From the audit entries for the authorization failures:
| 2007-10-24 12:20:22,171 TRACE [org.jboss.security.audit.providers.LogAuditProvid
| er] (http-0.0.0.0-8080-1:) [Error]runAsIdentity=[roles=[anonymous],principal=ano
| nymous];ejb.principal=kermit;ejb.methodRoles=friend;authorizationManager=[Author
| izationManager:class=org.jboss.security.plugins.JBossAuthorizationManager:JBossW
| S:];ejb.method=public java.lang.String
org.jboss.test.ws.jaxws.samples.context.EndpointEJB.testGetUserPrincipal();Source=org.jboss.security.integration.ejb.EJBA
| uthorizationHelper;ejb.name=EndpointEJB;caller.subject=Subject:
| Principal: kermit
| Principal: Roles(members:friend)
| ;Exception:=Authorization Failed;ejb.methodInterface=Local;ejb.codeSource=(vfsfi
| le:/C:/cygwin/home/asaldhana/jbossws/stack/native/jbossws-native-2.0.2/output/te
| sts/libs/jaxws-samples-context.jar <no signer certificates>);^M
|
and
| 2007-10-24 12:20:22,296 TRACE [org.jboss.security.audit.providers.LogAuditProvid
| er] (http-0.0.0.0-8080-1:) [Error]runAsIdentity=[roles=[anonymous],principal=ano
| nymous];ejb.principal=kermit;ejb.methodRoles=friend;authorizationManager=[Author
| izationManager:class=org.jboss.security.plugins.JBossAuthorizationManager:JBossW
| S:];ejb.method=public boolean org.jboss.test.ws.jaxws.samples.context.EndpointEJ
| B.testIsUserInRole(java.lang.String);Source=org.jboss.security.integration.ejb.E
| JBAuthorizationHelper;ejb.name=EndpointEJB;caller.subject=Subject:
| Principal: kermit
| Principal: Roles(members:friend)
| ;Exception:=Authorization Failed;ejb.methodInterface=Local;ejb.codeSource=(vfsfi
| le:/C:/cygwin/home/asaldhana/jbossws/stack/native/jbossws-native-2.0.2/output/te
| sts/libs/jaxws-samples-context.jar <no signer certificates>);
|
I am suspecting that there is a push of RunAsIdentity of anonymous in the pipeline that is
creating the issue. I need to look further where this RunAs push is happening.
Does that ring any immediate bells?
View the original post :
http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4098450#...
Reply to the post :
http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...