June 2012 - jboss-dev-forums - Jboss List Archives

[PicketBox Development] - WebJASPIAuthenticator ignores GroupPrincipalCallback but requires PasswordValidationCallback

by arjan tijms

arjan tijms [https://community.jboss.org/people/atijms] created the discussion "WebJASPIAuthenticator ignores GroupPrincipalCallback but requires PasswordValidationCallback" To view the discussion, visit: https://community.jboss.org/message/739801#739801 -------------------------------------------------------------- In JBoss AS 7.1.1, if a user provided ServerAuthModule provides a GroupPrincipalCallback, this is ignored by WebJASPIAuthenticator. The provider handler copies the GroupPrincipalCallback, but the authenticator then does nothing with it. Simulteanously, if the ServerAuthModule does not provide a PasswordValidationCallback to the handler, then this will result in a null pointer exception in the authenticator. I wonder is this is correct? Reading about JASPI/JSR 196 it seems a GroupPrincipalCallback should be processed when provided and a PasswordValidationCallback should not be required. -------------------------------------------------------------- Reply to this message by going to Community [https://community.jboss.org/message/739801#739801] Start a new discussion in PicketBox Development at Community [https://community.jboss.org/choose-container!input.jspa?contentType=1&con...]

11 years, 11 months

1
0
0 / 0

Re: [jboss-dev-forums] [PicketBox Development] - JBoss AS7: Enabling JASPI Authentication for Web Applications

by arjan tijms

arjan tijms [https://community.jboss.org/people/atijms] commented on the document "JBoss AS7: Enabling JASPI Authentication for Web Applications" To view all comments on this document, visit: https://community.jboss.org/docs/DOC-17782#comment-10019 -------------------------------------------------- > Anil Saldhana wrote: > > > > Unless we see widespread adoption of JSR 196 usage, we will not make it the default. > Ok, thanks for explaining that. Adoption surely seems to be an issue, but does that really matter if JBoss uses this API for "internal" purposes? The current JASPI auth modules that ship with JBoss seem to be using JBoss/Tomcat APIs for their implementation, and thus can't be used with any other AS anyway. So one thing I'm still wondering about is what the intended use case is for modules like "org.jboss.as.web.security.jaspi.modules.HTTPBasicServerAuthModule". Those are not the default (and as you just explained, will probably not become default anytime soon), but the user can activate them. Since the same functionality is also provided by the traditional modules, why would a user want to use "org.jboss.as.web.security.jaspi.modules.HTTPBasicServerAuthModule"? --------------------------------------------------

11 years, 11 months

1
0
0 / 0

Re: [jboss-dev-forums] [PicketBox Development] - JBoss AS7: Enabling JASPI Authentication for Web Applications

by Anil Saldhana

Anil Saldhana [https://community.jboss.org/people/anil.saldhana] commented on the document "JBoss AS7: Enabling JASPI Authentication for Web Applications" To view all comments on this document, visit: https://community.jboss.org/docs/DOC-17782#comment-10018 -------------------------------------------------- > arjan tijms wrote: > > > > > Anil Saldhana wrote: > > > > Probably not. Unless we get JASPI rock solid as a specification and get people to actually get into that mode, we cannot just make it the default. > > > > Do you mean the spec itself (JSR 196) is not complete enough and a new JSR or MR is needed, or just that JBoss doesn't have a rock solid implementation? > Unless we see widespread adoption of JSR 196 usage, we will not make it the default. --------------------------------------------------

11 years, 11 months

1
0
0 / 0

Re: [jboss-dev-forums] [PicketBox Development] - JBoss AS7: Enabling JASPI Authentication for Web Applications

by arjan tijms

arjan tijms [https://community.jboss.org/people/atijms] commented on the document "JBoss AS7: Enabling JASPI Authentication for Web Applications" To view all comments on this document, visit: https://community.jboss.org/docs/DOC-17782#comment-10017 -------------------------------------------------- > Anil Saldhana wrote: > > Probably not. Unless we get JASPI rock solid as a specification and get people to actually get into that mode, we cannot just make it the default. > Do you mean the spec itself (JSR 196) is not complete enough and a new JSR or MR is needed, or just that JBoss doesn't have a rock solid implementation? --------------------------------------------------

