Re: [JBoss-user] Security domain

[Marius Kotsbak]

On man, 2002-11-11 at 10:23, Vijaya Laxmi wrote:
> Dear all,
> 
> can somebody tell how to set up security-domain in tomcat.
> 
> In jboss u can set using the standardjboss.xml,
> 
> but in tomcat , where do u set so.
> 
> 
> regards
> 
> vijaya
> 
jboss-web.xml in the war-file I think



---
This sf.net email is sponsored by: 
To learn the basics of securing your web site with SSL, 
click here to get a FREE TRIAL of a Thawte Server Certificate: 
http://www.gothawte.com/rd522.html
___
JBoss-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/jboss-user

[JBoss-user] Security domain

[Vijaya Laxmi]

Dear all,
 
    can somebody tell how to set up 
security-domain in tomcat.
 
In jboss u can set using the 
standardjboss.xml,
 
but in tomcat , where do u set so.
 
 
regards
 
vijaya
 

[JBoss-user] security-domain make jboss loop.

[Dag Kilskar Naess]

Hi all! JBoss doesn't agree with me today, and I have (temporarly) run out of 
ideas on how to persuade it ro see thiings my way. 
Can you help me?

This is the problem:
> Since data to authenticate users lies within 2 entity CMP beans. I have 
> subclassed the org.jboss.security.auth.spi.UsernamePasswordLoginModule. I'm 
> overriding the two methods: getUsersPassword() and getRoleSets(). From 
these 
> methods I try to get at two entity CMP beans in order to authenticate 
users. 
> This make jboss call the getRoleSets method again and again. This I find 
> strange because I have (temporarily) unsecured the 2 entity CMP beans like 
> this: 
> 
> from jboss.xml: 
> 
> java:/jaas/clientDomain
> 
> 
> 
>   
>   
> Unsecure Enity CMPs
> 
>   
>
>   .
> 
>
>  Association
>  Unsecure Enity CMPs
>  connect/AssociationLocal
> 
> 
>  Person
>  Unsecure Enity CMPs
>  connect/Person
>  connect/PersonLocal
>   
>  
>   
> 
> I have tried removing the references to Person and Association bean from 
> getUsersPassword() and getRoleSets(). This make everything work as it 
should.
> 
> Please give me hints to what I'm doing wrong or tell me a better solution. 
> (I know I can get the authentication data directly from the database, but I 
> should be able to go through the entity beans also shouldn't I ?)
> 
> 
> Thanx.
> Dag
> Boost Communications AS 


Here is what jboss has to say about this.: (First few sentences are debugging 
info I'm responsible for) 
2002-06-14 15:13:45,530 INFO  [STDOUT] Added principal -anybody- to roleSet.
2002-06-14 15:13:45,532 INFO  [STDOUT] Trying to getRoleSets...
2002-06-14 15:13:45,532 INFO  [STDOUT] Added principal -anybody- to roleSet.
2002-06-14 15:13:45,534 INFO  [STDOUT] Trying to getRoleSets...
2002-06-14 15:13:45,535 INFO  [STDOUT] Added principal -anybody- to roleSet.
2002-06-14 15:13:45,537 INFO  [STDOUT] Trying to getRoleSets...
2002-06-14 15:13:45,537 INFO  [STDOUT] Added principal -anybody- to roleSet.
2002-06-14 15:13:45,539 INFO  [STDOUT] Trying to getRoleSets...
2002-06-14 15:13:45,540 INFO  [STDOUT] Added principal -anybody- to roleSet.
2002-06-14 15:13:45,541 INFO  [STDOUT] Trying to getRoleSets...
2002-06-14 15:13:45,542 INFO  [STDOUT] Added principal -anybody- to roleSet.
2002-06-14 15:13:45,544 INFO  [STDOUT] Trying to getRoleSets...
2002-06-14 15:13:45,545 INFO  [STDOUT] Added principal -anybody- to roleSet.
2002-06-14 15:13:45,546 INFO  [STDOUT] Trying to getRoleSets...
2002-06-14 15:13:45,547 INFO  [STDOUT] Added principal -anybody- to roleSet.
2002-06-14 15:13:45,549 INFO  [STDOUT] Trying to getRoleSets...
2002-06-14 15:13:45,550 INFO  [STDOUT] Added principal -anybody- to roleSet.
2002-06-14 15:13:45,552 INFO  [STDOUT] Trying to getRoleSets...
2002-06-14 15:13:45,552 INFO  [STDOUT] Added principal -anybody- to roleSet.
2002-06-14 15:13:45,555 INFO  [STDOUT] Trying to getRoleSets...
2002-06-14 15:13:45,555 INFO  [STDOUT] Added principal -anybody- to roleSet.
2002-06-14 15:13:45,557 INFO  [STDOUT] Trying to getRoleSets...
2002-06-14 15:13:45,557 INFO  [STDOUT] Added principal -anybody- to roleSet.
2002-06-14 15:13:45,559 INFO  [STDOUT] Trying to getRoleSets...
2002-06-14 15:13:45,560 INFO  [STDOUT] Added principal -anybody- to roleSet.
2002-06-14 15:13:45,562 INFO  [STDOUT] Trying to getRoleSets...
2002-06-14 15:13:45,562 INFO  [STDOUT] Added principal -anybody- to roleSet.
2002-06-14 15:13:45,568 ERROR [org.jboss.ejb.plugins.SecurityInterceptor] 
Authentication exception, principal=null
2002-06-14 15:13:45,571 ERROR [STDERR] 
java.lang.reflect.UndeclaredThrowableException
2002-06-14 15:13:45,583 ERROR [STDERR]  at $Proxy45.findByPhoneNumber(Unknown 
Source)
2002-06-14 15:13:45,584 ERROR [STDERR]  at 
no.boostcom.security.MedlemsregisterLoginModule.getPersonLocal(MedlemsregisterLoginModule.java:202)
2002-06-14 15:13:45,584 ERROR [STDERR]  at 
no.boostcom.security.MedlemsregisterLoginModule.getRoleSets(MedlemsregisterLoginModule.java:93)
2002-06-14 15:13:45,585 ERROR [STDERR]  at 
org.jboss.security.auth.spi.AbstractServerLoginModule.commit(AbstractServerLoginModule.java:146)
2002-06-14 15:13:45,586 ERROR [STDERR]  at 
sun.reflect.GeneratedMethodAccessor33.invoke(Unknown Source)
2002-06-14 15:13:45,586 ERROR [STDERR]  at 
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
2002-06-14 15:13:45,586 ERROR [STDERR]  at 
java.lang.reflect.Method.invoke(Method.java:324)
2002-06-14 15:13:45,587 ERROR [STDERR]  at 
javax.security.auth.login.LoginContext.invoke(LoginContext.java:664)
2002-06-14 15:13:45,587 ERROR [STDERR]  at 
javax.security.auth.login.LoginContext.access$000(LoginContext.java:129)
2002-06-14 15:13:45,587 ERROR [STDERR]  at 
javax.security.auth.login.LoginContext$4.run(LoginContext.java:599)
2002-06-14 15:13:45,588 ERROR [STDERR]  at 
java.security