December 2006 - jboss-user - Jboss List Archives

[Javassist user questions] - Re: Illegal class modifiers

by wessan

OK ... this is as much deatils as I can provide: This is an example exception thrown: Exception in thread "main" java.lang.ClassFormatError: Illegal class modifiers in class test/cz/solari/shards/example/app1/EmployeeImpl: 0x431 | at java.lang.ClassLoader.defineClass1(Native Method) | at java.lang.ClassLoader.defineClass(ClassLoader.java:620) | at java.lang.ClassLoader.defineClass(ClassLoader.java:465) | at cz.solari.shards.loader.Loader.findClass(Loader.java:136) | at cz.solari.shards.loader.Loader.loadClass(Loader.java:70) | at java.lang.ClassLoader.loadClass(ClassLoader.java:251) | at java.lang.ClassLoader.loadClassInternal(ClassLoader.java:319) | at test.cz.solari.shards.source.DefaultSourceTest.main(DefaultSourceTest.java:23) | at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) | at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39) | at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25) | at java.lang.reflect.Method.invoke(Method.java:597) It seems that the generated bytecode is incorrect. The code passed to defineClass method is generated using CtClass.toByteCode() method. The class may be altered (fields/methods may be added) by the custom ClassLoader however the class modifiers are never changed. It seems that Javassist doesn't throw any excetion during compilation, just the ClassLoader does. I tried it with both JDK 1.6 and JDK 1.5 with both of them the same exception is thrown. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3992436#3992436 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3992436

19 years, 4 months

1
0
0 / 0

[Security & JAAS/JBoss] - Re: How to secure only some functions of an EJB?

by scott.stark＠jboss.org

The unchecked permission type allows one to access a method without any specific permission. The caller still needs to be an authenticated user, or the security domain configured to allow unauthenticated callers. http://docs.jboss.com/jbossas/guides/j2eeguide/r2/en/html_single/#ch8.cha... View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3992435#3992435 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3992435

19 years, 4 months

1
0
0 / 0

[Security & JAAS/JBoss] - Re: How to get method permission roles from session bean

by scott.stark＠jboss.org

Its not supported from beans. You would have to write a custom interceptor. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3992434#3992434 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3992434

19 years, 4 months

1
0
0 / 0

[Security & JAAS/JBoss] - Re: JAAS newbie - missing something that should be obvious

by scott.stark＠jboss.org

"grego(a)spiekerpoint.com" wrote : | I'm not sure I fully understand the relationship between login-config.xml and client/auth.conf yet. I'm going to see if I can find more documentation on that. I have tried this both with an entry for SPDB in auth.conf and without an entry there, and it doesn't make a difference either way... | There is no relationship other than that credentials obtained from the client jaas configuration(auth.conf) are propagated to the server by the invocation transport and need to be valid in the target ejb security domain jaas config(login-config.xml). See: http://docs.jboss.com/jbossas/guides/j2eeguide/r2/en/html_single/#ch8.cha... View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3992433#3992433 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3992433

19 years, 4 months

1
0
0 / 0

[Security & JAAS/JBoss] - Re: JBoss JAAs Architecture question

by scott.stark＠jboss.org

Servlet filters do not participate in authentication decisions. You need to use a tomcat valve to do this. http://wiki.jboss.org/wiki/Wiki.jsp?page=CustomizingSecurityUsingValves View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3992432#3992432 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3992432

19 years, 4 months

1
0
0 / 0

[Security & JAAS/JBoss] - Re: JAAS doAs()

by scott.stark＠jboss.org

There is no requirement, but define the usecase in question. You can configure the use of Subject.doAs by using subject based permissions with a security manager. However, jboss containers are not going to automatically map existing authorization checks to jacc permissions. If jacc is being used, and a security manager is in use, it should just work. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3992431#3992431 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3992431

19 years, 4 months

1
0
0 / 0

[Security & JAAS/JBoss] - Re: Custum LoginModule calling EJB in non-default security d

by scott.stark＠jboss.org

A login module in domain1 cannot call a secured ejb in domain1. You can specify the security domain at the bean level using the container-configuration setup of jboss.xml: | <jboss> | <enterprise-beans> | <entity> | <ejb-name>AuditMappedEJB</ejb-name> | <local-jndi-name>cmp2/audit/AuditMapped</local-jndi-name> | <configuration-name>Secured CMP 2.x EnitityBean</configuration-name> | </entity> | </enterprise-beans> | | <container-configurations> | <container-configuration extends="Standard CMP 2.x EntityBean"> | <container-name>Secured CMP 2.x EnitityBean</container-name> | <security-domain>java:/jaas/other</security-domain> | </container-configuration> | </container-configurations> | </jboss> | View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3992430#3992430 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3992430

19 years, 4 months

1
0
0 / 0

[Security & JAAS/JBoss] - Re: how to disable password-stacking property

by scott.stark＠jboss.org

Remove the module-option View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3992429#3992429 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3992429

19 years, 4 months

1
0
0 / 0

[JBoss Seam] - Problems with "hibernate.hbm2ddl.auto" property set to updat

by toni

Hi, I noticed that my webapp stops working, when I change the "hibernate.hbm2ddl.auto" property of my persitence.xml file from "create-drop" to "update". This used to work before and now I get the following exceptions, when I try to retrieve a set of entities to populate a DataModel for rendering a JSF Table in a JSP page: Caused by: javax.faces.el.EvaluationException: Bean: $Proxy663, property: dataModel ... 56 more Caused by: javax.ejb.EJBTransactionRolledbackException: ... 61 more Caused by: java.lang.ClassCastException: java.lang.String If I set the property to "create-drop" I can use the webapplication an get NO errors? Does anybody know what could be the cause? View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3992428#3992428 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3992428

19 years, 4 months

1
0
0 / 0

[Security & JAAS/JBoss] - Re: Obtaining SecurityManagerService failed jboss4.x

by scott.stark＠jboss.org

You most likely have jboss jars in you web app. There should never be any jboss server jars in application deployments. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3992427#3992427 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3992427

19 years, 4 months

1
0
0 / 0

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

jboss-user December 2006