Re: [JBoss-user] Setting jmx-console password
user.properties roles.properties Rod Macpherson wrote: After enabling security on jmx-console, where do we set the password for JBossAdmin? Using tomcat version but there is no tomcat-users.xml. TIA, Rod --- The SF.Net email is sponsored by EclipseCon 2004 Premiere Conference on Open Tools Development and Integration See the breadth of Eclipse activity. February 3-5 in Anaheim, CA. http://www.eclipsecon.org/osdn ___ JBoss-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/jboss-user -- Bill Burke Chief Architect JBoss Group LLC. --- The SF.Net email is sponsored by EclipseCon 2004 Premiere Conference on Open Tools Development and Integration See the breadth of Eclipse activity. February 3-5 in Anaheim, CA. http://www.eclipsecon.org/osdn ___ JBoss-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/jboss-user
RE: [JBoss-user] Two ears and classcastexception :( please, help!!
A client in one ear calling an ejb in another ear is a circumstance where you do not want a custom loader-repository. For this you want the default flat visibility since you are sharing types between deployments. You'll have to explain why the client is in ear1 calling ear2 rather than being in ear2. Scott Stark Chief Technology Officer JBoss Group, LLC -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Francisco Figueiredo Jr. Sent: Monday, January 26, 2004 11:22 AM To: [EMAIL PROTECTED] Subject: [JBoss-user] Two ears and classcastexception :( please, help!! Hi all, I'm trying to get one application inside an .ear to use beans inside another .ear. On both ear's I'm using custom class loader through the loader-repository tag in jboss-app.xml. On both ears, in their application.xml I expose a jar containing the ejb interfaces using the module tag. The problem is that when I try to call a getHome in one ear, it throws classcastexception when trying to call narrow method in PortableRemoteObject class. Am I doing something wrong? I'm sure the classcastexception is generated because of the different class loaders. I read the JBOSS admin guide in the section about classloaders and indeed I did a modification in the code which calls the narrow method and I could check they are from different classloaders. what I get from calling narrow is this: [EMAIL PROTECTED] url=file:/opt/jboss-3.2.3/server/default/tmp/deploy/tmp43175corporativo. ear ,addedOrder=45} what I get from the ear calling the get home is this: [EMAIL PROTECTED] url=file:/opt/jboss-3.2.3/server/default/tmp/deploy/tmp43176temis.ear ,addedOrder=46} I can see that the class loaders are in fact different. But from my two disparate ears! I mean, I thought if I used custom classloaders, it would not be visible by other applications in other classloaders. Am I missing something? What can I do to solve that? Please, help me. I'm desperate! :) Thanks in advance. Regards, Francisco Figueiredo Jr. = Regards, Francisco Figueiredo Jr. --- The SF.Net email is sponsored by EclipseCon 2004 Premiere Conference on Open Tools Development and Integration See the breadth of Eclipse activity. February 3-5 in Anaheim, CA. http://www.eclipsecon.org/osdn ___ JBoss-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/jboss-user
[JBoss-user] jboss.net: How can I modify the service name displayed in WSDL?
I am using the jboss.net xdoclet task and have not been able to figure out how to modify the value that the jboss.net/axis services display for the service name of my session bean. Because it is a local bean, the service has 'Local' appended to the name session bean name automatically so that I end up with something like MySessionLocalService. While it is functional, I cringe at the name and would like to modify it. I thought this would be a fairly easy thing to do, but am unable to determine how to do so. Am I overlooking something or is this just a fact of life? Thanks, Rob --- The SF.Net email is sponsored by EclipseCon 2004 Premiere Conference on Open Tools Development and Integration See the breadth of Eclipse activity. February 3-5 in Anaheim, CA. http://www.eclipsecon.org/osdn ___ JBoss-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/jboss-user
[JBoss-user] Re: jboss.net: SOAP Attachments anyone?
Thanks, Alastair. So I take it you are not using the xdoclet module to generate the web-service.xml? Rob Alastair Rodgers wrote: It sounds like the 'apachesoap:DataHandler' might not be mapped correctly. I achieve this using the following in the Axis WSDD file: service name=myservice provider=java:RPC xmlns:ns1=http://www.blah.com/myservice; parameter name=wsdlTargetNamespace value=http://www.blah.com/myservice/ parameter name=className value=com.blah.MyService/ parameter name=allowedMethods value=submitFile/ operation name=submitFile qname=submitFile returnQName=result returnType=xsd:string parameter name=someParam type=xsd:string/ parameter name=dh type=ns1:DataHandler/ /operation typeMapping deserializer=org.apache.axis.encoding.ser.JAFDataHandlerDeserializerFactory languageSpecificType=java:javax.activation.DataHandler qname=ns1:DataHandler serializer=org.apache.axis.encoding.ser.JAFDataHandlerSerializerFactory encodingStyle=http://schemas.xmlsoap.org/soap/encoding// /service Note how the ns1:DataHandler parameter type is mapped to JAFDataHandlerSerializerFactory / JAFDataHandlerDeserializerFactory, and that ns1 is defined as a valid namespace on the service element. --- The SF.Net email is sponsored by EclipseCon 2004 Premiere Conference on Open Tools Development and Integration See the breadth of Eclipse activity. February 3-5 in Anaheim, CA. http://www.eclipsecon.org/osdn ___ JBoss-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/jboss-user
RE: [JBoss-user] how to encode database password in descriptor file mysql-ds.xml
Scott:
Thank you for your reply.