11 years, 11 months

1
0
0 / 0

Re: [jboss-dev-forums] [PicketBox Development] - JBoss AS7: Enabling JASPI Authentication for Web Applications

by Anil Saldhana

Anil Saldhana [https://community.jboss.org/people/anil.saldhana] commented on the document "JBoss AS7: Enabling JASPI Authentication for Web Applications" To view all comments on this document, visit: https://community.jboss.org/docs/DOC-17782#comment-10016 -------------------------------------------------- > arjan tijms wrote: > > > > > Josef Cacek wrote: > > > > I think the ServerAuthModule implementations in the org.jboss.as.web.security.jaspi.modules package are ready for use (handle the HTTP BASIC, FORM and CLIENT-CERT authentication). > > > > Do you mean by that that in an upcomming version of JBoss AS, those will indeed become the default and thus explicitly configuring org.jboss.as.web.security.jaspi.WebJASPIAuthenticator won't be needed anymore? > > In the version shipping with 7.1.1 there are some rather severe bugs btw, like a NPE if a Subject has no roles (a fix is already committed: > https://github.com/sguilhen/jboss-as/commit/78bc38740a3d35367fb3338cfc5d5... https://github.com/sguilhen/jboss-as/commit/78bc38740a3d35367fb3338cfc5d5...). > Probably not. Unless we get JASPI rock solid as a specification and get people to actually get into that mode, we cannot just make it the default. --------------------------------------------------

11 years, 11 months

1
0
0 / 0

Re: [jboss-dev-forums] [PicketBox Development] - JBoss AS7: Enabling JASPI Authentication for Web Applications

by arjan tijms

arjan tijms [https://community.jboss.org/people/atijms] commented on the document "JBoss AS7: Enabling JASPI Authentication for Web Applications" To view all comments on this document, visit: https://community.jboss.org/docs/DOC-17782#comment-10014 -------------------------------------------------- > Josef Cacek wrote: > > I think the ServerAuthModule implementations in the org.jboss.as.web.security.jaspi.modules package are ready for use (handle the HTTP BASIC, FORM and CLIENT-CERT authentication). > Do you mean by that that in an upcomming version of JBoss AS, those will indeed become the default and thus explicitly configuring org.jboss.as.web.security.jaspi.WebJASPIAuthenticator won't be needed anymore? In the version shipping with 7.1.1 there are some rather severe bugs btw, like a NPE if a Subject has no roles (a fix is already committed: https://github.com/sguilhen/jboss-as/commit/78bc38740a3d35367fb3338cfc5d5... https://github.com/sguilhen/jboss-as/commit/78bc38740a3d35367fb3338cfc5d5...). --------------------------------------------------

