[jboss-user] [JBossWS] - secured EJB webservice endpoint

vachacz do-not-reply at jboss.com
Mon Oct 23 07:18:48 EDT 2006


Hi

I'm looking forward to expose secured EJB webservice endpoint. My EJB is protected with JAAS security domain (DatabaseLoginModule with ClientLoginModule works fine). I'm able to deploy EJB as a webservice using annotations. All works really well. When i call webservice within a client code i can call EJB WebMethods that has @PermitAll annotation. My problem occurs with methods that are allowed only for JAAS authorized users (@RolesAllowed({...})). When i call such a method i recive 


  | Caused by: java.lang.SecurityException: Insufficient permissions, principal=null, requiredRoles=[showKlient], principalRoles=[]
  | 

it's normal behaviour becouse my client isn't authorized with JAAS. I wonder how to do JAAS login via SOAP. It would be great to do it with a pySOAP (python) or SOAPLite (perl) clients 

I read a lot on a jBoss forum and i didn't find anything

thx in advance
Lucas

View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3979997#3979997

Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3979997



More information about the jboss-user mailing list