Re: [JBoss-user] [JBOSSSX] Disable Authentication Cache?

[Samuel Franklyn]

You cannot disable it but you can
lowering it into 1 second. By using
the following config in jboss.jcml.
For me this is good enough I hope it is
good enough for you :)

   
 org.jboss.security.plugins.JaasSecurityManager
 Security:name=DefaultLoginConfig
 1
 1
   


Luttrell, Peter wrote:
> both levels. since the JaasSecurityManager is used for authentication 
> and authorization for both.
>  
>  i wrote my own LoginModule that verifies name, password and also an 
> account lock (specific to my app) in order to authorize the user. So the 
> following scenario doesn't work:
> 1) user logs in successfully (accountLock==false)
> 2) an administrator locks the account
> 3) the same user attempts to login (accountLock==true) and succeeds.
> now if my LoginModule were called it would accurately reject the 
> request, but my login module is not called. There appears to be because 
> a cache that is caching positive logins based on only the username and 
> password, hence eliminating the accountLock check that I have.
>  
> thus i assume that to fix my problem i need to disable the 
> authentication cache.
>  
> .peter
> 
> -Original Message-
> *From:* Dmitri Colebatch [mailto:[EMAIL PROTECTED]]
> *Sent:* Monday, June 10, 2002 10:08 PM
> *To:* Peter Luttrell
> *Cc:* [EMAIL PROTECTED]
> *Subject:* Re: [JBoss-user] [JBOSSSX] Disable Authentication Cache?
> 
> at what level?  ejb or web?
> 
> - Original Message -
> *From:* Peter Luttrell 
> *To:* 'Dmitri Colebatch' 
> *Sent:* Tuesday, June 11, 2002 12:58 PM
> *Subject:* FW: [JBoss-user] [JBOSSSX] Disable Authentication Cache?
> 
> thanks again for the info on the other (subjectless) thread.
>  
> do you happen to know anything about my other post?
> 
> -Original Message-
> *From:* [EMAIL PROTECTED]
> 
> [mailto:[EMAIL PROTECTED]] *On Behalf
> Of *Luttrell, Peter
> *Sent:* Monday, June 10, 2002 2:31 PM
> *To:* '[EMAIL PROTECTED]'
> ; 'Scott M Stark'
> *Subject:* [JBoss-user] [JBOSSSX] Disable Authentication Cache?
> 
> How do you disable the authentication cache in the
> JaasSecurityManager?
> 
> 
> 
> 



___

Sponsored by:
ThinkGeek at http://www.ThinkGeek.com/
___
JBoss-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/jboss-user

[JBoss-user] Authentication Cache

[Samuel Franklyn]

After migrating from JBoss 2.4.4 Tomcat 3.2.3
into JBoss 2.4.6 Tomcat 4.0.3 I am experiencing
behaviour change in authentication.

If I delete a user in my database, that
user can still log on. It seems now JBoss
is caching authentication. I can see
AuthenticationCacheJndi configuration
in JBoss MBean view.

How to disable this cache?




___

Don't miss the 2002 Sprint PCS Application Developer's Conference
August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm

___
JBoss-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/jboss-user

Re: [JBoss-user] Problems running Jboss

[Samuel Franklyn]

I had the same problem today (19 September 2001) I solve
it by deleting lib directory in jboss/deploy. Tomcat/JSP behaviour seems
OK to me. However I didn't have the time to check EJB
behaviour maybe tommorow.

- Original Message -
From: "Menz, Matthias" <[EMAIL PROTECTED]>
To: "JBoss Mailgroup (E-Mail)" <[EMAIL PROTECTED]>
Sent: Wednesday, September 19, 2001 3:04 PM
Subject: [JBoss-user] Problems running Jboss


>
> Hello,
>  has anybody got any idea why I cant get Jboss started. Do I have to have
> any jars included in my classpath.
> I use a JBoss Version 2.4.0 with JDK 1.3.0 on a Digital(Compaq)  UNIX
V4.0F
> (Alpha). Included is the log of the session.
> The Script runs fine for a while and then terminates with a segmentation
> violation.
> Any help would be apreciated.
>
> Greetings Matt
>



___
JBoss-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/jboss-user

Re: [JBoss-user] Problems running Jboss

[Samuel Franklyn]

I had the same problem today (19 September 2001) I solve
it by deleting lib directory in jboss/deploy. Tomcat/JSP behaviour seems
OK to me. However I didn't have the time to check EJB
behaviour maybe tommorow.