11 years, 11 months

1
0
0 / 0

[EJB3 Development] - EJB3 @Scheduler Could not restore timer

by Allan Scheid

Allan Scheid [https://community.jboss.org/people/avs.009] created the discussion "EJB3 @Scheduler Could not restore timer" To view the discussion, visit: https://community.jboss.org/message/739461#739461 -------------------------------------------------------------- Hello all, I did a ejb with scheduler annotation, and then is working correctly, but every jboss as 7.1.1 final start i receive this error: 23:20:47,994 ERROR [org.jboss.as.ejb3] (MSC service thread 1-3) JBAS014129: Could not restore timer from C:\jboss-as-7.1.1.Final\standalone\data\timer-service-data\PortalAmil-EAR.PortalAmil-EJB.MailMDB\59970b97-5d5e-44ef-9700-8e7c826929e4: java.io.EOFException: Read past end of file at org.jboss.marshalling.SimpleDataInput.eofOnRead(SimpleDataInput.java:126) [jboss-marshalling-1.3.11.GA.jar:1.3.11.GA] at org.jboss.marshalling.SimpleDataInput.readUnsignedByteDirect(SimpleDataInput.java:263) [jboss-marshalling-1.3.11.GA.jar:1.3.11.GA] at org.jboss.marshalling.SimpleDataInput.readUnsignedByte(SimpleDataInput.java:224) [jboss-marshalling-1.3.11.GA.jar:1.3.11.GA] at org.jboss.marshalling.river.RiverUnmarshaller.doReadClassDescriptor(RiverUnmarshaller.java:902) [jboss-marshalling-river-1.3.11.GA.jar:1.3.11.GA] at org.jboss.marshalling.river.RiverUnmarshaller.doReadNewObject(RiverUnmarshaller.java:1204) [jboss-marshalling-river-1.3.11.GA.jar:1.3.11.GA] at org.jboss.marshalling.river.RiverUnmarshaller.doReadObject(RiverUnmarshaller.java:272) [jboss-marshalling-river-1.3.11.GA.jar:1.3.11.GA] at org.jboss.marshalling.river.RiverUnmarshaller.doReadObject(RiverUnmarshaller.java:209) [jboss-marshalling-river-1.3.11.GA.jar:1.3.11.GA] at org.jboss.marshalling.AbstractObjectInput.readObject(AbstractObjectInput.java:72) [jboss-marshalling-1.3.11.GA.jar:1.3.11.GA] at org.jboss.as.ejb3.timerservice.persistence.filestore.FileTimerPersistence.loadTimersFromFile(FileTimerPersistence.java:319) [jboss-as-ejb3-7.1.1.Final.jar:7.1.1.Final] at org.jboss.as.ejb3.timerservice.persistence.filestore.FileTimerPersistence.getTimers(FileTimerPersistence.java:296) [jboss-as-ejb3-7.1.1.Final.jar:7.1.1.Final] at org.jboss.as.ejb3.timerservice.persistence.filestore.FileTimerPersistence.loadActiveTimers(FileTimerPersistence.java:236) [jboss-as-ejb3-7.1.1.Final.jar:7.1.1.Final] at org.jboss.as.ejb3.timerservice.persistence.filestore.FileTimerPersistence.loadActiveTimers(FileTimerPersistence.java:253) [jboss-as-ejb3-7.1.1.Final.jar:7.1.1.Final] at org.jboss.as.ejb3.timerservice.TimerServiceImpl.getActivePersistentTimers(TimerServiceImpl.java:893) [jboss-as-ejb3-7.1.1.Final.jar:7.1.1.Final] at org.jboss.as.ejb3.timerservice.TimerServiceImpl.restoreTimers(TimerServiceImpl.java:633) [jboss-as-ejb3-7.1.1.Final.jar:7.1.1.Final] at org.jboss.as.ejb3.timerservice.TimerServiceImpl.start(TimerServiceImpl.java:190) [jboss-as-ejb3-7.1.1.Final.jar:7.1.1.Final] at org.jboss.msc.service.ServiceControllerImpl$StartTask.startService(ServiceControllerImpl.java:1811) [jboss-msc-1.0.2.GA.jar:1.0.2.GA] at org.jboss.msc.service.ServiceControllerImpl$StartTask.run(ServiceControllerImpl.java:1746) [jboss-msc-1.0.2.GA.jar:1.0.2.GA] at java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source) [rt.jar:1.7.0_01] at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source) [rt.jar:1.7.0_01] at java.lang.Thread.run(Unknown Source) [rt.jar:1.7.0_01] My EJB code with scheduler is: import java.util.Calendar; import java.text.SimpleDateFormat; import javax.ejb.ConcurrencyManagement; import javax.ejb.ConcurrencyManagementType; import javax.ejb.Schedule; import javax.ejb.Singleton; import javax.ejb.Timer; import javax.inject.Inject; import org.jboss.logging.Logger; @Singleton @ConcurrencyManagement(ConcurrencyManagementType.BEAN) public class MailMDB { @Inject private Logger log; private void printData(Object message) { if(log !=null) log.debug(message); else System.out.println(message); } @Schedule(hour="*", minute="*/5", persistent=true) public void backgroundProcessing(Timer timer) { final SimpleDateFormat dtFormat = new SimpleDateFormat("dd/MM/yyyy HH:mm:ss"); Thread t = new Thread(new Runnable() { printData("Starting the thread: " + Thread.currentThread().getName()); //Do anything.... printData(Thread.currentThread().getName() + " - Thread Stop in " + dtFormat.format(Calendar.getInstance().getTime())); }); t.setPriority(Thread.NORM_PRIORITY); t.setName("Thread - " + dtFormat.format(Calendar.getInstance().getTime())); t.start(); } } Remember all, that's code are working, but i only recive error on start jboss. Thanks, Allan Sorry for my English, i am Brazilian. -------------------------------------------------------------- Reply to this message by going to Community [https://community.jboss.org/message/739461#739461] Start a new discussion in EJB3 Development at Community [https://community.jboss.org/choose-container!input.jspa?contentType=1&con...]

