Re: [JBoss-user] Authentication Problem

[Scott M Stark]

The problem is the invalid dsJiniName module-option name in
the RestaurantSecurityRealm config. This should be dsJndiName
which defaults to java:/DefaultDS and hence hypersonic.
--

Scott Stark
Chief Technology Officer
JBoss Group, LLC

Jack Lauman wrote:

Scott:

Sorry, forgot the files.

Thanks again,

Jack

Jack Lauman wrote:

...

http://www.jboss.org/j2ee/dtd/security_config.dtd";>

   
   
  
 
java:/RestaurantDS

   SELECT Password FROM User WHERE UserID = ?


   SELECT Role, 'Roles' FROM User WHERE UserID = ?

MD5
HEX
 
  
   


---
This SF.net email is sponsored by: SF.net Giveback Program.
Does SourceForge.net help you be more productive?  Does it
help you create better code?  SHARE THE LOVE, and help us help
YOU!  Click Here: http://sourceforge.net/donate/
___
JBoss-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/jboss-user

Re: [JBoss-user] Authentication Problem

[Jack Lauman]

Scott:

Sorry, forgot the files.

Thanks again,

Jack

Jack Lauman wrote:
> 
> I am trying to move an app from 3.0.7 to 3.2.3RC1 and am getting the
> following error.  Apparently it's trying to connect to hsqldb
> instead of the mysql db named java:/RestaurantDS.  The app works
> correctly under 3.0.7.
> 
> I would appreciate any help in resolving this.  I have included a short
> stack trace, login-config.xml and restaurant-ds.xml.
> 
> Thanks,
> 
> Jack
> 
> <--snip-->
> [org.jboss.system.server.Server] JBoss (MX MicroKernel) [3.2.3RC1
> (build: CVSTag=JBoss_3_2_3_RC1 date=200311101720)] Started in
> 1m:35s:493ms
> INFO  [STDOUT] 95508 [main] INFO org.jboss.system.server.Server  - JBoss
> (MX MicroKernel) [3.2.3RC1 (build: CVSTag=JBoss_3_2_3_RC1
> date=200311101720)] Started in 1m:35s:493ms
> DEBUG [org.apache.tomcat.util.threads.ThreadPool] Getting new thread
> data
> INFO  [STDOUT] 399044 [TP-Processor3] DEBUG
> org.apache.tomcat.util.threads.ThreadPool  - Getting new thread data
> INFO  [org.jboss.security.plugins.JaasSecurityManagerService] Created
> [EMAIL PROTECTED]
> INFO  [STDOUT] 399210 [TP-Processor4] INFO
> org.jboss.security.plugins.JaasSecurityManagerService  - Created
> [EMAIL PROTECTED]
> INFO  [org.jboss.security.plugins.JaasSecurityManagerService]
> setCachePolicy, [EMAIL PROTECTED]
> INFO  [STDOUT] 399212 [TP-Processor4] INFO
> org.jboss.security.plugins.JaasSecurityManagerService  - setCachePolicy,
> [EMAIL PROTECTED]
> INFO  [org.jboss.security.plugins.JaasSecurityManagerService] Added
> RestaurantSecurityRealm,
> [EMAIL PROTECTED] to map
> INFO  [STDOUT] 399213 [TP-Processor4] INFO
> org.jboss.security.plugins.JaasSecurityManagerService  - Added
> RestaurantSecurityRealm,
> [EMAIL PROTECTED] to map
> ERROR [org.jboss.security.auth.spi.DatabaseServerLoginModule] Query
> failed
> java.sql.SQLException: Table not found: USER in statement [SELECT
> Password FROM User WHERE UserID = 'jlauman']
> at org.hsqldb.Trace.getError(Unknown Source)
> at org.hsqldb.jdbcResultSet.(Unknown Source)
> at org.hsqldb.jdbcConnection.executeStandalone(Unknown Source)
> at org.hsqldb.jdbcConnection.execute(Unknown Source)
> at org.hsqldb.jdbcStatement.fetchResult(Unknown Source)
> at org.hsqldb.jdbcStatement.executeQuery(Unknown Source)
> at org.hsqldb.jdbcPreparedStatement.executeQuery(Unknown Source)
> at
> org.jboss.resource.adapter.jdbc.WrappedPreparedStatement.executeQuery(WrappedPreparedStatement.java:304)
> at
> org.jboss.security.auth.spi.DatabaseServerLoginModule.getUsersPassword(DatabaseServerLoginModule.java:100)
> at
> org.jboss.security.auth.spi.UsernamePasswordLoginModule.login(UsernamePasswordLoginModule.java:150)
> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
> at
> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
> at
> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
> <--snip-->
> 
> <-- restaurant-ds.xml -->
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
>   
> RestaurantDS
> 
> jdbc:mysql://localhost:3306/restaurants
> com.mysql.jdbc.Driver
> 
> 
> 5
> 20
> 
> 
> 
> 
> RestaurantDbRealm
> 
> 
> 
> 
> 
>   
> 
> 
> 
> <-- login-config.xml -->
> 
> 
>"-//JBoss//DTD JBOSS Security Config 3.0//EN"
>   "http://www.jboss.org/j2ee/dtd/security_config.dtd";>
> 
> 
> 
> 
>
>"org.jboss.security.auth.spi.DatabaseServerLoginModule"
>  flag = "required">
>   "dsJiniName">java:/RestaurantDS
>  
> SELECT Password FROM User WHERE UserID = ?
>  
>  
> SELECT Role, 'Roles' FROM User WHERE UserID = ?
>  
>  MD5
>  HEX
>   
>
> 
> 
> 
> 
>
> flag = "required">
>   
>
> 
> 
> 
> 
>
> flag = "required">
>   "unauthenticatedIdentity">guest
>   "sm.objectname">jboss.mq:service=StateManager
>   
>
> 
> 
> 
> 
>
>"org.jboss.resource.security.ConfiguredIdentityLoginModule"
>  flag = "required">
>  sa
>  sa
>  
>   "managedConnectionFactoryName">jboss.jca:service=LocalTxCM,name=DefaultDS
>   
>
> 
> 
> 
> 
>
>"org.jboss.resource.security.ConfiguredIdentityLoginModule"
>  flag = "required">
>  user
>  user
>  password
>   "managedConnectionFactoryName">jboss.jca:service=LocalTxCM,name=RestaurantDS
>   
>
> 
> 
> 
>
>"org.jboss.resource.security.ConfiguredIdentityLoginModule"
>  flag = "required">
>  sysdba

