Re: [JBoss-dev] OracleLoginModule
Well I did it. I try to explain briefly what I did. I extended UsernamePasswordLoginModule, making user/password test and Roles recovery with a special connection made with DriverManager. Then I added code to make this LoginModule to be a LoginModule that knows it is working with a ManagedConnectionFactory starting from code of CallerIdentity Login Module. Then I configured a DataSource with SecurityDomainJndiName pointing to a security domain configure with this module and Criteria setted at ByContainer. Then I wrote a StupidServlet that do a getConnection on that Datasource and does a select USER from DUAL, configuring security-domain in jboss-web.xml at the same jndiName, and web.xml to put my StupidServlet in a security constraint based on Oracle's Roles name. Then when I try servlet it ask me log and password, authenticate over my Login Module using rightly Oracle's Roles, get Connection with correct user and give me a correct output. I think I could say that it works!! If you are still interested I'll send you the code asap (It need a little style clean up and some log removing :) ) Thanx for the help Il mar, 2003-02-04 alle 16:34, Stefano Maestri ha scritto: More clear now. I'm sorry to took your time. So, I took a look, and I think I could do something like the CallerIdentityLoginModule adding a special connection from DriverManager to authenticate user over Oracle and get Roles. I'm going to try. Thanks alot for the support. I'll let ypu know how things will go on. bye Stefano --- all work and no play makes Jack a dull boy --- bye Stefano [EMAIL PROTECTED] www.javalinux.it MSN messanger: [EMAIL PROTECTED] ICQ uin: 122192578 Jabber: canezen #jedit IRC channel as maeste --- This SF.NET email is sponsored by: SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See! http://www.vasoftware.com ___ Jboss-development mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/jboss-development
AW: [JBoss-dev] Jboss.net undeployment
John, Which version of jboss/Jboss.net do you use? What error do you get? Jboss.net automatically builds an in-memory undeployment descriptor for Axis from the web-service.xml (it is simply changing the root element name) in order to tear down the web service on undeployment, so this should work. CGJ -Ursprüngliche Nachricht- Von: John Fawcett [mailto:[EMAIL PROTECTED]] Gesendet: Mittwoch, 5. Februar 2003 16:19 An: [EMAIL PROTECTED] Betreff: [JBoss-dev] Jboss.net undeployment Hi, Currently, I have to restart jboss to undeploy/redeploy webservices. Hot-deployment works fine, but can not be repeated without a restart. I noticed in the axis doco that they use an undeployment descriptor. Would something similar work for jboss-net? Thanks, fawce --- This SF.NET email is sponsored by: SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See! http://www.vasoftware.com ___ Jboss-development mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/jboss-development ### This message has been scanned by F-Secure Anti-Virus for Microsoft Exchange. For more information, connect to http://www.F-Secure.com/ --- This SF.NET email is sponsored by: SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See! http://www.vasoftware.com ___ Jboss-development mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/jboss-development
[JBoss-dev] Setting Class-Path for EJB jar breaks WAR classloading(?)
Hi! My message didn't arise any comments on the users list so I'm posting here. This is what I have: app.ear servlet.war WEB-INF/lib/servletlibs.war ejb.jar blablaa/ABCBean.class ejb-client.jar blalaa/ABCLocal.class blalaa/ABCLocalHome.class If we don't refer to ejb-client.jar from ejb.jar the servlet finds classes from servletlibs.war, as it should. However, when I put Class-Path element in the manifest of ejb.jar like this: Class-Path: ejb-client.jar (and yes, I also specify ejb-client-jar in DD) ...then for some reason the applications in servlet.war cease to find classes in servletlibs.jar (the interfaces are found by ejb.jar, as expected). I doubt this is what is supposed to happen? I've tested this with JBoss 3.0.7RC1 and 3.2.0RC1. I'm running on Linux and JDK 1.4.1_01. Thanks, Panu (please CC me, I'm not on the developer list) -- Panu Hällfors, [EMAIL PROTECTED]|CS Student, Helsinki University of Technology http://panu.hallfors.com |Chief Software Architect, Viloke Oy --- This SF.NET email is sponsored by: SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See! http://www.vasoftware.com ___ Jboss-development mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/jboss-development
Re: [JBoss-dev] JMS usability
Thank you for your reply,
now everything works ok, seems to have been a /etc/hosts problem rather
than something jboss- or java- related. I'm sure many people have ran
into this.
