[JBoss-user] [Security JAAS/JBoss] - Re: JBoss 3.2.5 - 4.0.0 migration, principal=null
Enabling trace gave me more information: [UsersRolesLoginModule] Bad password for username=null After playing around a bit, it appears that this is something to do with the redirect happening after the form based authentication succeeds. What I've found is that it works just fine _after_ you've logged in. What appears to happen is that the form-based login succeeds, then tomcat redirects to the original request. That request then fires off a servlet filter which finds it has a remoteUser, grabs the session, and makes a call to an EJB. That call to the EJB apparantly doesn't propagate the security context, as the username is null (as noted above). Also, on the next request, a NEW session is present in the filter and the call to the EJB succeeds. Subsequent to that, everything works just fine. I can't upload the EAR (for commercial reasons), but if I find the time I might create a stripped down version which demonstrates the problem. Shouldn't really be hard though, all you need is a webapp with form-based authentication and a servlet filter which calls a stateless session bean if it has a remoteUser. Set this up to use the other security realm and I would expect it to fail like above. The only thing I can find in the tomcat release notes for 5.0.28 which seems even remotely relevant is this: 30602: Subject is not available during the first call to the servlet which use the basic authentication (jfarcand) 29406: Made JAASRealm configurable as to whether it should use the context ClassLoader or the default ClassLoader by adding a useContextClassLoader boolean attribute. (yoavs) ... which doesn't really help me much. Do you have any further suggestions as to how I can debug this? Thanks, Daniel View the original post : http://www.jboss.org/index.html?module=bbop=viewtopicp=3849987#3849987 Reply to the post : http://www.jboss.org/index.html?module=bbop=postingmode=replyp=3849987 --- This SF.net email is sponsored by: IT Product Guide on ITManagersJournal Use IT products in your business? Tell us what you think of them. Give us Your Opinions, Get Free ThinkGeek Gift Certificates! Click to find out more http://productguide.itmanagersjournal.com/guidepromo.tmpl ___ JBoss-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/jboss-user
[JBoss-user] [Installation Configuration] - Re: What happened with logging from RC2 to JBoss 4 release?
This has something to do with the scoped classloader change in 4.0.0 -- if you use the standard configuration instead of default it works again. I'm not sure why the scoped classloading change causes in-webapp jars not to be found though. Would love to know. View the original post : http://www.jboss.org/index.html?module=bbop=viewtopicp=3849840#3849840 Reply to the post : http://www.jboss.org/index.html?module=bbop=postingmode=replyp=3849840 --- This SF.net email is sponsored by: IT Product Guide on ITManagersJournal Use IT products in your business? Tell us what you think of them. Give us Your Opinions, Get Free ThinkGeek Gift Certificates! Click to find out more http://productguide.itmanagersjournal.com/guidepromo.tmpl ___ JBoss-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/jboss-user
[JBoss-user] [Security JAAS/JBoss] - JBoss 3.2.5 - 4.0.0 migration, principal=null
Hi, I'm attempting to migrate from JBoss 3.2.5 to 4.0.0, and I'm having a problem with authentication. I'm running my application in the standard configuration to get backwards compatibility. I have downloaded the tomcat50 roles patch. I have a webapp inside an ear which is using form-based authentication. JAAS is set up to use the basic users/roles properties files. When the webapp attempts to call the EJBs, I get a principal=null exception. I know that the principal is successfully defined in the webapp, as the login succeeds and I have a servlet filter which prints the principal's name before failing to call the EJB. This worked fine in 3.2.5. Could you give me some suggestions? How would I go about debugging this kind of thing? Thanks, Daniel View the original post : http://www.jboss.org/index.html?module=bbop=viewtopicp=3849847#3849847 Reply to the post : http://www.jboss.org/index.html?module=bbop=postingmode=replyp=3849847 --- This SF.net email is sponsored by: IT Product Guide on ITManagersJournal Use IT products in your business? Tell us what you think of them. Give us Your Opinions, Get Free ThinkGeek Gift Certificates! Click to find out more http://productguide.itmanagersjournal.com/guidepromo.tmpl ___ JBoss-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/jboss-user
[JBoss-user] [Installation Configuration] - Hibernate stops working when app is redeployed
Hi, We have a problem with Hibernate on JBoss 3.2.3. When we redeploy our application, Hibernate stops working. More specifically, we get this error when trying to access Hibernate objects: net.sf.hibernate.MappingException: No persister for: persistent object class To get it working, we have to restart JBoss. This is obviously a pain in the neck. Does anyone have any ideas what could be causing this problem? Any help would be gratefully received! View the original post : http://www.jboss.org/index.html?module=bbop=viewtopicp=3835693#3835693 Reply to the post : http://www.jboss.org/index.html?module=bbop=postingmode=replyp=3835693 --- This SF.Net email is sponsored by: Oracle 10g Get certified on the hottest thing ever to hit the market... Oracle 10g. Take an Oracle 10g class now, and we'll give you the exam FREE. http://ads.osdn.com/?ad_id=3149alloc_id=8166op=click ___ JBoss-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/jboss-user
[JBoss-user] [Installation Configuration] - JBoss doesn't start up when debugging is turned on
Hi, I'm trying to run JBoss in debug mode. It seems to work fine - JBoss starts up and deploys everything. Then just before jboss-service.xml would have finished deploying, the VM just crashes/stops/exits and a new one starts up. And JBoss goes through the whole startup procedure again. And again. And again... The last line displayed before the VM restarts is this: [URLDeploymentScanner] Started jboss.deployment:type=DeploymentScanner,flavor=URL The debug parameters I use are these: JAVA_OPTS=-server -Xdebug -Xnoagent -Djava.compiler=NONE -Xrunjdwp:transport=dt_shmem,server=y,suspend=n,address=javadebug %JAVA_OPTS% The JVM I use is 1.4.2_03, running on Windows. Anyone have any idea what might be wrong? Thanks, Daniel View the original post : http://www.jboss.org/index.html?module=bbop=viewtopicp=3834245#3834245 Reply to the post : http://www.jboss.org/index.html?module=bbop=postingmode=replyp=3834245 --- This SF.Net email is sponsored by Sleepycat Software Learn developer strategies Cisco, Motorola, Ericsson Lucent use to deliver higher performing products faster, at low TCO. http://www.sleepycat.com/telcomwpreg.php?From=osdnemail3 ___ JBoss-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/jboss-user
