February 2010 - jboss-jira - Jboss List Archives

[JBoss JIRA] Commented: (JBWEB-19) Make isUserInRole() and getUserPrincipal() available on unsecured pages

by Jeff Schnitzer (JIRA)

[ https://jira.jboss.org/jira/browse/JBWEB-19?page=com.atlassian.jira.plugi... ] Jeff Schnitzer commented on JBWEB-19: ------------------------------------- I pretty much single-handedly brought JBoss into Electronic Arts in 2002 (replacing WebLogic) and Kink.com in 2006 (replacing PHP). You've already lost the first one, and you're on the verge of losing the second. Before you piss on someone, you might want to check to see if they are (or were) actual customers first. > Make isUserInRole() and getUserPrincipal() available on unsecured pages > ----------------------------------------------------------------------- > > Key: JBWEB-19 > URL: https://jira.jboss.org/jira/browse/JBWEB-19 > Project: JBoss Web > Issue Type: Feature Request > Security Level: Public(Everyone can see) > Components: Core > Environment: Any > Reporter: Jeff Schnitzer > Assignee: Remy Maucherat > > Currently getUserPrincipal() returns null and ServletRequest.isUserInRole() always returns false on unsecured pages, even after the user has been authenticated. > It would be much more useful if these always returned proper values. This confusion comes up on the JAAS forums frequently. -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

15 years, 8 months

1
0
0 / 0

[JBoss JIRA] Commented: (JBWEB-19) Make isUserInRole() and getUserPrincipal() available on unsecured pages

by Remy Maucherat (JIRA)

[ https://jira.jboss.org/jira/browse/JBWEB-19?page=com.atlassian.jira.plugi... ] Remy Maucherat commented on JBWEB-19: ------------------------------------- Unless you have been a customer at some point, I don't think your opinion is legitimate. We properly implement open specifications here. > Make isUserInRole() and getUserPrincipal() available on unsecured pages > ----------------------------------------------------------------------- > > Key: JBWEB-19 > URL: https://jira.jboss.org/jira/browse/JBWEB-19 > Project: JBoss Web > Issue Type: Feature Request > Security Level: Public(Everyone can see) > Components: Core > Environment: Any > Reporter: Jeff Schnitzer > Assignee: Remy Maucherat > > Currently getUserPrincipal() returns null and ServletRequest.isUserInRole() always returns false on unsecured pages, even after the user has been authenticated. > It would be much more useful if these always returned proper values. This confusion comes up on the JAAS forums frequently. -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

15 years, 8 months

1
0
0 / 0

[JBoss JIRA] Commented: (JBWEB-19) Make isUserInRole() and getUserPrincipal() available on unsecured pages

by Jeff Schnitzer (JIRA)

[ https://jira.jboss.org/jira/browse/JBWEB-19?page=com.atlassian.jira.plugi... ] Jeff Schnitzer commented on JBWEB-19: ------------------------------------- Thank you for illustrating why I've given up on JBoss. Glaring deficiencies of the spec are no longer opportunities to make a product better than everyone else's. Now they're an excuse to leave bad or broken behavior unfixed. If you want to know how IBM or Oracle got to be slow-moving behemoths with lousy products, this is it. Sad. > Make isUserInRole() and getUserPrincipal() available on unsecured pages > ----------------------------------------------------------------------- > > Key: JBWEB-19 > URL: https://jira.jboss.org/jira/browse/JBWEB-19 > Project: JBoss Web > Issue Type: Feature Request > Security Level: Public(Everyone can see) > Components: Core > Environment: Any > Reporter: Jeff Schnitzer > Assignee: Remy Maucherat > > Currently getUserPrincipal() returns null and ServletRequest.isUserInRole() always returns false on unsecured pages, even after the user has been authenticated. > It would be much more useful if these always returned proper values. This confusion comes up on the JAAS forums frequently. -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

15 years, 8 months

1
0
0 / 0

[JBoss JIRA] Created: (EJBTHREE-2008) Put back @RemoteBinding.factory

by Andrew Lee Rubinger (JIRA)

Put back @RemoteBinding.factory ------------------------------- Key: EJBTHREE-2008 URL: https://jira.jboss.org/jira/browse/EJBTHREE-2008 Project: EJB 3.0 Issue Type: Bug Reporter: Andrew Lee Rubinger Assignee: Andrew Lee Rubinger Priority: Critical We cannot remove an API used in JBPAPP branches until this is successfully extracted out into a component used only in trunk -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

15 years, 8 months

1
1
0 / 0

[JBoss JIRA] Created: (JBAS-6401) sun.misc.InvalidJarIndexException: Invalid index when jboss compile class for JSP

by haim haim (JIRA)

sun.misc.InvalidJarIndexException: Invalid index when jboss compile class for JSP --------------------------------------------------------------------------------- Key: JBAS-6401 URL: https://jira.jboss.org/jira/browse/JBAS-6401 Project: JBoss Application Server Issue Type: Bug Security Level: Public (Everyone can see) Components: Web (Tomcat) service Affects Versions: JBossAS-4.2.2.GA Environment: OS: Fedora release 9 (Sulphur) 2.6.27.9-73.fc9.i686 #1 SMP Tue Dec 16 15:25:05 EST 2008 i686 i686 i386 GNU/Linux Java: java version "1.5.0_08" Java(TM) 2 Runtime Environment, Standard Edition (build 1.5.0_08-b03) Java HotSpot(TM) Server VM (build 1.5.0_08-b03, mixed mode) Maven 2.0.7 Reporter: haim haim Assignee: Remy Maucherat Fix For: JBossAS-4.2.3.GA Attachments: server.log, xbean.jar When jboss is trying to compile JSPs I get the following exception sun.misc.InvalidJarIndexException: Invalid index at sun.misc.URLClassPath$JarLoader.getResource(URLClassPath.java:769) at sun.misc.URLClassPath$JarLoader.getResource(URLClassPath.java:682) at sun.misc.URLClassPath$JarLoader.findResource(URLClassPath.java:663) at sun.misc.URLClassPath.findResource(URLClassPath.java:142) at java.net.URLClassLoader$2.run(URLClassLoader.java:362) at java.security.AccessController.doPrivileged(Native Method) at java.net.URLClassLoader.findResource(URLClassLoader.java:359) ... see attachment When tracking down the jars i found out that the jar xbean.jar (Apache XmlBeans version 2.2.0-r413705) is the one that throws the exception The jar was located under jboss.dir/server/default/deploy/my.ear/lib/ when I copied the jar to jboss.dir/server/default/deploy/lib every think started working fine I have a similar issue with a valve jar I am placing under jboss.dir/server/default/deploy/jboss-web.deployer/ -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

15 years, 8 months

3
6
0 / 0

[JBoss JIRA] Created: (JBAS-6610) servlet init invocation throws out of memory exception reading WEB-INF/web.xml

by mlybarger (JIRA)

servlet init invocation throws out of memory exception reading WEB-INF/web.xml ------------------------------------------------------------------------------ Key: JBAS-6610 URL: https://jira.jboss.org/jira/browse/JBAS-6610 Project: JBoss Application Server Issue Type: Bug Security Level: Public (Everyone can see) Components: Web (Tomcat) service Affects Versions: JBossAS-5.0.1.GA, JBossAS-5.0.0.GA Environment: windows, jdk 1.6 Reporter: mlybarger Assignee: Remy Maucherat simple servlet throws out of memory exception trying to read /WEB-INF/web.xml on servlet init. See forum for detail code example. http://www.jboss.org/index.html?module=bb&op=viewtopic&t=151956 -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

15 years, 8 months

3
4
0 / 0

[JBoss JIRA] Updated: (JBAS-7699) java.lang.ClassCastException when creating a remote interface

by Remy Maucherat (JIRA)

[ https://jira.jboss.org/jira/browse/JBAS-7699?page=com.atlassian.jira.plug... ] Remy Maucherat updated JBAS-7699: --------------------------------- Component/s: EJB2 Affects Version/s: JBossAS-4.0.3 Final Assignee: Alexey Loubyansky (was: Remy Maucherat) > java.lang.ClassCastException when creating a remote interface > ------------------------------------------------------------- > > Key: JBAS-7699 > URL: https://jira.jboss.org/jira/browse/JBAS-7699 > Project: JBoss Application Server > Issue Type: Bug > Security Level: Public(Everyone can see) > Components: EJB2 > Affects Versions: JBossAS-4.0.3 Final > Environment: Unix > apache > jboss 4.0.3 > jdk1.5.0_06 > Reporter: Leon James > Assignee: Alexey Loubyansky > > I deploy a ear on my web jboss server(4.0.3),it contains a web module and EJBs. > when I try to creating a remote interface ,it occurs a exception, > Source code: > firstServlet.java > ...... > Hashtable env=System.getProperties(); > env.put(Context.INITIAL_CONTEXT_FACTORY,"org.jnp.interfaces.NamingContextFactory"); > env.put(Context.PROVIDER_URL,"jnp://localhost"); > Context ctx=new InitialContext(); > Object obj=ctx.lookup("Test"); > TestHome th=(TestHome)PortableRemoteObject.narrow(obj,TestHome.class); > Test t=th.create(); // line 35 > out.println(t.SayHello()); > ....... > TestBean.java: > import javax.ejb.SessionBean; > import javax.ejb.SessionContext; > import javax.ejb.CreateException; > public class TestBean implements SessionBean { > SessionContext sessionContext; > public void ejbCreate() throws CreateException { > } > public void ejbRemove() { > } > public void ejbActivate() { > } > public void ejbPassivate() { > } > public void setSessionContext(SessionContext sessionContext) { > this.sessionContext = sessionContext; > } > public String SayHello() { > return "Hello World!"; > } > } > and exception: > java.lang.ClassCastException: $Proxy51 at linuxtext.s3.doGet(s3.java:35) at javax.servlet.http.HttpServlet.service(HttpServlet.java:697) at javax.servlet.http.HttpServlet.service(HttpServlet.java:810) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:252) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:173) at org.jboss.web.tomcat.filters.ReplyHeaderFilter.doFilter(ReplyHeaderFilter.java:96) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:202) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:173) at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:213) at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:178) at org.jboss.web.tomcat.security.SecurityAssociationValve.invoke(SecurityAssociationValve.java:175) at org.jboss.web.tomcat.security.JaccContextValve.invoke(JaccContextValve.java:74) at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:126) at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:105) at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:107) at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:148) at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:869) at org.apache.coyote.http11.Http11BaseProtocol$Http11ConnectionHandler.processConnection(Http11BaseProtocol.java:664) at org.apache.tomcat.util.net.PoolTcpEndpoint.processSocket(PoolTcpEndpoint.java:527) at org.apache.tomcat.util.net.MasterSlaveWorkerThread.run(MasterSlaveWorkerThread.java:112) at java.lang.Thread.run(Thread.java:595) > what's the problem? > I want to deploy ,need help ! ! ! -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