The credentials line made absolutely no difference, I would get the same
error all the time, and I've looked through the JBossAdminDevel JMS
examples, so I know you can set up properties in a jndi.properties file,
I'd use the hard-coded way for overriding anything in resource files only.
Nevertheless, thank you for answering.
John Fawcett wrote:
Your login credentials have a type-o should be john,needle.
Also, reference the queue or topic name without the queue/ prefix.
Lastly, I would consult the extensive examples in the testsuite under
jbossmq, since you are doing a lot of environment setup that has much
more convenient (and portable) access via the JMS objects themselves.
Also, I would make sure you understand the implications of using
john,needle account, since it is a durable subscriber with a
pre-configured id. You may get some undesirable behavior, since I
believe the point of the preconfigured id is to prevent multiple
concurrent logins.
Hope this is helpful (and accurate),
fawce
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of
Stefan Puiu
Sent: Wednesday, February 05, 2003 11:24 AM
To: [EMAIL PROTECTED]
Subject: [JBoss-dev] JMS usability
Hello,
I'm having real trouble here trying to make JBoss 3.0.4 compiled and run
with JDK 1.4.0 send messages to a remote queue (on another computer).
I've asked on the JBoss-user list and received no answer, so I'm trying
here too. I heard somebody say he's using JBossMQ on production machines
- maybe he can share this with us? We have purchased the JBoss manuals,
but they aren't any good at explaining this.
Here is my original post:
Hello folks, I'm using JBoss 3.0.4 with the 1.4.0 JDK from Sun, compiled
from sources, with jbossmq as the JMS implementation. I'm running
everything on a Mandrake Linux 9.0. The remote computer uses the same
versions of JBoss and JDK.
I'm trying to send a message to a queue on a different computer here;
trouble is, I can't find the exact steps to take to do that in the docs.
The approach I've been trying is using JNP to find the JNDI provider on
the remote computer (jnp://192.168.192.252:1099), access the queue by
it's name (say queue/B), and try to send it a message. But trouble is
both lookup(ConnectionFactory) and lookup(queue/B) return null. When
an office mate tries to send a message to me, the message gets through,
but the JBoss console says something about an exception: Cannot connect
to the ConnectionReceiver/Server. I'm using localhost:8080/jmx-console
to verify that messages get through. I'm trying to send messages from a
client application, not from an enterprise bean.
Here's what I do:
env.put(Context.INITIAL_CONTEXT_FACTORY,
org.jnp.interfaces.NamingContextFactory);
env.put(Context.PROVIDER_URL, jnp://merlin:1099);
env.put(Context.URL_PKG_PREFIXES,
org.jboss.naming:org.jnp.interfaces);
env.put( Context.SECURITY_PRINCIPAL, john );
env.put( Context.SECURITY_CREDENTIALS, neddle );
InitialContext iniCtx = new InitialContext(env);
System.out.println (New context: + iniCtx + env: + env);
QueueConnectionFactory qcf = (QueueConnectionFactory)
iniCtx.lookup(ConnectionFactory);
if (qcf == null) {
System.out.println (OOPS);
//return ;
}
What am I doing wrong? Any ideas?
---
This SF.NET email is sponsored by:
SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See!
http://www.vasoftware.com
___
Jboss-development mailing list [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/jboss-development
---
This SF.NET email is sponsored by:
SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See!
http://www.vasoftware.com
___
Jboss-development mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/jboss-development
---
This SF.NET email is sponsored by:
SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See!