- Original Message -
From: "Menz, Matthias" <[EMAIL PROTECTED]>
To: "JBoss Mailgroup (E-Mail)" <[EMAIL PROTECTED]>
Sent: Wednesday, September 19, 2001 3:04 PM
Subject: [JBoss-user] Problems running Jboss


>
> Hello,
>  has anybody got any idea why I cant get Jboss started. Do I have to have
> any jars included in my classpath.
> I use a JBoss Version 2.4.0 with JDK 1.3.0 on a Digital(Compaq)  UNIX
V4.0F
> (Alpha). Included is the log of the session.
> The Script runs fine for a while and then terminates with a segmentation
> violation.
> Any help would be apreciated.
>
> Greetings Matt
>



___
JBoss-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/jboss-user

Re: [JBoss-user] Problem with postgresql

[Samuel Franklyn]

This also happens to me using SAPDB.
This is really strange because Oracle did not behave
this way.

- Original Message -
From: "Tomasz Sulej" <[EMAIL PROTECTED]>
To: "jboss-user" <[EMAIL PROTECTED]>
Sent: Friday, July 20, 2001 5:24 PM
Subject: Re: [JBoss-user] Problem with postgresql


> Hmmm...
>
> It seems to be solved...
> But I need explanation why does it work like this?
>
> Inserted record appeared in database when I obtained connection within
transaction
> (after tx.begin())
>
> Why I cannot take connection before transaction begins???
>
> --
> Tomasz Sulej
> eo Networks Sp. z o.o.
> tel. +48 22 622 61 85
> kom. +48 606 250 438
>
> ___
> JBoss-user mailing list
> [EMAIL PROTECTED]
> http://lists.sourceforge.net/lists/listinfo/jboss-user


___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user

Re: [JBoss-user] Jboss and sapdb

[Samuel Franklyn]

I never use entity beans with SAPDB 
only stateless session beans.

- Original Message - 
From: "Hermann RANGAMANA" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, July 18, 2001 3:01 PM
Subject: Re: [JBoss-user] Jboss and sapdb


> Hi all,
> 
> how can specify commit options for entity beans ??
> 
> --Hermann
> 
> PS : Forgive for the elementary question
> 
> 
> ___
> JBoss-user mailing list
> [EMAIL PROTECTED]
> http://lists.sourceforge.net/lists/listinfo/jboss-user


___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user

Re: [JBoss-user] Jboss and sapdb

[Samuel Franklyn]

I use JBoss with SAPDB they work quite well
however I have experience minor quirk.
Since SAPDB JDBC driver only supports
JDBC 2.0 and not its standard extension
I have to use Minerva wrapper.
Examples in EJB Spec and Java Blueprint for J2EE
shows that I must retrieve connection,
get UserTransaction context, update database and
then commit. However an insert or update
will not work with SAPDB and
they do not work with Sun JDBC-ODBC Driver either.
However if I get UserTransaction context,
and then get the connection they works.
I consider this to be JDBC driver bugs since
the standard way in the examples works with Oracle.

- Original Message -
From: "Kemp Randy-W18971" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, July 17, 2001 1:23 AM
Subject: [JBoss-user] Jboss and sapdb


> Is anyone using Jboss with the database sapdb at www.sapdb.org?  If so,
how
> do you find the combination?
>
> ___
> JBoss-user mailing list
> [EMAIL PROTECTED]
> http://lists.sourceforge.net/lists/listinfo/jboss-user


___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user

Re: [JBoss-user] ASP Model for J2EE?

[Samuel Franklyn]

I think each approach has its advantages and 
disadvantages.

