[Security & JAAS/JBoss] - Re: In valve getRemoteUser value returned as NULL always
by twittemb
hello all ...
i'm facing exactely the same problem. I've developed my own clustered sso mecanism. I have an SSO Valve that gets the Principal from a distributed authentication cache (handle by JGroups) and call the request.setUserPrincipal() in order to authenticate it.
But when the request is adress to a server on which the user has never been authenticated, although the SSOValve do its job, I have this NullPointerException that is raised. I assum that this is because the server's JBossSecurityMgrRealm roleMap does not map the principal with a JBossGenericPrincipal.
I have tried to force the authenticate(string, string) method of the JBossSecurityMgrRealm .... but that gives à Null Principal because there is no securityContext available thru JNDI !!!
How can i do to force silent authentication in order to build a JBossGenericPrincipal that will be put in the roleMap ???
I Assume that the JBoss ClusteredSingleSignOn Valve work properly ... apparently it has a mecanism that is close to my own valve .... so what is the real difference ???
thanks a lot for your help scott. See ya !
PS : Sorry for my poor english !
View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3959674#3959674
Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3959674
19 years, 9 months
[Security & JAAS/JBoss] - Cannot get my custom principal returned by sessioncontext.ge
by dweil
We use a custom login module. It is not derived from UsersRolesLoginModule for various reasons.
We try to register our custom principal as caller principal by creating a group called 'CallerPrincipal', adding our custom principal to it. Nevertheless getCallerPrincipal in EJBs returns the default principal of type org.jboss.security.SimplePrincipal.
This is the code of the login module:
| public boolean login() throws LoginException {
| ...
| this.subjectPrincipals = new HashSet();
| MyPrincipal myPrincipal = new MyPrincipal(principalName);
| this.subjectPrincipals.add(myPrincipal);
|
| Group callerPrincipalGroup = new MyGroup("CallerPrincipal");
| callerPrincipalGroup.addMember(myPrincipal);
| this.subjectPrincipals.add(callerPrincipalGroup);
|
| Group roles = new MyGroup("Roles");
| ... // Fill in roles
| this.subjectPrincipals.add(roles);
| ...
| }
|
| public boolean commit() throws LoginException {
| this.subject.getPrincipals().addAll(this.subjectPrincipals);
| return true;
| }
|
What is wrong? How can I get the principal created by new MyPrincipal(...) as return value of ejbContext.getCallerPrincipal()?
Thank you!
View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3959670#3959670
Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3959670
19 years, 9 months
[JBoss Portal] - How do I change from session to request?
by mwelch16
Hello All,
I am running the hello world faces portlet example using the MyFacesGenericPortlet class. I changed the scope for my bean to request and updated the concatenateNames() method to get the first and last name out of the context, but I am getting a class cast exception. This worked fine when it was in the session scope. I am using jboss-portal-2.2.1-SP2-bundled version of the portal. Please help.