11 years, 11 months

1
0
0 / 0

[JBoss AS 7 Development] - Re: Can't remote access to my ear application in JBoss 7

by Eric Li

Eric Li [https://community.jboss.org/people/lydys] created the discussion "Re: Can't remote access to my ear application in JBoss 7" To view the discussion, visit: https://community.jboss.org/message/739367#739367 -------------------------------------------------------------- I tried with some hello world WAR and it works. So you're right. myapp redirects to a sso server for authentication. still not working yet. But one more question: the configuration I have in standalone.xml works but is there a better way of doing this? what is the best practise for enabling remote access. Any security issue? -------------------------------------------------------------- Reply to this message by going to Community [https://community.jboss.org/message/739367#739367] Start a new discussion in JBoss AS 7 Development at Community [https://community.jboss.org/choose-container!input.jspa?contentType=1&con...]

11 years, 11 months

1
0
0 / 0

[EJB3 Development] - Help whit download

by Juan Manuel Pereyra Echeverz

Juan Manuel Pereyra Echeverz [https://community.jboss.org/people/maddog-uy] created the discussion "Help whit download" To view the discussion, visit: https://community.jboss.org/message/739352#739352 -------------------------------------------------------------- Good afternoon. My English writing is not very good, and I apologize for that. Turning to the problem, I'm working with RichFaces 3.0, and use the component UploadFile to upload a file (. Doc,. Pdf,. Docx) to a database. Now I need to download it, and have not found a component that permits me. There is a component to download? What would be the steps? Thanks in advance. Juan Pereyra -------------------------------------------------------------- Reply to this message by going to Community [https://community.jboss.org/message/739352#739352] Start a new discussion in EJB3 Development at Community [https://community.jboss.org/choose-container!input.jspa?contentType=1&con...]

11 years, 11 months

1
0
0 / 0

[JBoss AS 7 Development] - Re: Custom jdbc login module for remoting

by Wesley Janik

Wesley Janik [https://community.jboss.org/people/wesjanik] created the discussion "Re: Custom jdbc login module for remoting" To view the discussion, visit: https://community.jboss.org/message/738862#738862 -------------------------------------------------------------- Anyone able to get this to work? I'm having the same problem, and can't even get the sample I downloaded from https://community.jboss.org/docs/DOC-17357 https://community.jboss.org/wiki/JBossAS7SecurityCustomLoginModules to work. Like you, I'm getting: 13:52:47,103 TRACE [org.jboss.modules] (Remoting "1001467" task-2) Finding class custom.MyLoginModule from Module "org.jboss.as.remoting:main" from local module loader @50988 (roots: /opt/jboss-as-7.1.1.Final/modules) 13:52:47,104 TRACE [org.jboss.modules] (Remoting "1001467" task-2) Class custom.MyLoginModule not found from Module "org.jboss.as.remoting:main" from local module loader @50988 (roots: /opt/jboss-as-7.1.1.Final/modules) -------------------------------------------------------------- Reply to this message by going to Community [https://community.jboss.org/message/738862#738862] Start a new discussion in JBoss AS 7 Development at Community [https://community.jboss.org/choose-container!input.jspa?contentType=1&con...]

11 years, 11 months

2
2
0 / 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

jboss-dev-forums June 2012