http://www.vasoftware.com
___
Jboss-development mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/jboss-development
[JBoss-dev] [ jboss-Bugs-681795 ] Bug in message selector evaluation
Bugs item #681795, was opened at 2003-02-06 17:28 You can respond by visiting: https://sourceforge.net/tracker/?func=detailatid=376685aid=681795group_id=22866 Category: JBossMQ Group: None Status: Open Resolution: None Priority: 5 Submitted By: Vaughn T. Combs (vaughnt) Assigned to: Nobody/Anonymous (nobody) Summary: Bug in message selector evaluation Initial Comment: I believe that I have found a bug in org.jboss.mq.selectors.Operator. In the methods lt() and le() you are, I believe, erroneously testing the second argument. Rather than != I believe that it should be ==. This truncates the second argument inappropriately when it is a double. I have attached a test run demonstrating the bug and the effect of the patch. Also, obviously, I have attached a patched version of Operator.java. I have checked the source for the most recent distribution v3.0.6 and it seems to be there as well. The interesting lines are 373, 376, 384, 387, 409, 412, 420, and 423 in Operator.java Take Care, Vaughn -- You can respond by visiting: https://sourceforge.net/tracker/?func=detailatid=376685aid=681795group_id=22866 --- This SF.NET email is sponsored by: SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See! http://www.vasoftware.com ___ Jboss-development mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/jboss-development
RE: [JBoss-dev] Jboss.net undeployment -- false alarm
Sorry, we had some unrelated transient config errors that I mistakenly attributed to wsr undeployment. We are currently running against a jboss-head build -- is this feature present in jboss3.2? Thanks and apologies for the false alarm, fawce -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Jung , Dr. Christoph Sent: Thursday, February 06, 2003 5:44 AM To: '[EMAIL PROTECTED]' Subject: AW: [JBoss-dev] Jboss.net undeployment John, Which version of jboss/Jboss.net do you use? What error do you get? Jboss.net automatically builds an in-memory undeployment descriptor for Axis from the web-service.xml (it is simply changing the root element name) in order to tear down the web service on undeployment, so this should work. CGJ -Ursprüngliche Nachricht- Von: John Fawcett [mailto:[EMAIL PROTECTED]] Gesendet: Mittwoch, 5. Februar 2003 16:19 An: [EMAIL PROTECTED] Betreff: [JBoss-dev] Jboss.net undeployment Hi, Currently, I have to restart jboss to undeploy/redeploy webservices. Hot-deployment works fine, but can not be repeated without a restart. I noticed in the axis doco that they use an undeployment descriptor. Would something similar work for jboss-net? Thanks, fawce --- This SF.NET email is sponsored by: SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See! http://www.vasoftware.com ___ Jboss-development mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/jboss-development ### This message has been scanned by F-Secure Anti-Virus for Microsoft Exchange. For more information, connect to http://www.F-Secure.com/ --- This SF.NET email is sponsored by: SourceForge Enterprise Edition + IBM + LinuxWorld =omething 2 See! http://www.vasoftware.com ___ Jboss-development mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/jboss-development --- This SF.NET email is sponsored by: SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See! http://www.vasoftware.com ___ Jboss-development mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/jboss-development
[JBoss-dev] [ jboss-Bugs-681795 ] Bug in message selector evaluation
Bugs item #681795, was opened at 2003-02-06 17:28 You can respond by visiting: https://sourceforge.net/tracker/?func=detailatid=376685aid=681795group_id=22866 Category: JBossMQ Group: None Status: Open Resolution: None Priority: 5 Submitted By: Vaughn T. Combs (vaughnt) Assigned to: Nobody/Anonymous (nobody) Summary: Bug in message selector evaluation Initial Comment: I believe that I have found a bug in org.jboss.mq.selectors.Operator. In the methods lt() and le() you are, I believe, erroneously testing the second argument. Rather than != I believe that it should be ==. This truncates the second argument inappropriately when it is a double. I have attached a test run demonstrating the bug and the effect of the patch. Also, obviously, I have attached a patched version of Operator.java. I have checked the source for the most recent distribution v3.0.6 and it seems to be there as well. The interesting lines are 373, 376, 384, 387, 409, 412, 420, and 423 in Operator.java Take Care, Vaughn -- Comment By: Vaughn T. Combs (vaughnt) Date: 2003-02-06 17:35 Message: Logged In: YES user_id=706194 here is the test run that I referred to in my original bug report. vtc -- You can respond by visiting: https://sourceforge.net/tracker/?func=detailatid=376685aid=681795group_id=22866 --- This SF.NET email is sponsored by: SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See! http://www.vasoftware.com ___ Jboss-development mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/jboss-development
[JBoss-dev] [ jboss-Bugs-681795 ] Bug in message selector evaluation
