November 2006 - jboss-user - Jboss List Archives

[JBossWS] - Re: ws-security: Problem using encryption

by brianshields

Quick addition to the above post...the error posted was the SOAPException as it was received in the client. The following is the server error | 13:26:55,687 ERROR [SOAPFaultExceptionHelper] SOAP request exception | javax.xml.rpc.JAXRPCException: Cannot find child element: String_1 | at org.jboss.ws.binding.soap.SOAPBindingProvider.getParameterFromMessage(SOAPBindingProvider.java:809) | at org.jboss.ws.binding.soap.SOAPBindingProvider.unbindRequestMessage(SOAPBindingProvider.java:266) | at org.jboss.ws.server.ServiceEndpointInvoker.invoke(ServiceEndpointInvoker.java:115) | at org.jboss.ws.server.ServiceEndpoint.handleRequest(ServiceEndpoint.java:234) | at org.jboss.ws.server.ServiceEndpointServlet.doPost(ServiceEndpointServlet.java:120) | at javax.servlet.http.HttpServlet.service(HttpServlet.java:717) | at javax.servlet.http.HttpServlet.service(HttpServlet.java:810) | at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:252) | at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:173) | at org.jboss.web.tomcat.filters.ReplyHeaderFilter.doFilter(ReplyHeaderFilter.java:96) | at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:202) | at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:173) | at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:213) | at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:178) | at org.jboss.web.tomcat.security.SecurityAssociationValve.invoke(SecurityAssociationValve.java:175) | at org.jboss.web.tomcat.security.JaccContextValve.invoke(JaccContextValve.java:74) | at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:126) | at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:105) | at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:107) | at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:148) | at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:869) | at org.apache.coyote.http11.Http11BaseProtocol$Http11ConnectionHandler.processConnection(Http11BaseProtocol.java:664) | at org.apache.tomcat.util.net.PoolTcpEndpoint.processSocket(PoolTcpEndpoint.java:527) | at org.apache.tomcat.util.net.MasterSlaveWorkerThread.run(MasterSlaveWorkerThread.java:112) | at java.lang.Thread.run(Thread.java:595) | Brian View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3983224#3983224 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3983224

19 years, 6 months

1
0
0 / 0

[Security & JAAS/JBoss] - Re: Jboss SSO Web Application

by sohil.shah＠jboss.com

Nipun- Feedback like this is always welcome from the community... I agree that the LoginProvider needs to evolve and feedback from community will help with that effort. Thanks again Sohil View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3983223#3983223 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3983223

19 years, 6 months

1
0
0 / 0

[Security & JAAS/JBoss] - Re: Jboss SSO Web Application

by sohil.shah＠jboss.com

Hi Sohil May be I am wrong but I have few suggestions As a user I write my own LoginModule complaint to JAAS, (class extending AbstractServerLoginModule) We all are famliar with JAAS and we know what methods body shd we for Authentication. Even if we use LoginProvider inside JAAS module, login() method makes sense and from JAAS class login method we can call LoginProvider login method, but again like in my application I need more params for user to log in. However the login method in LoginProvider takes only username and password arguments, I can always concatinate other params and send it as username but still, as a user I wont feel comfartable about it. Similarly readAllRoles makes sense and can be linked with readRoleSets of jboss But about other methods of LoginModule like exists, read , were should we hook in thse methods with our custom JAAS code. There should be more explanation about this. Other thing is Identity, it is defined as a class with fixed getter and setter, there is a possibility that user needs more and less getter and setter. Like in normal JAAS we just rrtuen Principal object. May be my understanding here is wrong but this is what came to my mind and I thought that I should share it with you. Please do not think that I am complaining. All you Jboss guys are great and as a user of your products I am always thankful for all the efforts and contribution of jboss teams for the industry. Thanks again for your help Regards Nipun View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3983222#3983222 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3983222

19 years, 6 months

1
0
0 / 0

[Security & JAAS/JBoss] - Re: Jboss SSO Web Application

by sohil.shah＠jboss.com

Hi Sohil Great, it worked for me on both case 1. Application B on local machine 2. Application B on remote machine. Thank you very much for all your help. I really appreciate it. Regards Nipun View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3983221#3983221 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3983221