15 years, 8 months

1
0
0 / 0

[JBoss JIRA] Resolved: (JBAS-7699) java.lang.ClassCastException when creating a remote interface

by Remy Maucherat (JIRA)

[ https://jira.jboss.org/jira/browse/JBAS-7699?page=com.atlassian.jira.plug... ] Remy Maucherat resolved JBAS-7699. ---------------------------------- Resolution: Rejected This JIRA is too ancient to deserve being looked at, I think. > java.lang.ClassCastException when creating a remote interface > ------------------------------------------------------------- > > Key: JBAS-7699 > URL: https://jira.jboss.org/jira/browse/JBAS-7699 > Project: JBoss Application Server > Issue Type: Bug > Security Level: Public(Everyone can see) > Components: EJB2 > Affects Versions: JBossAS-4.0.3 Final > Environment: Unix > apache > jboss 4.0.3 > jdk1.5.0_06 > Reporter: Leon James > Assignee: Alexey Loubyansky > > I deploy a ear on my web jboss server(4.0.3),it contains a web module and EJBs. > when I try to creating a remote interface ,it occurs a exception, > Source code: > firstServlet.java > ...... > Hashtable env=System.getProperties(); > env.put(Context.INITIAL_CONTEXT_FACTORY,"org.jnp.interfaces.NamingContextFactory"); > env.put(Context.PROVIDER_URL,"jnp://localhost"); > Context ctx=new InitialContext(); > Object obj=ctx.lookup("Test"); > TestHome th=(TestHome)PortableRemoteObject.narrow(obj,TestHome.class); > Test t=th.create(); // line 35 > out.println(t.SayHello()); > ....... > TestBean.java: > import javax.ejb.SessionBean; > import javax.ejb.SessionContext; > import javax.ejb.CreateException; > public class TestBean implements SessionBean { > SessionContext sessionContext; > public void ejbCreate() throws CreateException { > } > public void ejbRemove() { > } > public void ejbActivate() { > } > public void ejbPassivate() { > } > public void setSessionContext(SessionContext sessionContext) { > this.sessionContext = sessionContext; > } > public String SayHello() { > return "Hello World!"; > } > } > and exception: > java.lang.ClassCastException: $Proxy51 at linuxtext.s3.doGet(s3.java:35) at javax.servlet.http.HttpServlet.service(HttpServlet.java:697) at javax.servlet.http.HttpServlet.service(HttpServlet.java:810) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:252) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:173) at org.jboss.web.tomcat.filters.ReplyHeaderFilter.doFilter(ReplyHeaderFilter.java:96) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:202) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:173) at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:213) at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:178) at org.jboss.web.tomcat.security.SecurityAssociationValve.invoke(SecurityAssociationValve.java:175) at org.jboss.web.tomcat.security.JaccContextValve.invoke(JaccContextValve.java:74) at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:126) at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:105) at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:107) at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:148) at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:869) at org.apache.coyote.http11.Http11BaseProtocol$Http11ConnectionHandler.processConnection(Http11BaseProtocol.java:664) at org.apache.tomcat.util.net.PoolTcpEndpoint.processSocket(PoolTcpEndpoint.java:527) at org.apache.tomcat.util.net.MasterSlaveWorkerThread.run(MasterSlaveWorkerThread.java:112) at java.lang.Thread.run(Thread.java:595) > what's the problem? > I want to deploy ,need help ! ! ! -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