Thanks,
Mark
faces-config.xml setting:
| <managed-bean-scope>request</managed-bean-scope>
|
jsp:
| <%@ taglib uri="http://java.sun.com/jsf/html" prefix="h" %>
| <%@ taglib uri="http://java.sun.com/jsf/core" prefix="f" %>
|
| <f:view>
| <div align="center">
| <h:form id="helloForm">
| <h:panelGrid columns="2">
| <h:outputText styleClass="portlet-font" value="First Name:"/>
| <h:inputText value="#{user.firstname}" align="center" required="true" id="firstName"/>
| <h:outputText styleClass="portlet-font" value="Last Name:"/>
| <h:inputText value="#{user.lastname}" align="center" required="true" id="lastName"/>
| </h:panelGrid>
| <br/>
| <h:commandButton action="#{user.concatenateNames}" value="Next"/>
| </h:form>
| </div>
| </f:view>
|
ConcatenateNames method:
| public String concatenateNames() {
| FacesContext context = FacesContext.getCurrentInstance();
| HttpServletRequest request = (HttpServletRequest) context.getExternalContext().getRequest();
| String firstNameConcat = request.getParameter("helloForm:firstName");
| String lastNameConcat = request.getParameter("helloForm:lastName");
|
| setFullname(firstNameConcat + " " + lastNameConcat);
| return "done";
| }
|
Exeption:
|
| avax.faces.FacesException: Error calling action method of component with id helloForm:jbp4641925_id3
| at org.apache.myfaces.application.ActionListenerImpl.processAction(ActionListenerImpl.java:74)
| at javax.faces.component.UICommand.broadcast(UICommand.java:106)
| at javax.faces.component.UIViewRoot._broadcastForPhase(UIViewRoot.java:90)
| at javax.faces.component.UIViewRoot.processApplication(UIViewRoot.java:164)
| at org.apache.myfaces.lifecycle.LifecycleImpl.invokeApplication(LifecycleImpl.java:316)
| at org.apache.myfaces.lifecycle.LifecycleImpl.execute(LifecycleImpl.java:86)
| at org.apache.myfaces.portlet.MyFacesGenericPortlet.processAction(MyFacesGenericPortlet.java:221)
| at org.jboss.portal.portlet.PortletContainer.invokeAction(PortletContainer.java:492)
| at org.jboss.portal.portlet.PortletContainer.dispatch(PortletContainer.java:428)
| at org.jboss.portal.server.app.ComponentInvocation.dispatch(ComponentInvocation.java:79)
| at org.jboss.portal.server.invocation.Invocation.invokeNext(Invocation.java:140)
| at org.jboss.portal.core.aspects.component.TransactionInterceptor.invoke(TransactionInterceptor.java:72)
| at org.jboss.portal.server.app.ComponentInterceptor.invoke(ComponentInterceptor.java:38)
| at org.jboss.portal.server.invocation.Invocation.invokeNext(Invocation.java:130)
| at org.jboss.portal.core.aspects.component.HeaderInterceptor.invoke(HeaderInterceptor.java:50)
| at org.jboss.portal.server.app.ComponentInterceptor.invoke(ComponentInterceptor.java:38)
| at org.jboss.portal.server.invocation.Invocation.invokeNext(Invocation.java:130)
| at org.jboss.portal.server.aspects.component.NavigationInterceptor.invoke(NavigationInterceptor.java:76)
| at org.jboss.portal.server.app.ComponentInterceptor.invoke(ComponentInterceptor.java:38)
| at org.jboss.portal.server.invocation.Invocation.invokeNext(Invocation.java:130)
| at org.jboss.portal.server.aspects.component.CacheInterceptor.invoke(CacheInterceptor.java:167)
| at org.jboss.portal.server.app.ComponentInterceptor.invoke(ComponentInterceptor.java:38)
| at org.jboss.portal.server.invocation.Invocation.invokeNext(Invocation.java:130)
| at org.jboss.portal.server.aspects.component.ModesInterceptor.invoke(ModesInterceptor.java:88)
| at org.jboss.portal.server.app.ComponentInterceptor.invoke(ComponentInterceptor.java:38)
| at org.jboss.portal.server.invocation.Invocation.invokeNext(Invocation.java:130)
| at org.jboss.portal.server.aspects.component.WindowStatesInterceptor.invoke(WindowStatesInterceptor.java:87)
| at org.jboss.portal.server.app.ComponentInterceptor.invoke(ComponentInterceptor.java:38)
| at org.jboss.portal.server.invocation.Invocation.invokeNext(Invocation.java:130)
| at org.jboss.portal.bridge.BridgeInterceptor.invoke(BridgeInterceptor.java:49)
| at org.jboss.portal.server.app.ComponentInterceptor.invoke(ComponentInterceptor.java:38)
| at org.jboss.portal.server.invocation.Invocation.invokeNext(Invocation.java:130)