Re: [JBoss-user] Authentication Problem

[Jack Lauman]

Scott:

I have attached both the boot.log and server.log as seperate
zip files as requested.

Thanks,

Jack

Jack Lauman wrote:
> 
> I am trying to move an app from 3.0.7 to 3.2.3RC1 and am getting the
> following error.  Apparently it's trying to connect to hsqldb
> instead of the mysql db named java:/RestaurantDS.  The app works
> correctly under 3.0.7.
> 
> I would appreciate any help in resolving this.  I have included a short
> stack trace, login-config.xml and restaurant-ds.xml.
> 
> Thanks,
> 
> Jack
> 
> <--snip-->
> [org.jboss.system.server.Server] JBoss (MX MicroKernel) [3.2.3RC1
> (build: CVSTag=JBoss_3_2_3_RC1 date=200311101720)] Started in
> 1m:35s:493ms
> INFO  [STDOUT] 95508 [main] INFO org.jboss.system.server.Server  - JBoss
> (MX MicroKernel) [3.2.3RC1 (build: CVSTag=JBoss_3_2_3_RC1
> date=200311101720)] Started in 1m:35s:493ms
> DEBUG [org.apache.tomcat.util.threads.ThreadPool] Getting new thread
> data
> INFO  [STDOUT] 399044 [TP-Processor3] DEBUG
> org.apache.tomcat.util.threads.ThreadPool  - Getting new thread data
> INFO  [org.jboss.security.plugins.JaasSecurityManagerService] Created
> [EMAIL PROTECTED]
> INFO  [STDOUT] 399210 [TP-Processor4] INFO
> org.jboss.security.plugins.JaasSecurityManagerService  - Created
> [EMAIL PROTECTED]
> INFO  [org.jboss.security.plugins.JaasSecurityManagerService]
> setCachePolicy, [EMAIL PROTECTED]
> INFO  [STDOUT] 399212 [TP-Processor4] INFO
> org.jboss.security.plugins.JaasSecurityManagerService  - setCachePolicy,
> [EMAIL PROTECTED]
> INFO  [org.jboss.security.plugins.JaasSecurityManagerService] Added
> RestaurantSecurityRealm,
> [EMAIL PROTECTED] to map
> INFO  [STDOUT] 399213 [TP-Processor4] INFO
> org.jboss.security.plugins.JaasSecurityManagerService  - Added
> RestaurantSecurityRealm,
> [EMAIL PROTECTED] to map
> ERROR [org.jboss.security.auth.spi.DatabaseServerLoginModule] Query
> failed
> java.sql.SQLException: Table not found: USER in statement [SELECT
> Password FROM User WHERE UserID = 'jlauman']
> at org.hsqldb.Trace.getError(Unknown Source)
> at org.hsqldb.jdbcResultSet.(Unknown Source)
> at org.hsqldb.jdbcConnection.executeStandalone(Unknown Source)
> at org.hsqldb.jdbcConnection.execute(Unknown Source)
> at org.hsqldb.jdbcStatement.fetchResult(Unknown Source)
> at org.hsqldb.jdbcStatement.executeQuery(Unknown Source)
> at org.hsqldb.jdbcPreparedStatement.executeQuery(Unknown Source)
> at
> org.jboss.resource.adapter.jdbc.WrappedPreparedStatement.executeQuery(WrappedPreparedStatement.java:304)
> at
> org.jboss.security.auth.spi.DatabaseServerLoginModule.getUsersPassword(DatabaseServerLoginModule.java:100)
> at
> org.jboss.security.auth.spi.UsernamePasswordLoginModule.login(UsernamePasswordLoginModule.java:150)
> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
> at
> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
> at
> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
> <--snip-->
> 
> <-- restaurant-ds.xml -->
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
>   
> RestaurantDS
> 
> jdbc:mysql://localhost:3306/restaurants
> com.mysql.jdbc.Driver
> 
> 
> 5
> 20
> 
> 
> 
> 
> RestaurantDbRealm
> 
> 
> 
> 
> 
>   
> 
> 
> 
> <-- login-config.xml -->
> 
> 
>"-//JBoss//DTD JBOSS Security Config 3.0//EN"
>   "http://www.jboss.org/j2ee/dtd/security_config.dtd";>
> 
> 
> 
> 
>
>"org.jboss.security.auth.spi.DatabaseServerLoginModule"
>  flag = "required">
>   "dsJiniName">java:/RestaurantDS
>  
> SELECT Password FROM User WHERE UserID = ?
>  
>  
> SELECT Role, 'Roles' FROM User WHERE UserID = ?
>  
>  MD5
>  HEX
>   
>
> 
> 
> 
> 
>
> flag = "required">
>   
>
> 
> 
> 
> 
>
> flag = "required">
>   "unauthenticatedIdentity">guest
>   "sm.objectname">jboss.mq:service=StateManager
>   
>
> 
> 
> 
> 
>
>"org.jboss.resource.security.ConfiguredIdentityLoginModule"
>  flag = "required">
>  sa
>  sa
>  
>   "managedConnectionFactoryName">jboss.jca:service=LocalTxCM,name=DefaultDS
>   
>
> 
> 
> 
> 
>
>"org.jboss.resource.security.ConfiguredIdentityLoginModule"
>  flag = "required">
>  user
>  user
>  password
>   "managedConnectionFactoryName">jboss.jca:service=LocalTxCM,name=RestaurantDS
>   
>
> 
> 
> 
>
>"org.jboss.resource.security.ConfiguredIdentityLoginModule"
>