Sorry I don't understand why you need another password.The user-name/password in mysql-ds.xml is the only user for jboss to communicate with mysql. At this moment, let's assume we need another password. Certainly, I can't get another user-name/pasword to encode the above from mysql-ds.xml. Can we try to get something from other database such as hsqldb-ds.xml(which I assume is embedded in JBOSS) or some flat files? Do we need to encode this
password too?
Since I don't know your potential solution, my point is that the password in mysql-ds.xml should be encoded(using SHA for hashAlgorithm, base64 for hashEncoding) and JBOSS should be
able to decode it when it gets it and use this decoded password to
connect to MySql database. I check the code
UsersRolesLoginModule.java, there is no problem to encode a
password, but I don't know how JBOSS can decode this encodedpassword. My understanding is that for normal JAAS, the encoded password is stored, and when the input user-name and
password come, JBOSS will encode the inputpassword and compare it with stored password. But in my scenario, we don't have the input password.
Anyway, could you/JBOSS provide a secure way (or a sample)
to communicate with database? Right now the plain user-name and password are less secure. I think this will benefit the jboss application
and expend far-reach of jboss.
Again thanks,
Mark
--- Scott M Stark [EMAIL PROTECTED] wrote: How do you want the password used to encrypt this password to be stored/used? Scott Stark Chief Technology Officer JBoss Group, LLC From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mark Wang Sent: Tuesday, January 27, 2004 4:39 PM To: [EMAIL PROTECTED] Subject: [JBoss-user] how to encode database password in descriptor file mysql-ds.xmlDear JBOSS Experts: I am using
JBOSS 3.2.3 and MySql 4.0.16. Under the directory: $JBOSS_HOME/server/default/deploy, there is a file "mysql-ds.xml": The file has something like the following: .. datasources local-tx-datasource jndi-nameMySqlDS/jndi-name connection-urljdbc:mysql://localhost:3306/authority/connection-url driver-classorg.gjt.mm.mysql.Driver/driver-class user-nametest/user-name passwordtest123/password /local-tx-datasource /datasources .. Since the database user-name("test") and password("test123") are plain texts, these are big security flaws.
Anybody who can read this file can use this user-name and password to do anything with the database. How can we encode the password so that even people can read this file, but can't get the original password? Could somebody provide a sample configuration file "mysql-ds.xml" and related files? Thanks a million, Mark ---
Do you Yahoo!?
Yahoo! SiteBuilder - Free web site building tool. Try it!
[JBoss-user] XMBean with Standard MBean superclass (maybe XDoclet-specific)
Hi, I wrote an XMBean which extends from org.jboss.system.ServiceMBeanSupport (The ddt was generated by XDoclets 1.2b4.) But the start/stop/... methods of ServiceMBean do not show up in the mbeans operation, even though I specified: * @jmx.mbean * extends=org.jboss.system.ServiceMBean Before using an XMBean I used a standard MBean and everything was fine; now it does not even start, because the server doesn't recognize the start() method either. I suspect I could add the start method to the ddt manually (which defeats xdoclet unless merging) or I could overwrite the methods to show them to XDoclet, being able to decorate them with the attributes. Is there a better solution? Perhaps there could be a functionality where the MBean-server uses introspection on the Standard MBean superclass, which would have to be signaled by an attribute in the xxx-service.xml. I found no such attribute. Regards, Michael Bartmann --- The SF.Net email is sponsored by EclipseCon 2004 Premiere Conference on Open Tools Development and Integration See the breadth of Eclipse activity. February 3-5 in Anaheim, CA. http://www.eclipsecon.org/osdn ___ JBoss-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/jboss-user
[JBoss-user] JBoss 3.2.3 and Sticky Sessions and Session Replication
All, we are trying to setup a JBoss 3.2.3 (Tomcat) cluster with Apache and mod_jk. We discovered that the sticky sessions with mod_jk only work if you give the jvmRoute parameter in the tomcat configuration file. If we do not use sticky sessions we receive an error from Tomcat if during form based authentication the form post is routed to another instance then the one redirecting to the authentication form. That is OK and form based authentication works fine with the sticky session. The jvmRoute paramter causes the extra dot seperated name at the end of the session id. The problem is that we also want session replication and failover in case one machine is not working. So we also configured the distributable/ tag in the web.xml deployment descriptor and deployed the jbossha-httpsession.sar. If we stop the first JBoss, which created the session and which got all the request so far because of the sticky session, mod_jk is performing a fail-over and redirects the request to the second JBoss. But this one is now complaining that it does not know the session which has the extension of the jvmRoute paramter of the first JBoss. Is is not possible to use sticky sessions and session replication? If not there seems to be a bug in Tomcat which is complaining that he does not understand the login form post of a client which was initiated on anonther Tomcat. Any comments and information about this is appreciated, --Marcus --- The SF.Net email is sponsored by EclipseCon 2004 Premiere Conference on Open Tools Development and Integration See the breadth of Eclipse activity. February 3-5 in Anaheim, CA. http://www.eclipsecon.org/osdn ___ JBoss-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/jboss-user