  - Original Message - 
  From: 
  Jeff 
  Campbell 
  To: [EMAIL PROTECTED] 
  
  Sent: Monday, July 02, 2001 11:18 
PM
  Subject: [JBoss-user] ASP Model for 
  J2EE?
  
  I'm stumped...
   
  What is the best approach for using J2EE in an 
  Application Service Provider (ASP) scenario?
   
  Info:  I have a J2EE ear file that I deploy 
  on my JBOSS J2EE container.  I would like to have multiple 
  companies use this application, without sharing data.
   
  Here is a list of possibilities...  (some 
  may be completely WRONG)  what is the best approach?
   
  1. Give each company their own IP address, JBOSS 
  container, and Database.
 Advantages:
Best reliability and security. Since each 
company having their own IP address you 
could transfer the IP address to other machine in 
case of disaster.
 
Disadvantages:
Biggest resource spending so this should be done if 

your customer can be charged premium 
price.
 

  or 
   
  2. Have one IP address, one JBOSS container, 
  multiple Databases and have JBoss some how dynamically switch datasources. (I 
  have no idea how to do this) (This is the method that I would prefer, if it 
  were possible)
 Advantages:
Reliable and secure enough setup. Less resources 
needed 
than previous setup.
 
Disadvantages:
Programming complexity. To be able to implement 
this 
you must create a shared data source and custom 
security. 
In this shared data source you create customer table 
which contains each customer specific data source 
and 
relate to users table. You need someone with good 
experience 
in programming custom security. I think the best 
people that 
can do this is the main developers of JBoss like 
Scott Stark, 
Rickard Oberg, and friends.

  or
   
  3. Have one IP address, one JBOSS container, one 
  Database (but have to go through and add a column to each table, and 
  query specifying the company ID) (I would hate to have to do this 
  one).
Advantages:
This is the most efficient in terms of resources if 

your database is not to large. This set up is also 

very valuable when your customers need to interact 

with each other. The programming is not to 
complex.
 
Disadvantages:
Although the programming is not complex however 

the programming effort is large. You have to do a 

lot more typing :)

  Any other suggestions would be 
  HELPFUL!
   
  Thanks,
  Jeff Campbell
   

Re: [JBoss-user] JUnit swingui TestRunner and Class Loader

[Samuel Franklyn]

Uncheck Reload classes every run checkbox.
This is actually documented in the FAQ of JUnit

- Original Message -
From: "Richard Doust" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, July 02, 2001 10:51 PM
Subject: [JBoss-user] JUnit swingui TestRunner and Class Loader


> Hi.
> Using JUnit's junit.swingui.TestRunner to run client tests that attempt to
> test deployed EJBs. I always fail trying to narrow the object I get from
> looking up the bean's home because the class isn't found. If I use the
> junit.textui.TestRunner instead, calling it from main method of test case
> class, everything works fine. I'm sure it's related to class loader
issues.
> I'm using the same classpath to run both and it includes all of the code
> necessary to run the test as evidenced by the fact that one that runs with
> junit.textui.TestRunner actually works.
> Anyone know how I can get this to work from the Swingui version of the
test
> runner?
> Thanks in advance.
>
> Richard Doust
>
>
> ___
> JBoss-user mailing list
> [EMAIL PROTECTED]
> http://lists.sourceforge.net/lists/listinfo/jboss-user


___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user

Re: [JBoss-user] Minerva DataSource Error

[Samuel Franklyn]

 InitialContext jndiCntx = new InitialContext( );
 DataSource ds = (DataSource) jndiCntx.lookup("java:comp/env/OracleDB");
 return ds.getConnection( );

Change that into this

 InitialContext jndiCntx = new InitialContext( );
 DataSource ds = (DataSource) jndiCntx.lookup("java:/OracleDB");
 return ds.getConnection( );

- Original Message -
From: "De Closmadeuc, Etienne" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, June 15, 2001 3:03 PM
Subject: [JBoss-user] Minerva DataSource Error


___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user