Re: [JBoss-user] Authentication Problem

[Scott M Stark]

The query is going against the DefaultDS, not the RestaurantDS. Show
the full stack trace.
--

Scott Stark
Chief Technology Officer
JBoss Group, LLC

Jack Lauman wrote:

I am trying to move an app from 3.0.7 to 3.2.3RC1 and am getting the
following error.  Apparently it's trying to connect to hsqldb
instead of the mysql db named java:/RestaurantDS.  The app works
correctly under 3.0.7.
I would appreciate any help in resolving this.  I have included a short
stack trace, login-config.xml and restaurant-ds.xml.
Thanks,

Jack

<--snip-->
[org.jboss.system.server.Server] JBoss (MX MicroKernel) [3.2.3RC1
(build: CVSTag=JBoss_3_2_3_RC1 date=200311101720)] Started in
1m:35s:493ms
INFO  [STDOUT] 95508 [main] INFO org.jboss.system.server.Server  - JBoss
(MX MicroKernel) [3.2.3RC1 (build: CVSTag=JBoss_3_2_3_RC1
date=200311101720)] Started in 1m:35s:493ms
DEBUG [org.apache.tomcat.util.threads.ThreadPool] Getting new thread
data
INFO  [STDOUT] 399044 [TP-Processor3] DEBUG
org.apache.tomcat.util.threads.ThreadPool  - Getting new thread data
INFO  [org.jboss.security.plugins.JaasSecurityManagerService] Created
[EMAIL PROTECTED]
INFO  [STDOUT] 399210 [TP-Processor4] INFO
org.jboss.security.plugins.JaasSecurityManagerService  - Created
[EMAIL PROTECTED]
INFO  [org.jboss.security.plugins.JaasSecurityManagerService]
setCachePolicy, [EMAIL PROTECTED]
INFO  [STDOUT] 399212 [TP-Processor4] INFO
org.jboss.security.plugins.JaasSecurityManagerService  - setCachePolicy,
[EMAIL PROTECTED]
INFO  [org.jboss.security.plugins.JaasSecurityManagerService] Added
RestaurantSecurityRealm,
[EMAIL PROTECTED] to map
INFO  [STDOUT] 399213 [TP-Processor4] INFO
org.jboss.security.plugins.JaasSecurityManagerService  - Added
RestaurantSecurityRealm,
[EMAIL PROTECTED] to map
ERROR [org.jboss.security.auth.spi.DatabaseServerLoginModule] Query
failed
java.sql.SQLException: Table not found: USER in statement [SELECT
Password FROM User WHERE UserID = 'jlauman']
at org.hsqldb.Trace.getError(Unknown Source)
at org.hsqldb.jdbcResultSet.(Unknown Source)
at org.hsqldb.jdbcConnection.executeStandalone(Unknown Source)
at org.hsqldb.jdbcConnection.execute(Unknown Source)
at org.hsqldb.jdbcStatement.fetchResult(Unknown Source)
at org.hsqldb.jdbcStatement.executeQuery(Unknown Source)
at org.hsqldb.jdbcPreparedStatement.executeQuery(Unknown Source)
at
org.jboss.resource.adapter.jdbc.WrappedPreparedStatement.executeQuery(WrappedPreparedStatement.java:304)
at
org.jboss.security.auth.spi.DatabaseServerLoginModule.getUsersPassword(DatabaseServerLoginModule.java:100)
at
org.jboss.security.auth.spi.UsernamePasswordLoginModule.login(UsernamePasswordLoginModule.java:150)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
<--snip-->


---
This SF.net email is sponsored by: SF.net Giveback Program.
Does SourceForge.net help you be more productive?  Does it
help you create better code?  SHARE THE LOVE, and help us help
YOU!  Click Here: http://sourceforge.net/donate/
___
JBoss-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/jboss-user

[JBoss-user] Authentication Problem

[Jack Lauman]

I am trying to move an app from 3.0.7 to 3.2.3RC1 and am getting the
following error.  Apparently it's trying to connect to hsqldb
instead of the mysql db named java:/RestaurantDS.  The app works
correctly under 3.0.7.

I would appreciate any help in resolving this.  I have included a short
stack trace, login-config.xml and restaurant-ds.xml.

