RealmBase->findSecurityConstraints throws NPE --------------------------------------------- Key: JBAS-6811 URL: https://jira.jboss.org/jira/browse/JBAS-6811 Project: JBoss Application Server Issue Type: Bug Security Level: Public (Everyone can see) Components: Web (Tomcat) service Reporter: Anil Saldhana Assignee: Jean-Frederic Clere Fix For: JBossAS-5.1.0.GA When you deploy the attached web application, you will see a NPE as follows: =============================== 20:01:06,311 ERROR [CoyoteAdapter] An exception or error occurred in the container during the request processing java.lang.NullPointerException at org.apache.catalina.realm.RealmBase.findSecurityConstraints(RealmBase.java:502) at org.jboss.web.tomcat.security.JBossWebRealm.findSecurityConstraints(JBossWebRealm.java:459) at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:426) at org.jboss.web.tomcat.security.JaccContextValve.invoke(JaccContextValve.java:92) at org.jboss.web.tomcat.security.SecurityContextEstablishmentValve.process(SecurityContextEstablishmentValve.java:126) at org.jboss.web.tomcat.security.SecurityContextEstablishmentValve.invoke(SecurityContextEstablishmentValve.java:70) at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127) at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102) at org.jboss.web.tomcat.service.jca.CachedConnectionValve.invoke(CachedConnectionValve.java:158) at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109) at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:330) at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:829) at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:601) at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:447) at java.lang.Thread.run(Thread.java:595) ================================================ The line that is failing in RealmBase is: =================================================== // Check each defined security constraint String uri = request.getRequestPathMB().toString(); ================================================= after this line, the url becomes null. -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira