = request.getUserPrincipal();
      if( principal != null ) {
        SecurityContext ctx = new SecurityContext(principal.getName() );
        SecurityCurrent current = SecurityCurrent.getCurrent();
        current.setSecurityContext(ctx);
      }
    }
    return result;
  }

But I think it does not reach the method (Can't see the println() anywhere).
I even tried to name the class SecurityCtxInterceptor31 and replace it with
the former one.
Nothing yet.

Thanks,

Erez

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, April 04, 2001 6:29 PM
To: [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]; [EMAIL PROTECTED]
Subject: Re: Security problem integration Tomcat (3.2.1) and Jonas (2.2.7)


Erez Nahir wrote:
>
> Hello Philip, Thomas and others,
>
> I'm facing the same problem you have had.
> I'm trying to integrate Jonas 2.2.7 and Tomcat 3.2.1 on a win 2k platform
> with RMI connection. (JDK 1.3).
>
> I tried to implement the SecurityCtxInterceptor32 as you mentioned and
also
> with a different authorize method:
>
> public int  Request req, Response res, String[] roles)
>
> Nothing.
>
> The exception I get is:
> Cannot create OpBean: java.rmi.ServerException: RemoteException occurred
in
> server thread; nested exception is: java.rmi.RemoteException:
checkSecurity,
> ..... caller not authorized to access the method.
>
> If you have found any answer pleas share it :-(
>
> Thanks,
>
> Erez
>

Hi,

the SecurityCtxInterceptor32 that I mentioned in my previous mail
was not correct because authorize has an additional parameter String[]
roles
have you replaced
int result = super.authorize (req, response);
by
int result = super.authorize (req, response, roles) ;
in your interceptor?
regards,

--
        Philippe

Philippe Coq  Evidian   Phone: (33) 04 76 29 78 49
Bull S.A  - 1 rue de Provence - 38432 Echirolles Cedex France
Download our EJBServer at http://www.objectweb.org

----
To unsubscribe, send email to [EMAIL PROTECTED] and
include in the body of the message "unsubscribe jonas-users".
For general help, send email to [EMAIL PROTECTED] and
include in the body of the message "help".