Thanks,

Jack


<--snip-->
[org.jboss.system.server.Server] JBoss (MX MicroKernel) [3.2.3RC1
(build: CVSTag=JBoss_3_2_3_RC1 date=200311101720)] Started in
1m:35s:493ms
INFO  [STDOUT] 95508 [main] INFO org.jboss.system.server.Server  - JBoss
(MX MicroKernel) [3.2.3RC1 (build: CVSTag=JBoss_3_2_3_RC1
date=200311101720)] Started in 1m:35s:493ms
DEBUG [org.apache.tomcat.util.threads.ThreadPool] Getting new thread
data
INFO  [STDOUT] 399044 [TP-Processor3] DEBUG
org.apache.tomcat.util.threads.ThreadPool  - Getting new thread data
INFO  [org.jboss.security.plugins.JaasSecurityManagerService] Created
[EMAIL PROTECTED]
INFO  [STDOUT] 399210 [TP-Processor4] INFO
org.jboss.security.plugins.JaasSecurityManagerService  - Created
[EMAIL PROTECTED]
INFO  [org.jboss.security.plugins.JaasSecurityManagerService]
setCachePolicy, [EMAIL PROTECTED]
INFO  [STDOUT] 399212 [TP-Processor4] INFO
org.jboss.security.plugins.JaasSecurityManagerService  - setCachePolicy,
[EMAIL PROTECTED]
INFO  [org.jboss.security.plugins.JaasSecurityManagerService] Added
RestaurantSecurityRealm,
[EMAIL PROTECTED] to map
INFO  [STDOUT] 399213 [TP-Processor4] INFO
org.jboss.security.plugins.JaasSecurityManagerService  - Added
RestaurantSecurityRealm,
[EMAIL PROTECTED] to map
ERROR [org.jboss.security.auth.spi.DatabaseServerLoginModule] Query
failed
java.sql.SQLException: Table not found: USER in statement [SELECT
Password FROM User WHERE UserID = 'jlauman']
at org.hsqldb.Trace.getError(Unknown Source)
at org.hsqldb.jdbcResultSet.(Unknown Source)
at org.hsqldb.jdbcConnection.executeStandalone(Unknown Source)
at org.hsqldb.jdbcConnection.execute(Unknown Source)
at org.hsqldb.jdbcStatement.fetchResult(Unknown Source)
at org.hsqldb.jdbcStatement.executeQuery(Unknown Source)
at org.hsqldb.jdbcPreparedStatement.executeQuery(Unknown Source)
at
org.jboss.resource.adapter.jdbc.WrappedPreparedStatement.executeQuery(WrappedPreparedStatement.java:304)
at
org.jboss.security.auth.spi.DatabaseServerLoginModule.getUsersPassword(DatabaseServerLoginModule.java:100)
at
org.jboss.security.auth.spi.UsernamePasswordLoginModule.login(UsernamePasswordLoginModule.java:150)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
<--snip-->



<-- restaurant-ds.xml -->

















  
RestaurantDS
   
jdbc:mysql://localhost:3306/restaurants
com.mysql.jdbc.Driver


5
20




RestaurantDbRealm





  






<-- login-config.xml -->


http://www.jboss.org/j2ee/dtd/security_config.dtd";>





   
  
 java:/RestaurantDS
 
SELECT Password FROM User WHERE UserID = ?
 
 
SELECT Role, 'Roles' FROM User WHERE UserID = ?
 
 MD5
 HEX
  
   




   
  
  
   




   
  
 guest
 jboss.mq:service=StateManager
  
   




   
  
 sa
 sa
 
 jboss.jca:service=LocalTxCM,name=DefaultDS
  
   




   
  
 user
 user
 password
 jboss.jca:service=LocalTxCM,name=RestaurantDS
  
   



   
  
 sysdba
 sysdba
 masterkey
 jboss.jca:service=XaTxCM,name=FirebirdDS
  
   



   
  
 guest
 guest
 guest
 jboss.jca:service=TxCM,name=JmsXA
  
   




   
  
   




   
  
   




   
   
  
   






---
This SF.net email is sponsored by: SF.net Giveback Program.
Does SourceForge.net help you be more productive?  Does it
help you create better code?  SHARE THE LOVE, and help us help
YOU!  Click Here: http://sourceforge.net/donate/
___
JBoss-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/jboss-user

[JBoss-user] Authentication Problem - LDAP & JBoss

[Dhiraj Ramakrishnan]

Hi all,
I am using JBoss-3.0.2 and have configured the login-config.xml to work with
LDAP Server. My login-config.xml looks like this,




com.sun.jndi.ldap.LdapCtxFactory
ldap://hyd.nimaya.com:389/

simple
cn=WLSPrincipal
,cn=users,dc=hyd,dc=nimaya,dc=com


true




My application uses a JTree to help ease the navigation through the whole
application.

The problem i am facing is that , it is authenticating the users present in
the LDAP Server. But when it is trying to initialize the applet it is asking
once again for the username and password. there even if i give junk values
it accepts ... even if i don't give any values it makes no difference. I
have to click on that login pop up at least 10 times , then it allows me to
enter the application, else the left side JTree Applet doesn't show up at
all.

One possible explanation that i got is that it is trying to get all the jars
needed by the applet from the server , hence is trying to authenticate each
time. Is there any way to avoid this??

I hope i have been clear in explaining my problem to you. Please let me know
- If there is some other configuration i need to do.
- My Login-config.xml contains only the above code is there something else i
need to do.

You can also reach me at [EMAIL PROTECTED]

Thank You
Dhiraj Ramakrishnan



---
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
___
JBoss-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/jboss-user

[JBoss-user] Authentication problem when using JMS testQueue

[jboss-user]

Hi,

I am trying to connect to the testQueue JMS queue in JBoss. I have read
the forums about jdk versions etc, but please read on.

I can connect both local and remotely to JBoss-3.0.3RC1 queue using both
jdk 1.4.0_01 and 1.4.0_02 on client and 1.4.0_01 on server.
I can connect locally to JBoss-3.2.0beta queue, but not remotely even
though server and client both uses 1.4.0_02. In this situation I get the
normal cannot authenticate user exception...

Is the jdk version the only culprit here or must I configure something?

P.S. Sorry if this might be in mailing list archives, I tried searching
but it seems to be inaccessible on Sourceforge...

-- 
Alwyn Schoeman
SMART Money Inc.

"The clock on the wall keeps moving, time stands still...
 No matter how the dice may fall, someone else always gets to call the number..."



msg21388/pgp0.pgp
Description: PGP signature

Re: [JBoss-user] Authentication Problem...

[Scott M Stark]

Your mixing defaults. The "other" entry is the default JAAS login config
entry. There is no default security-domain setting and the security-domain
setting does not have to point to a security manager implementation that
has anything to do with JAAS.

- Original Message - 
From: "David Green" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, June 27, 2001 11:30 AM
Subject: Re: [JBoss-user] Authentication Problem...


> I figured out how to fix it.
> 
> I was rebuilding contrib/tomcat from Branch_2_4 and putting the
> tomcat-service.jar in my 2.4.0 lib/ext directory - it seems it's not
> compatible with the release of 2.4.0 - it's only compatible with the cvs
> version of jboss. When I rebuilt jboss completely, then remade the
> jboss/tomcat bundle - it worked fine.
> 
> It seems that java:/jaas/other is not the default. auth.conf says:
> 
> "// The default server login module
> other {"
> 
> It seems that NullSecurityManager is actually the default... And the
> NullSecurityManager seems to allow any username/password combination as
> being authorized for any role. Might want to change the default to
> actually be "other", or change auth.conf to say that NullSecurityManager
> is the default. i.e. If i have no jboss-web.xml file in my .war, it seems to
> use NullSecurityManager.
> 
> David Green
> 



___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user

Re: [JBoss-user] Authentication Problem...

[David Green]

I figured out how to fix it.

I was rebuilding contrib/tomcat from Branch_2_4 and putting the
tomcat-service.jar in my 2.4.0 lib/ext directory - it seems it's not
compatible with the release of 2.4.0 - it's only compatible with the cvs
version of jboss. When I rebuilt jboss completely, then remade the
jboss/tomcat bundle - it worked fine.

It seems that java:/jaas/other is not the default. auth.conf says:

"// The default server login module
other {"

It seems that NullSecurityManager is actually the default... And the
NullSecurityManager seems to allow any username/password combination as
being authorized for any role. Might want to change the default to
actually be "other", or change auth.conf to say that NullSecurityManager
is the default. i.e. If i have no jboss-web.xml file in my .war, it seems to
use NullSecurityManager.

David Green

On Wed, 27 Jun 2001, Scott M Stark wrote:

> Ok, so your web.xml looked the same as the one I showed which works
> and yours doesn't?
>
> - Original Message -
> From: "David Green" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: Wednesday, June 27, 2001 6:34 AM
> Subject: Re: [JBoss-user] Authentication Problem...
>
>
> >
> > I posted my web.xml in which I specified 'propertyAdmin' as the
> >  - you told me that i needed a jboss-web.xml which specified a
> >  - so I posted my new jboss-web.xml along with a
> > statement that I changed all instances of 'propertyAdmin' to 'guest' since
> > I was using java:/jaas/simple. Since my old web.xml was quoted, I didn't
> > want to paste the entire new one as well, since the role-name was the only
> > thing that changed.
> >
> > Thanks,
> >
> > David Green
> >
>
>
>
> ___
> JBoss-user mailing list
> [EMAIL PROTECTED]
> http://lists.sourceforge.net/lists/listinfo/jboss-user
>


___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user

Re: [JBoss-user] Authentication Problem...

[Scott M Stark]

It works fine for me using the Rel_2_4_0_6 beta along with the latest 
tomcat-service.jar
from cvs. The fix in cvs has not been released in the binary bnudle yet so are you
building the bundle from cvs?

Browsing http://localhost:8080/propertyeditor/index.jsp and specifying green/green
produces:
Welcome to the Property Editor! 
This page has been accessed 0 times! 

- Original Message - 
From: "David Green" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, June 27, 2001 7:17 AM
Subject: Re: [JBoss-user] Authentication Problem...


> I am using nearly the exact same web.xml you have here... Doing a fresh
> install of JBoss v2.4.0 and v2.2.2, both bundled with tomcat, changing
> _nothing_, and deploying this .war causes that NullPointerException that
> was already fixed. But it seems to me that the NullPointerException
> shouldn't be occuring at all, since the CVS comment was that a NPE can
> occur when no security-domain is specified, and I'm specifying one.
> 
> Can anyone get this .war to deploy and be accessed with green/green, or
> know what I'm doing wrong? It's very small, I'm attaching it to the msg.
> 
> Thanks,
> 
> David Green
> 



___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user

Re: [JBoss-user] Authentication Problem...

[Scott M Stark]

Ok, so your web.xml looked the same as the one I showed which works
and yours doesn't?

- Original Message - 
From: "David Green" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, June 27, 2001 6:34 AM
Subject: Re: [JBoss-user] Authentication Problem...


> 
> I posted my web.xml in which I specified 'propertyAdmin' as the
>  - you told me that i needed a jboss-web.xml which specified a
>  - so I posted my new jboss-web.xml along with a
> statement that I changed all instances of 'propertyAdmin' to 'guest' since
> I was using java:/jaas/simple. Since my old web.xml was quoted, I didn't
> want to paste the entire new one as well, since the role-name was the only
> thing that changed.
> 
> Thanks,
> 
> David Green
> 



___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user

Re: [JBoss-user] Authentication Problem...