Bugs item #681795, was opened at 2003-02-06 17:28 You can respond by visiting: https://sourceforge.net/tracker/?func=detailatid=376685aid=681795group_id=22866 Category: JBossMQ Group: None Status: Open Resolution: None Priority: 5 Submitted By: Vaughn T. Combs (vaughnt) Assigned to: Nobody/Anonymous (nobody) Summary: Bug in message selector evaluation Initial Comment: I believe that I have found a bug in org.jboss.mq.selectors.Operator. In the methods lt() and le() you are, I believe, erroneously testing the second argument. Rather than != I believe that it should be ==. This truncates the second argument inappropriately when it is a double. I have attached a test run demonstrating the bug and the effect of the patch. Also, obviously, I have attached a patched version of Operator.java. I have checked the source for the most recent distribution v3.0.6 and it seems to be there as well. The interesting lines are 373, 376, 384, 387, 409, 412, 420, and 423 in Operator.java Take Care, Vaughn -- Comment By: Vaughn T. Combs (vaughnt) Date: 2003-02-06 17:35 Message: Logged In: YES user_id=706194 here is the test run that I referred to in my original bug report. vtc -- Comment By: Vaughn T. Combs (vaughnt) Date: 2003-02-06 17:35 Message: Logged In: YES user_id=706194 here is the test run that I referred to in my original bug report. vtc -- You can respond by visiting: https://sourceforge.net/tracker/?func=detailatid=376685aid=681795group_id=22866 --- This SF.NET email is sponsored by: SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See! http://www.vasoftware.com ___ Jboss-development mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/jboss-development
[JBoss-dev] Automated JBoss(Branch_3_0) Testsuite Results: 6-February-2003
JBoss daily test results SUMMARY Number of tests run: 1026 Successful tests: 1022 Errors:2 Failures: 2 [time of test: 2003-02-06.12-05 GMT] [java.version: 1.3.1] [java.vendor: Apple Computer, Inc.] [java.vm.version: 1.3.1_03-69] [java.vm.name: Java HotSpot(TM) Client VM] [java.vm.info: mixed mode] [os.name: Mac OS X] [os.arch: ppc] [os.version: 10.2.3] See http://users.jboss.org/~starksm/Branch_3_0/2003-02-06.12-05 for details of this test. NOTE: If there are any errors shown above - this mail is only highlighting them - it is NOT indicating that they are being looked at by anyone. It is assumed that whoever makes change(s) to jboss that break the test will be fixing the test or jboss, as appropriate! DETAILS OF ERRORS Suite: SecurityUnitTestCase Test:runLoginTest(org.jboss.test.jbossmq.test.SecurityUnitTestCase) Type:failure Exception: junit.framework.AssertionFailedError Message: Subscriber did not get correct number of messages 849 expected:1000 but was:849 - Suite: LocalWrapperCleanupUnitTestCase Test: testAutoCommitOffInRemoteUserTx(org.jboss.test.jca.test.LocalWrapperCleanupUnitTestCase) Type:error Exception: java.rmi.ServerException Message: RemoteException occurred in server thread; nested exception is: java.rmi.ServerException: EJBException:; nested exception is: javax.ejb.EJBException: Row committed, autocommit still on! - Suite: MissingClassUnitTestCase Test: testDeployServiceWithoutClass(org.jboss.test.jmx.test.MissingClassUnitTestCase) Type:error Exception: org.jboss.deployment.DeploymentException Message: jboss.test:name=missingclasstest is not registered.; - nested throwable: (javax.management.InstanceNotFoundException: jboss.test:name=missingclasstest is not registered.) - Suite: BeanStressTestCase Test:testDeadLockFromClient(org.jboss.test.deadlock.test.BeanStressTestCase) Type:failure Exception: junit.framework.AssertionFailedError Message: expected a client deadlock for AB BA - --- This SF.NET email is sponsored by: SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See! http://www.vasoftware.com ___ Jboss-development mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/jboss-development
[JBoss-dev] Remote class loading servlet
We have a small project open for a volunteer. In Jboss 2 and 3 we have a custom lightweight web server (port 8083) that returns java class files from the classLoader.getResouceAsStream to RMI clients (this is how remote class loading happens). I talked to Scott at JBoss Boot Camp and we think it is a good idea to replace this with a plain old Servlet for JBoss 4.0 so it can work with regular security, pooling and such. This is a fairly simple piece of code and shouldn't take longer then a day or two. If you are interested the code can be found in jboss-head/server/src/main/org/jboss/web/WebServer.java -dain --- This SF.NET email is sponsored by: SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See! http://www.vasoftware.com ___ Jboss-development mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/jboss-development
RE: [JBoss-dev] Remote class loading servlet
Does this mean that JBoss 4.0 will require integrated web container to run? -Original Message- From: Dain Sundstrom [mailto:[EMAIL PROTECTED]] Sent: Thursday, February 06, 2003 4:17 PM To: [EMAIL PROTECTED] Subject: [JBoss-dev] Remote class loading servlet We have a small project open for a volunteer. In Jboss 2 and 3 we have a custom lightweight web server (port 8083) that returns java class files from the classLoader.getResouceAsStream to RMI clients (this is how remote class loading happens). I talked to Scott at JBoss Boot Camp and we think it is a good idea to replace this with a plain old Servlet for JBoss 4.0 so it can work with regular security, pooling and such. This is a fairly simple piece of code and shouldn't take longer then a day or two. If you are interested the code can be found in jboss-head/server/src/main/org/jboss/web/WebServer.java -dain --- This SF.NET email is sponsored by: SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See! http://www.vasoftware.com ___ Jboss-development mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/jboss-development