19 years, 6 months

1
0
0 / 0

[Security & JAAS/JBoss] - Re: Jboss SSO Web Application

by sohil.shah＠jboss.com

Alright....Hook this in as LoginProvider package org.jboss.security.idm.ldap; import java.security.Principal; import java.util.Collection; import java.util.Properties; import org.jboss.security.idm.Identity; import org.jboss.security.idm.IdentityException; import org.jboss.security.idm.LoginProvider; public class DummyLoginProvider implements LoginProvider { private String id = null; public DummyLoginProvider(String id,Properties properties) { super(); this.id = id; } public String getId() throws IdentityException { System.out.println("ID="+this.id); return this.id; } public Identity read(Principal principal) throws IdentityException { return this.read(principal.getName()); } public Identity read(String username) throws IdentityException { Identity identity = new Identity(); identity.setUserName("nick10"); identity.setPassword("nick10".getBytes()); return identity; } public boolean exists(Principal principal) throws IdentityException { return this.exists(principal.getName()); } public boolean exists(String username) throws IdentityException { return true; } public boolean login(Principal principal, byte[] password) throws IdentityException { return true; } public boolean login(String username, byte[] password) throws IdentityException { return false; } public Collection readAllRoles() throws IdentityException { return new java.util.ArrayList(); } } This should make SSO login over to nick2/test.jsp....I see proper Principal in the Console log. Basically: JAAS Module and LoginProvider must both pull same username and password data....Hence, I treat JAAS Module as a Façade for tomcat authentication but use LoginProvider to pull all info in the JAAS module implementation. Since JAAS is pretty intense to configure, I am probably going to add support for non-JAAS logins in the SSO framework soon. Thanks for all your feedback Sohil View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3983220#3983220 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3983220

19 years, 6 months

1
0
0 / 0

[Security & JAAS/JBoss] - Re: Jboss SSO Web Application

by sohil.shah＠jboss.com

Ok, took a quick look. Your problem is related to this: The JAAS module and LoginProvider should both pull identical username and password data. Hence, its best to use a JAAS Module that actually uses the same LoginProvider to get username/password information from the datastore.. The standard JAAS module you are using is pulling username nick10 and password nick10. Is the LoginProvider you hooked in providing the same data (username=nick10 and password=nick10). Easiest way to test this is whatever values for username=nick10 is pulled from the LoginProvider, make those same values in user.properties and test it. Thanks Sohil View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3983219#3983219 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3983219

19 years, 6 months

1
0
0 / 0

[Security & JAAS/JBoss] - Re: JBSSO-7 of Jira:

by sohil.shah＠jboss.com

Hi Sebastian- The dcm4chee tool sounds like a user provisioning tool to manage user/roles using a GUI. The FedSSO Administration tool is actually a tool to manage the Federation Server component of the system. Details: http://labs.jboss.com/portal/index.html?ctrl:cmd=render&ctrl:window=defau... Typical usecases will be, Real-time management of a Federation of partner sites, Adding/Removing partner sites in a federation, Managing Trust configuration of the Federation using Certificates etc. Currently this has to be done via xml based configuration. The requirements for this tool are not finalized yet. Having said that, once development on the tool begins, I surely don't mind if you would like to contribute to the task. Your experience with JSF, SEAM, EJB3 would really come in handy. Will keep you posted. Thanks Sohil View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3983218#3983218 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3983218

19 years, 6 months

1
0
0 / 0

[Security & JAAS/JBoss] - JBSSO-7 of Jira:

by sohil.shah＠jboss.com

-----Original Message----- From: Sebastian Scotti [mailto:sds@internet.com.uy] Sent: Friday, November 03, 2006 7:24 PM To: Sohil Shah Subject: JBSSO-7 of Jira: Hi Sohil, For a project based on jboss (dcm4chee) I worked on the autonomy of a users-module written in ejb3/JSF with Seam I reached a beta stage which allows to: - creat, modify, delete users - assign and change roles for each of them Among the things to improve in my module interface are: -- dynamic data validation, -- graphical design -- paging of the users list (in case they are plenty of them) -- possibiliy of defining new roles directly from the dcm4chee-users module Would you be interested that I improve this work in order to provide a demo for the task JBSSO-7 of Jira: " JSF/JBoss Seam based GUI application that can be used for administering the JBoss FedSSO product. " Best greetings, Seba View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3983217#3983217 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3983217

19 years, 6 months

1
0
0 / 0

[Installation, Configuration & Deployment] - Re: Jboss 3.2.7 running with JDK 1.5 and compiling with JDK

by jaikiran

You should have opened a new thread for your question, since its not related to the original topic. Anyways, here's a step by step guide for installing JBoss 4: http://docs.jboss.org/jbossas/jboss4guide/r1/html/ch01.html View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3983216#3983216 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3983216

19 years, 6 months

1
0
0 / 0

[JBoss Portal] - Re: Customizing CMS Admin Directory browser

by sohil.shah＠jboss.com

Umesh- Fine grained access control on the CMS will be available in Portal 2.6. That should help with your issue. http://jira.jboss.com/jira/browse/JBPORTAL-328 Thanks Sohil View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3983215#3983215 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3983215

19 years, 6 months

1
0
0 / 0

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

jboss-user November 2006