[David Green]

I am using nearly the exact same web.xml you have here... Doing a fresh
install of JBoss v2.4.0 and v2.2.2, both bundled with tomcat, changing
_nothing_, and deploying this .war causes that NullPointerException that
was already fixed. But it seems to me that the NullPointerException
shouldn't be occuring at all, since the CVS comment was that a NPE can
occur when no security-domain is specified, and I'm specifying one.

Can anyone get this .war to deploy and be accessed with green/green, or
know what I'm doing wrong? It's very small, I'm attaching it to the msg.

Thanks,

David Green

On Wed, 27 Jun 2001, David Green wrote:

>
> I posted my web.xml in which I specified 'propertyAdmin' as the
>  - you told me that i needed a jboss-web.xml which specified a
>  - so I posted my new jboss-web.xml along with a
> statement that I changed all instances of 'propertyAdmin' to 'guest' since
> I was using java:/jaas/simple. Since my old web.xml was quoted, I didn't
> want to paste the entire new one as well, since the role-name was the only
> thing that changed.
>
> Thanks,
>
> David Green
>
> On Wed, 27 Jun 2001, Scott M Stark wrote:
>
> > I don't understand what you mean by propertyAdmin being changed to 'guest'.
> > You have to change the web-app/seccurity-constraint/auth-constraint/role-name
> > to guest to allow green/null and green/green. To allow only green/green the
> > role-name would have to be user. Both scenarios work for me. Here is the
> > correct web.xml for that would only allow green/green(or any username/password
> > that are equal):
> >
> > web 2138>cat WEB-INF/web.xml
> > 
> >  > PUBLIC "-//Sun Microsystems, Inc.//DTD Web Application 2.2//EN"
> > "http://java.sun.com/j2ee/dtds/web-app_2_2.dtd";>
> >
> > 
> > 
> > 
> > index
> > /index.jsp
> > 
> >
> > 
> > 
> > 
> > Restricted
> > Declarative security tests
> > /*
> > GET
> > POST
> >     
> >     
> > guest
> > 
> > 
> >
> > 
> > BASIC
> > JBossTest Servlets
> > 
> >
> > 
> >
> > - Original Message -
> > From: "David Green" <[EMAIL PROTECTED]>
> > To: <[EMAIL PROTECTED]>
> > Sent: Tuesday, June 26, 2001 9:36 PM
> > Subject: Re: [JBoss-user] Authentication Problem...
> >
> >
> > > I'm having no luck with this :(
> > >
> > > Here's what I have now:
> > >
> > > WEB-INF/jboss-web.xml:
> > > --
> > > 
> > >   java:/jaas/simple
> > > 
> > > --
> > >
> > > WEB-INF/web.xml:
> > >   Changed all instances of propertyAdmin to "guest", since that's what
> > >   'simple' returns if a user is authenticated.
> > >
> > > Simple is indeed set up in conf/tomcat/auth.conf and in
> > > conf/default/auth.conf... it's marked as 'required' and it's not commented
> > > out.
> > >
> > > i try logging into the page with green/green or green/(nopassword) and get
> > > rejected.
> > >
> > > Redeployed the file, restarted the server, banged on the computer with a
> > > large hammer... nothing seems to work... :(
> > >
> > > David Green
> > >
> >
> >
> >
> > ___
> > JBoss-user mailing list
> > [EMAIL PROTECTED]
> > http://lists.sourceforge.net/lists/listinfo/jboss-user
> >
>
>
> ___
> JBoss-user mailing list
> [EMAIL PROTECTED]
> http://lists.sourceforge.net/lists/listinfo/jboss-user
>

 propertyeditor.war

Re: [JBoss-user] Authentication Problem...

[David Green]

I posted my web.xml in which I specified 'propertyAdmin' as the
 - you told me that i needed a jboss-web.xml which specified a
 - so I posted my new jboss-web.xml along with a
statement that I changed all instances of 'propertyAdmin' to 'guest' since
I was using java:/jaas/simple. Since my old web.xml was quoted, I didn't
want to paste the entire new one as well, since the role-name was the only
thing that changed.

Thanks,

David Green

On Wed, 27 Jun 2001, Scott M Stark wrote:

> I don't understand what you mean by propertyAdmin being changed to 'guest'.
> You have to change the web-app/seccurity-constraint/auth-constraint/role-name
> to guest to allow green/null and green/green. To allow only green/green the
> role-name would have to be user. Both scenarios work for me. Here is the
> correct web.xml for that would only allow green/green(or any username/password
> that are equal):
>
> web 2138>cat WEB-INF/web.xml
> 
>  PUBLIC "-//Sun Microsystems, Inc.//DTD Web Application 2.2//EN"
> "http://java.sun.com/j2ee/dtds/web-app_2_2.dtd";>
>
> 
> 
> 
> index
> /index.jsp
> 
>
> 
> 
> 
> Restricted
> Declarative security tests
> /*
> GET
> POST
> 
> 
> guest
> 
> 
>
> 
> BASIC
> JBossTest Servlets
> 
>
> 
>
> - Original Message -
> From: "David Green" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: Tuesday, June 26, 2001 9:36 PM
> Subject: Re: [JBoss-user] Authentication Problem...
>
>
> > I'm having no luck with this :(
> >
> > Here's what I have now:
> >
> > WEB-INF/jboss-web.xml:
> > --
> > 
> >   java:/jaas/simple
> > 
> > --
> >
> > WEB-INF/web.xml:
> >   Changed all instances of propertyAdmin to "guest", since that's what
> >   'simple' returns if a user is authenticated.
> >
> > Simple is indeed set up in conf/tomcat/auth.conf and in
> > conf/default/auth.conf... it's marked as 'required' and it's not commented
> > out.
> >
> > i try logging into the page with green/green or green/(nopassword) and get
> > rejected.
> >
> > Redeployed the file, restarted the server, banged on the computer with a
> > large hammer... nothing seems to work... :(
> >
> > David Green
> >
>
>
>
> ___
> JBoss-user mailing list
> [EMAIL PROTECTED]
> http://lists.sourceforge.net/lists/listinfo/jboss-user
>