[JBoss-dev] run.log Errors
Are errors in the run.log a cause for concern for CVS_HEAD build? Just want to know if I can safely ignore the runtime errors as a normal state of alpha craziness. Also, I tried running the testsuite and the overall build claims success, but one of the targets fails with 12 errors and 43 warnings. The testsuite/output director is an empty skeleton after the run, and I can't seem to find test results. There are probably very n00b questions. Advanced apologies. What I did to get here: cvs co jboss-head (in build dir) build (completes successfully) build run-jboss (starts up with some errors including those below) build run-testsuite (reports success but generates no testsuite/output and has internal build errors) An error from running JBoss (there were about 10 errors with stack traces, but I'd rather not spam the list with that unless it's requested): 14:27:58,056 INFO [ServiceConfigurator] class not found for mbean jboss:service=WorkManager,type=TrunkInvoker ... 14:27:58,928 ERROR [STDERR] javax.management.InstanceNotFoundException: jboss:service=WorkManager,type=TrunkInvoker is not registered. --- This SF.NET email is sponsored by: SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See! http://www.vasoftware.com ___ Jboss-development mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/jboss-development
Re: [JBoss-dev] Remote class loading servlet
Dynamic class loading using the default rmi codebase will. You an always override the codebase system property to vend classes anyway you want. Scott Stark Chief Technology Officer JBoss Group, LLC - Original Message - From: Igor Fedorenko [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, February 06, 2003 2:00 PM Subject: RE: [JBoss-dev] Remote class loading servlet Does this mean that JBoss 4.0 will require integrated web container to run? --- This SF.NET email is sponsored by: SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See! http://www.vasoftware.com ___ Jboss-development mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/jboss-development
[JBoss-dev] JNP directory support?
Howdy, I'm considering using the JNP server as a standalone component in a j2se project. For my purposes it would be nice to have directory support, so that I can store/search-on attributes. I noticed that JNP doesn't support this. Having pawed through the code a bit, I believe I could add basic DirContext support without too much trouble. My questions are: Has this been done already? Is this useful to anybody else? Is there something absurd about this endeavor that hasn't occured to me? It seems to me that having a free, standalone JNDI implemenation with directory support would be a good thing. Thanks, Jim --- This SF.NET email is sponsored by: SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See! http://www.vasoftware.com ___ Jboss-development mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/jboss-development
[JBoss-dev] unchecked permission bug
Hi dev-list,
I've been working on this simple ejb that is called from an web container
unauthenticated. The method I'm calling has an unchecked/ in its
method-permissions element in the assembly-descriptor. After some debug I
found that BeanMetaData getMethodPermissions() returned null when
called from the SecurityInterceptor. This causes the familiar error:
No method permissions assigned to method=+method
+ , interface=+Invocation.getInvocationTypeName(iface);
I then began to inspect the code and found the AnbodyPrincipal class does not
obey the equals contract. In the following section of code, at least on my
vm, the calls:
result.clear();
result.add(AnybodyPrincipal.ANYBODY_PRINCIPAL);
break;
causes the call result.isEmpty() to return true. This appears to be a bug, am
I missing something?
while (iterator.hasNext())
{
MethodMetaData m = (MethodMetaData) iterator.next();
if (m.patternMatches(methodName, params, iface))
{
/* If this is an unchecked method anyone can access it so
set the result set to a role that equates to any Principal or
Principal name and return.
*/
if (m.isUnchecked())
{
result.clear();
result.add(AnybodyPrincipal.ANYBODY_PRINCIPAL);
break;
}
// Else, add all roles
else
{
Iterator rolesIterator = m.getRoles().iterator();
while (rolesIterator.hasNext())
{
String roleName = (String) rolesIterator.next();
result.add(new SimplePrincipal(roleName));
}
}
}
}
// If no permissions were assigned to the method return null to
indicate no access
if (result.isEmpty()) {
result = null;
return result;
---
---
This SF.NET email is sponsored by:
SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See!
http://www.vasoftware.com
___
Jboss-development mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/jboss-development
Re: [JBoss-dev] unchecked permission bug
Post a bug with an example attached to sourceforge as it is not clear
what you are describing here.
