Ganesh Saithala [https://community.jboss.org/people/ganeshment] created the discussion "Re: remote ejb client username is encrypted at the server(JBOSS7.1 CR1)" To view the discussion, visit: https://community.jboss.org/message/719410#719410 -------------------------------------------------------------- Thanks Daren for helping to fix this issue. Iam posting below working EJB client API based test program. package demo; import java.io.IOException; import java.net.URI; import java.security.Security; import java.util.concurrent.TimeUnit; import javax.naming.NamingException; import javax.security.auth.login.LoginException; import org.jboss.ejb.client.ContextSelector; import org.jboss.ejb.client.EJBClient; import org.jboss.ejb.client.EJBClientContext; import org.jboss.ejb.client.EJBClientTransactionContext; import org.jboss.ejb.client.StatelessEJBLocator; import org.jboss.ejb.client.remoting.IoFutureHelper; import org.jboss.remoting3.Connection; import org.jboss.remoting3.Endpoint; import org.jboss.remoting3.Remoting; import org.jboss.remoting3.remote.RemoteConnectionProviderFactory; import org.jboss.sasl.JBossSaslProvider; import org.xnio.IoFuture; import org.xnio.OptionMap; import org.xnio.Options; public class RemoteEJBClient {         /**      * User login name      */     private static final String USER_LOGIN_NAME = "admin";     /**      * User password      */     private static final String USER_PASSWORD = "admin";         private static Connection connection;     private static EJBClientContext ejbClientContext;     private static Endpoint endpoint;     static {         Security.addProvider(new JBossSaslProvider());     }     public static void main(String[] args) throws Exception {         endpoint = Remoting.createEndpoint("ejb-remote-client-endpoint", OptionMap.EMPTY);         endpoint.addConnectionProvider("remote", new RemoteConnectionProviderFactory(),                                        OptionMap.create(Options.SSL_ENABLED, Boolean.FALSE, Options.SASL_SERVER_AUTH,                                                         Boolean.FALSE));                 MyCallbackHandler callbackhndlr = new MyCallbackHandler(USER_LOGIN_NAME, USER_PASSWORD);          // open a connection         final IoFuture<Connection> futureConnection = endpoint.connect(new URI("remote://localhost:" + "4447"),                                                                        OptionMap.create(Options.SASL_POLICY_NOPLAINTEXT,                                                                                         Boolean.FALSE), callbackhndlr);         connection = IoFutureHelper.get(futureConnection, 5, TimeUnit.SECONDS);         ejbClientContext = EJBClientContext.create();         ejbClientContext.registerConnection(connection);         @SuppressWarnings("unused")         final ContextSelector<EJBClientContext> previousSelector = EJBClientContext.setConstantContext(ejbClientContext);         // setting up something for transactions         final EJBClientTransactionContext localUserTxContext = EJBClientTransactionContext.createLocal();         EJBClientTransactionContext.setGlobalContext(localUserTxContext);                 invokeStatelessBean();         if (connection != null) {             try {                 connection.close();             } catch (IOException ioe) {                 System.out.println("Failed to close connection" + ioe);             }         }         if (endpoint != null) {             try {                 endpoint.close();             } catch (IOException ioe) {                 System.out.println("Failed to close endpoint" + ioe);             }         }     }     private static void invokeStatelessBean() throws NamingException, LoginException {         final SessionBeanInterface statelessSessionBeanInterface = lookupRemoteStatelessCalculator();         System.out.println("Obtained a remote stateless SessionBeanInterface for invocation");         try {             System.out.println("EJB principal " + statelessSessionBeanInterface.getPrincipal());         } catch (RuntimeException e) {             e.printStackTrace();         }     }     private static SessionBeanInterface lookupRemoteStatelessCalculator() throws NamingException, LoginException {         final String appName = "TestEAR";         final String moduleName = "TestEJB";         final String distinctName = "";         final String beanName = "SessionBean";         final String viewClassName = SessionBeanInterface.class.getName();         System.out.println("ejb:" + appName + "/" + moduleName + "/" + distinctName + "/" + beanName + "!" + viewClassName);         // create a locator depending on the type you are calling: StatelessEJBLocator, EntityEJBLocator, StatefulEJBLocator &         // create the proxy given the locator         final StatelessEJBLocator<SessionBeanInterface> locator = new StatelessEJBLocator<SessionBeanInterface>(                                                                                                                 SessionBeanInterface.class,                                                                                                                 appName,                                                                                                                 moduleName,                                                                                                                 beanName,                                                                                                                 distinctName);         SessionBeanInterface bean = EJBClient.createProxy(locator);         return bean;     } }  -------------------------------------------------------------- Reply to this message by going to Community [https://community.jboss.org/message/719410#719410] Start a new discussion in JBoss AS 7 Development at Community [https://community.jboss.org/choose-container!input.jspa?contentType=1&...]

Daniel Jipa [https://community.jboss.org/people/danjee] created the discussion "Re: remote ejb client username is encrypted at the server(JBOSS7.1 CR1)" To view the discussion, visit: https://community.jboss.org/message/732034#732034 -------------------------------------------------------------- You should enable trace logs for your JBoss instance. You will have a much clearer idea of what is your problem. Search for string 'rejected' in the logs -------------------------------------------------------------- Reply to this message by going to Community [https://community.jboss.org/message/732034#732034] Start a new discussion in JBoss AS 7 Development at Community [https://community.jboss.org/choose-container!input.jspa?contentType=1&...]

jaikiran pai [https://community.jboss.org/people/jaikiran] created the discussion "Re: remote ejb client username is encrypted at the server(JBOSS7.1 CR1)" To view the discussion, visit: https://community.jboss.org/message/719412#719412 -------------------------------------------------------------- Trailing space to the password value? I wonder if it's a good idea if we trimmed the value. -------------------------------------------------------------- Reply to this message by going to Community [https://community.jboss.org/message/719412#719412] Start a new discussion in JBoss AS 7 Development at Community [https://community.jboss.org/choose-container!input.jspa?contentType=1&...]

Darran Lofthouse [https://community.jboss.org/people/dlofthouse] created the discussion "Re: remote ejb client username is encrypted at the server(JBOSS7.1 CR1)" To view the discussion, visit: https://community.jboss.org/message/719435#719435 -------------------------------------------------------------- One other point revealed by this thread (and a couple of others) is that it is quite difficult to get enough information from the logs to accurately see why a comparison is failing - all logging that outputs passwords has been removed so that passwords are not accidentally stored in the logs but I think there are still a couple of scenarios where there is no other option than logging the values so that they can be manually compared to make sure they are as expected. I am going to have a look at what options we have for a development environment at least to essentially evaluate the end to end authentication process so that the point of failure can be pinpointed more quickly. -------------------------------------------------------------- Reply to this message by going to Community [https://community.jboss.org/message/719435#719435] Start a new discussion in JBoss AS 7 Development at Community [https://community.jboss.org/choose-container!input.jspa?contentType=1&...]

Jason Greene [https://community.jboss.org/people/jason.greene] created the discussion "Re: remote ejb client username is encrypted at the server(JBOSS7.1 CR1)" To view the discussion, visit: https://community.jboss.org/message/719541#719541 -------------------------------------------------------------- You set remote.connection.default.callback.handler.class to a class name in your project which implements  javax.security.auth.callback.CallbackHandler. Using this API you can obtain them on the fly from the user, or via some other means. -------------------------------------------------------------- Reply to this message by going to Community [https://community.jboss.org/message/719541#719541] Start a new discussion in JBoss AS 7 Development at Community [https://community.jboss.org/choose-container!input.jspa?contentType=1&...]