___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user

Re: [JBoss-user] Authentication Problem...

[Scott M Stark]

I don't understand what you mean by propertyAdmin being changed to 'guest'.
You have to change the web-app/seccurity-constraint/auth-constraint/role-name
to guest to allow green/null and green/green. To allow only green/green the
role-name would have to be user. Both scenarios work for me. Here is the
correct web.xml for that would only allow green/green(or any username/password
that are equal):

web 2138>cat WEB-INF/web.xml

http://java.sun.com/j2ee/dtds/web-app_2_2.dtd";>




index
/index.jsp





Restricted
Declarative security tests
/*
GET
POST


guest




BASIC
JBossTest Servlets




- Original Message - 
From: "David Green" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, June 26, 2001 9:36 PM
Subject: Re: [JBoss-user] Authentication Problem...


> I'm having no luck with this :(
> 
> Here's what I have now:
> 
> WEB-INF/jboss-web.xml:
> --
> 
>   java:/jaas/simple
> 
> --
> 
> WEB-INF/web.xml:
>   Changed all instances of propertyAdmin to "guest", since that's what
>   'simple' returns if a user is authenticated.
> 
> Simple is indeed set up in conf/tomcat/auth.conf and in
> conf/default/auth.conf... it's marked as 'required' and it's not commented
> out.
> 
> i try logging into the page with green/green or green/(nopassword) and get
> rejected.
> 
> Redeployed the file, restarted the server, banged on the computer with a
> large hammer... nothing seems to work... :(
> 
> David Green
> 



___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user

Re: [JBoss-user] Authentication Problem...

[David Green]

I'm having no luck with this :(

Here's what I have now:

WEB-INF/jboss-web.xml:
--

  java:/jaas/simple

--

WEB-INF/web.xml:
  Changed all instances of propertyAdmin to "guest", since that's what
  'simple' returns if a user is authenticated.

Simple is indeed set up in conf/tomcat/auth.conf and in
conf/default/auth.conf... it's marked as 'required' and it's not commented
out.

i try logging into the page with green/green or green/(nopassword) and get
rejected.

Redeployed the file, restarted the server, banged on the computer with a
large hammer... nothing seems to work... :(

David Green

On Tue, 26 Jun 2001, Scott M Stark wrote:

> You still have to specify a security-domain in jboss-web.xml.
> See the JAAS tutorial: http://www.jboss.org/documentation/HTML/ch11s83.html
>
> - Original Message -
> From: "David Green" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: Tuesday, June 26, 2001 7:42 PM
> Subject: [JBoss-user] Authentication Problem...
>
>
> >
> > I've deployed a .war file with an index.jsp, and a web.xml that says
> > that the index.jsp should be protected. I've created a users.properties
> > and a roles.properties file in my jboss/conf area per the docs, the role
> > name matches what's in my web.xml, yet it isn't authenticating me when i
> > visit the page and type in a correct username/password. If anyone has
> > some insight into the problem, I'd be gracious. Here are the
> > offending files:
> >
> > WEB-INF/web.xml:
> > -
> > 
> >
> >   
> >
> > 
> >   propertyeditor
> >   Property Editor
> >   /*
> >   HEAD
> >   GET
> >   POST
> >   PUT
> >   DELETE
> > 
> >
> > 
> >   Property Administrator
> >   propertyAdmin
> > 
> >
> > 
> >   NONE
> > 
> >
> >   
> >
> >   
> > BASIC
> > properties
> >   
> >
> >   
> > Property Administrator
> > propertyAdmin
> >   
> >
> > 
> > -
> >
> > So, in order to access any page, the "propertyAdmin" role is needed.
> >
> > jboss/conf/users.properties:
> > (also in jboss/conf/tomcat/ and jboss/conf/default/ for good measure)
> > 
> > green=green
> > 
> >
> > jboss/conf/roles.properties:
> > (also in jboss/conf/tomcat/ and jboss/conf/default/ for good measure)
> > 
> > green=propertyAdmin
> > 
> >
> > From auth.conf:
> > 
> > // The default server login module
> > other {
> > 
> >
> > From online docs:
> > 
> > The JaasServerLoginModule is a simple properties file based login module
> > that consults two Java Properties formatted text files for username to
> > password("users.properties") and username to
> > roles("roles.properties") mapping. The properties files are loaded during
> > initialization using the thread context class loader. This means that
> > these files can be placed into the J2EE deployment jar or the JBoss config
> > directory. The users.properties file uses a format:
> > 
> > (I chose to put them in the JBoss config directory)
> >
> >
> > Ok, so "other" is the default. So if I don't specify which to use,
> > "other" gets used. So we know we're using the "other" ServerLoginModule.
> >
> > "other" uses two property files that you put in your conf directory called
> > users.properties and roles.properties. This defines users and roles. I
> > have done this per the docs.
> >
> > I require one of those roles in my web.xml. I go to the page in my
> > browser and type in a correct username/password for a user that
> > maps to the proper role, and it doesn't authenticate me.
> >
> > Can anyone see where I'm going wrong?
> >
> > Thanks,
> >
> > David Green
> >
> >
> > ___
> > JBoss-user mailing list
> > [EMAIL PROTECTED]
> > http://lists.sourceforge.net/lists/listinfo/jboss-user
> >
>
>
> ___
> JBoss-user mailing list
> [EMAIL PROTECTED]
> http://lists.sourceforge.net/lists/listinfo/jboss-user
>


___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user

Re: [JBoss-user] Authentication Problem...