Scott Stark
Chief Technology Officer
JBoss Group, LLC
- Original Message -
From: Timothy Barreto [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Thursday, February 06, 2003 10:37 PM
Subject: [JBoss-dev] unchecked permission bug
Hi dev-list,
I've been working on this simple ejb that is called from an web container
unauthenticated. The method I'm calling has an unchecked/ in its
method-permissions element in the assembly-descriptor. After some debug I
found that BeanMetaData getMethodPermissions() returned null when
called from the SecurityInterceptor. This causes the familiar error:
No method permissions assigned to method=+method
+ , interface=+Invocation.getInvocationTypeName(iface);
I then began to inspect the code and found the AnbodyPrincipal class does not
obey the equals contract. In the following section of code, at least on my
vm, the calls:
result.clear();
result.add(AnybodyPrincipal.ANYBODY_PRINCIPAL);
break;
causes the call result.isEmpty() to return true. This appears to be a bug, am
I missing something?
while (iterator.hasNext())
{
MethodMetaData m = (MethodMetaData) iterator.next();
if (m.patternMatches(methodName, params, iface))
{
/* If this is an unchecked method anyone can access it so
set the result set to a role that equates to any Principal or
Principal name and return.
*/
if (m.isUnchecked())
{
result.clear();
result.add(AnybodyPrincipal.ANYBODY_PRINCIPAL);
break;
}
// Else, add all roles
else
{
Iterator rolesIterator = m.getRoles().iterator();
while (rolesIterator.hasNext())
{
String roleName = (String) rolesIterator.next();
result.add(new SimplePrincipal(roleName));
}
}
}
}
// If no permissions were assigned to the method return null to
indicate no access
if (result.isEmpty()) {
result = null;
return result;
---
---
This SF.NET email is sponsored by:
SourceForge Enterprise Edition + IBM + LinuxWorld =omething 2 See!
http://www.vasoftware.com
___
Jboss-development mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/jboss-development
---
This SF.NET email is sponsored by:
SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See!
http://www.vasoftware.com
___
Jboss-development mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/jboss-development
Re: [JBoss-dev] JNP directory support?
No it has not been done so do it. Scott Stark Chief Technology Officer JBoss Group, LLC - Original Message - From: Jim Carlson [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, February 06, 2003 7:46 PM Subject: [JBoss-dev] JNP directory support? Howdy, I'm considering using the JNP server as a standalone component in a j2se project. For my purposes it would be nice to have directory support, so that I can store/search-on attributes. I noticed that JNP doesn't support this. Having pawed through the code a bit, I believe I could add basic DirContext support without too much trouble. My questions are: Has this been done already? Is this useful to anybody else? Is there something absurd about this endeavor that hasn't occured to me? It seems to me that having a free, standalone JNDI implemenation with directory support would be a good thing. Thanks, Jim --- This SF.NET email is sponsored by: SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See! http://www.vasoftware.com ___ Jboss-development mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/jboss-development --- This SF.NET email is sponsored by: SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See! http://www.vasoftware.com ___ Jboss-development mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/jboss-development
AW: [JBoss-dev] Jboss.net undeployment -- false alarm
-Ursprüngliche Nachricht- Von: John Fawcett [mailto:[EMAIL PROTECTED]] Gesendet: Donnerstag, 6. Februar 2003 18:22 An: [EMAIL PROTECTED] Betreff: RE: [JBoss-dev] Jboss.net undeployment -- false alarm Sorry, we had some unrelated transient config errors that I mistakenly attributed to wsr undeployment. Bad for you, good for me ;-) We are currently running against a jboss-head build -- is this feature present in jboss3.2? oui. Thanks and apologies for the false alarm, You can buy me some beers whenever we meet in person ;-) Have a nice weekend and keep on finding bugs, the both thingy is now confirmed, I definitely have to change the template. CGJ ### This message has been scanned by F-Secure Anti-Virus for Microsoft Exchange. For more information, connect to http://www.F-Secure.com/ --- This SF.NET email is sponsored by: SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See! http://www.vasoftware.com ___ Jboss-development mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/jboss-development