15 years, 8 months

1
0
0 / 0

[JBoss JIRA] Moved: (JBAS-7699) java.lang.ClassCastException when creating a remote interface

by Remy Maucherat (JIRA)

[ https://jira.jboss.org/jira/browse/JBAS-7699?page=com.atlassian.jira.plug... ] Remy Maucherat moved JBWEB-60 to JBAS-7699: ------------------------------------------- Project: JBoss Application Server (was: JBoss Web) Key: JBAS-7699 (was: JBWEB-60) > java.lang.ClassCastException when creating a remote interface > ------------------------------------------------------------- > > Key: JBAS-7699 > URL: https://jira.jboss.org/jira/browse/JBAS-7699 > Project: JBoss Application Server > Issue Type: Bug > Security Level: Public(Everyone can see) > Environment: Unix > apache > jboss 4.0.3 > jdk1.5.0_06 > Reporter: Leon James > Assignee: Remy Maucherat > > I deploy a ear on my web jboss server(4.0.3),it contains a web module and EJBs. > when I try to creating a remote interface ,it occurs a exception, > Source code: > firstServlet.java > ...... > Hashtable env=System.getProperties(); > env.put(Context.INITIAL_CONTEXT_FACTORY,"org.jnp.interfaces.NamingContextFactory"); > env.put(Context.PROVIDER_URL,"jnp://localhost"); > Context ctx=new InitialContext(); > Object obj=ctx.lookup("Test"); > TestHome th=(TestHome)PortableRemoteObject.narrow(obj,TestHome.class); > Test t=th.create(); // line 35 > out.println(t.SayHello()); > ....... > TestBean.java: > import javax.ejb.SessionBean; > import javax.ejb.SessionContext; > import javax.ejb.CreateException; > public class TestBean implements SessionBean { > SessionContext sessionContext; > public void ejbCreate() throws CreateException { > } > public void ejbRemove() { > } > public void ejbActivate() { > } > public void ejbPassivate() { > } > public void setSessionContext(SessionContext sessionContext) { > this.sessionContext = sessionContext; > } > public String SayHello() { > return "Hello World!"; > } > } > and exception: > java.lang.ClassCastException: $Proxy51 at linuxtext.s3.doGet(s3.java:35) at javax.servlet.http.HttpServlet.service(HttpServlet.java:697) at javax.servlet.http.HttpServlet.service(HttpServlet.java:810) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:252) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:173) at org.jboss.web.tomcat.filters.ReplyHeaderFilter.doFilter(ReplyHeaderFilter.java:96) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:202) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:173) at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:213) at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:178) at org.jboss.web.tomcat.security.SecurityAssociationValve.invoke(SecurityAssociationValve.java:175) at org.jboss.web.tomcat.security.JaccContextValve.invoke(JaccContextValve.java:74) at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:126) at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:105) at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:107) at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:148) at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:869) at org.apache.coyote.http11.Http11BaseProtocol$Http11ConnectionHandler.processConnection(Http11BaseProtocol.java:664) at org.apache.tomcat.util.net.PoolTcpEndpoint.processSocket(PoolTcpEndpoint.java:527) at org.apache.tomcat.util.net.MasterSlaveWorkerThread.run(MasterSlaveWorkerThread.java:112) at java.lang.Thread.run(Thread.java:595) > what's the problem? > I want to deploy ,need help ! ! ! -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

15 years, 8 months

1
0
0 / 0

[JBoss JIRA] Resolved: (JBWEB-3) Using JAAS to affect forwarded web requests

by Remy Maucherat (JIRA)

[ https://jira.jboss.org/jira/browse/JBWEB-3?page=com.atlassian.jira.plugin... ] Remy Maucherat resolved JBWEB-3. -------------------------------- Fix Version/s: (was: JBossWeb-2.1.7.GA) Resolution: Incomplete Description Not sure if it is still relevant. > Using JAAS to affect forwarded web requests > ------------------------------------------- > > Key: JBWEB-3 > URL: https://jira.jboss.org/jira/browse/JBWEB-3 > Project: JBoss Web > Issue Type: Feature Request > Security Level: Public(Everyone can see) > Components: Core > Reporter: Scott M Stark > Assignee: Remy Maucherat > Priority: Minor > > As described for the following case: > http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=3857340 > users commonly seem to want to be able to affect the web container security context through JAAS login and/or Subject.doAs to set/change the security context for subsequent web requests. We need to look into whether this can be supported. -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

15 years, 8 months

1
0
0 / 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

jboss-jira February 2010