Hi all, I implemented a custom Realm and config Weblogic6.1 to use this Realm for my web application that use Form base authentication. Every thing works fine, I was able to config my web.xml to make sure that user is authenticated before that access secure resource. Until I update the current user profile and needed the current user to login again, so after I updated the current user profile I do an invalidate call to the current user's Session and *SendReidirect* the user to secured wellcome page so the container can force the user to login again and I got the a NullPointerException from Weblogic when it try to call GroupImpl.addMember(Principal) with a null principal. Here is the stack trace:
<Oct 3, 2001 2:06:36 PM PDT> <Error> <HTTP> <[WebAppServletContext(3388675,naxco m,/naxcom)] Servlet failed with Exception java.lang.NullPointerException at weblogic.security.acl.GroupImpl.addMember(GroupImpl.java:46) at weblogic.security.acl.OwnerImpl.<init>(OwnerImpl.java:32) at weblogic.security.acl.AclImpl.<init>(AclImpl.java:164) at weblogic.servlet.security.internal.SecurityModule.auditPerm(SecurityM odule.java:350) at weblogic.servlet.security.internal.ServletSecurityManager.checkAccess (ServletSecurityManager.java:189) at weblogic.servlet.internal.WebAppServletContext.invokeServlet(WebAppSe rvletContext.java:2367) at weblogic.servlet.internal.ServletRequestImpl.execute(ServletRequestIm pl.java:1959) at weblogic.kernel.ExecuteThread.execute(ExecuteThread.java:137) at weblogic.kernel.ExecuteThread.run(ExecuteThread.java:120) > <Oct 3, 2001 2:06:36 PM PDT> <Error> <HTTP> <[WebAppServletContext(3388675,naxco m,/naxcom)] Servlet failed with Exception java.lang.NullPointerException at weblogic.security.acl.GroupImpl.addMember(GroupImpl.java:46) at weblogic.security.acl.OwnerImpl.<init>(OwnerImpl.java:32) at weblogic.security.acl.AclImpl.<init>(AclImpl.java:164) at weblogic.servlet.security.internal.SecurityModule.auditPerm(SecurityM odule.java:350) at weblogic.servlet.security.internal.ServletSecurityManager.checkAccess (ServletSecurityManager.java:189) at weblogic.servlet.internal.WebAppServletContext.invokeServlet(WebAppSe rvletContext.java:2367) at weblogic.servlet.internal.ServletRequestImpl.execute(ServletRequestIm pl.java:1959) at weblogic.kernel.ExecuteThread.execute(ExecuteThread.java:137) at weblogic.kernel.ExecuteThread.run(ExecuteThread.java:120) > I remember doing the same thing with Weblogic51 and it works just fine. So if you know what is going wrong let me know. Thanks, danny