[Scott M Stark]

You still have to specify a security-domain in jboss-web.xml.
See the JAAS tutorial: http://www.jboss.org/documentation/HTML/ch11s83.html

- Original Message - 
From: "David Green" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, June 26, 2001 7:42 PM
Subject: [JBoss-user] Authentication Problem...


> 
> I've deployed a .war file with an index.jsp, and a web.xml that says
> that the index.jsp should be protected. I've created a users.properties
> and a roles.properties file in my jboss/conf area per the docs, the role
> name matches what's in my web.xml, yet it isn't authenticating me when i
> visit the page and type in a correct username/password. If anyone has
> some insight into the problem, I'd be gracious. Here are the
> offending files:
> 
> WEB-INF/web.xml:
> -
> 
> 
>   
> 
> 
>   propertyeditor
>   Property Editor
>   /*
>   HEAD
>   GET
>   POST
>   PUT
>   DELETE
> 
> 
> 
>   Property Administrator
>   propertyAdmin
> 
> 
> 
>   NONE
> 
> 
>   
> 
>   
> BASIC
> properties
>   
> 
>   
> Property Administrator
> propertyAdmin
>   
> 
> 
> -
> 
> So, in order to access any page, the "propertyAdmin" role is needed.
> 
> jboss/conf/users.properties:
> (also in jboss/conf/tomcat/ and jboss/conf/default/ for good measure)
> 
> green=green
> 
> 
> jboss/conf/roles.properties:
> (also in jboss/conf/tomcat/ and jboss/conf/default/ for good measure)
> 
> green=propertyAdmin
> 
> 
> From auth.conf:
> 
> // The default server login module
> other {
> 
> 
> From online docs:
> 
> The JaasServerLoginModule is a simple properties file based login module
> that consults two Java Properties formatted text files for username to
> password("users.properties") and username to
> roles("roles.properties") mapping. The properties files are loaded during
> initialization using the thread context class loader. This means that
> these files can be placed into the J2EE deployment jar or the JBoss config
> directory. The users.properties file uses a format:
> 
> (I chose to put them in the JBoss config directory)
> 
> 
> Ok, so "other" is the default. So if I don't specify which to use,
> "other" gets used. So we know we're using the "other" ServerLoginModule.
> 
> "other" uses two property files that you put in your conf directory called
> users.properties and roles.properties. This defines users and roles. I
> have done this per the docs.
> 
> I require one of those roles in my web.xml. I go to the page in my
> browser and type in a correct username/password for a user that
> maps to the proper role, and it doesn't authenticate me.
> 
> Can anyone see where I'm going wrong?
> 
> Thanks,
> 
> David Green
> 
> 
> ___
> JBoss-user mailing list
> [EMAIL PROTECTED]
> http://lists.sourceforge.net/lists/listinfo/jboss-user
> 


___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user

[JBoss-user] Authentication Problem...

[David Green]

I've deployed a .war file with an index.jsp, and a web.xml that says
that the index.jsp should be protected. I've created a users.properties
and a roles.properties file in my jboss/conf area per the docs, the role
name matches what's in my web.xml, yet it isn't authenticating me when i
visit the page and type in a correct username/password. If anyone has
some insight into the problem, I'd be gracious. Here are the
offending files:

WEB-INF/web.xml:
-


  


  propertyeditor
  Property Editor
  /*
  HEAD
  GET
  POST
  PUT
  DELETE



  Property Administrator
  propertyAdmin



  NONE


  

  
BASIC
properties
  

  
Property Administrator
propertyAdmin
  


-

So, in order to access any page, the "propertyAdmin" role is needed.

jboss/conf/users.properties:
(also in jboss/conf/tomcat/ and jboss/conf/default/ for good measure)

green=green


jboss/conf/roles.properties:
(also in jboss/conf/tomcat/ and jboss/conf/default/ for good measure)

green=propertyAdmin


>From auth.conf:

// The default server login module
other {


>From online docs:

The JaasServerLoginModule is a simple properties file based login module
that consults two Java Properties formatted text files for username to
password("users.properties") and username to
roles("roles.properties") mapping. The properties files are loaded during
initialization using the thread context class loader. This means that
these files can be placed into the J2EE deployment jar or the JBoss config
directory. The users.properties file uses a format:

(I chose to put them in the JBoss config directory)


Ok, so "other" is the default. So if I don't specify which to use,
"other" gets used. So we know we're using the "other" ServerLoginModule.

"other" uses two property files that you put in your conf directory called
users.properties and roles.properties. This defines users and roles. I
have done this per the docs.

I require one of those roles in my web.xml. I go to the page in my
browser and type in a correct username/password for a user that
maps to the proper role, and it doesn't authenticate me.

Can anyone see where I'm going wrong?

Thanks,

David Green


___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user