| at org.jboss.portal.portlet.aspects.component.SessionPostDispatchInterceptor.invoke(SessionPostDispatchInterceptor.java:65)
| at org.jboss.portal.server.app.ComponentInterceptor.invoke(ComponentInterceptor.java:38)
| at org.jboss.portal.server.invocation.Invocation.invokeNext(Invocation.java:130)
| at org.jboss.portal.server.aspects.component.ContextDispatcherInterceptor$InvokeNextCommand.execute(ContextDispatcherInterceptor.java:129)
| at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
| at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
| at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
| at java.lang.reflect.Method.invoke(Method.java:585)
| at org.jboss.portal.server.servlet.CommandServlet.doGet(CommandServlet.java:101)
| at org.jboss.portal.server.servlet.CommandServlet.doPost(CommandServlet.java:149)
| at javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
| at javax.servlet.http.HttpServlet.service(HttpServlet.java:810)
| at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:252)
| at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:173)
| at org.apache.catalina.core.ApplicationDispatcher.invoke(ApplicationDispatcher.java:672)
| at org.apache.catalina.core.ApplicationDispatcher.doInclude(ApplicationDispatcher.java:539)
| at org.apache.catalina.core.ApplicationDispatcher.include(ApplicationDispatcher.java:499)
| at org.jboss.portal.server.app.impl.AbstractRequestContext.include(AbstractRequestContext.java:247)
| at org.jboss.portal.server.aspects.component.ContextDispatcherInterceptor$1.include(ContextDispatcherInterceptor.java:73)
| at org.jboss.portal.server.servlet.CommandServlet.include(CommandServlet.java:81)
| at org.jboss.portal.server.aspects.component.ContextDispatcherInterceptor.invoke(ContextDispatcherInterceptor.java:79)
| at org.jboss.portal.server.app.ComponentInterceptor.invoke(ComponentInterceptor.java:38)
| at org.jboss.portal.server.invocation.Invocation.invokeNext(Invocation.java:130)
| at org.jboss.portal.portlet.aspects.component.SessionPreDispatchInterceptor.invoke(SessionPreDispatchInterceptor.java:94)
| at org.jboss.portal.server.app.ComponentInterceptor.invoke(ComponentInterceptor.java:38)
| at org.jboss.portal.server.invocation.Invocation.invokeNext(Invocation.java:130)
| at org.jboss.portal.server.aspects.component.ContextTrackerInterceptor.invoke(ContextTrackerInterceptor.java:49)
| at org.jboss.portal.server.app.ComponentInterceptor.invoke(ComponentInterceptor.java:38)
| at org.jboss.portal.server.invocation.Invocation.invokeNext(Invocation.java:130)
| at org.jboss.portal.portlet.aspects.component.SecureTransportInterceptor.invoke(SecureTransportInterceptor.java:69)
| at org.jboss.portal.server.app.ComponentInterceptor.invoke(ComponentInterceptor.java:38)
| at org.jboss.portal.server.invocation.Invocation.invokeNext(Invocation.java:130)
| at org.jboss.portal.portlet.aspects.component.ValveInterceptor.invoke(ValveInterceptor.java:64)
| at org.jboss.portal.server.app.ComponentInterceptor.invoke(ComponentInterceptor.java:38)
| at org.jboss.portal.server.invocation.Invocation.invokeNext(Invocation.java:130)
| at org.jboss.portal.server.invocation.Invocation.invoke(Invocation.java:175)
| at org.jboss.portal.core.command.InvokeWindowActionCommand.execute(InvokeWindowActionCommand.java:134)
| at org.jboss.portal.core.command.ControllerCommand.dispatch(ControllerCommand.java:78)
| at org.jboss.portal.server.invocation.Invocation.invokeNext(Invocation.java:140)
| at org.jboss.portal.core.aspects.controller.EventBroadcasterInterceptor.invoke(EventBroadcasterInterceptor.java:85)
| at org.jboss.portal.core.command.CommandInterceptor.invoke(CommandInterceptor.java:38)
| at org.jboss.portal.server.invocation.Invocation.invokeNext(Invocation.java:130)
| at org.jboss.portal.core.aspects.controller.PolicyEnforcementInterceptor.invoke(PolicyEnforcementInterceptor.java:168)
| at org.jboss.portal.core.command.CommandInterceptor.invoke(CommandInterceptor.java:38)
| at org.jboss.portal.server.invocation.Invocation.invokeNext(Invocation.java:130)
| at org.jboss.portal.core.aspects.controller.PortalNodeInterceptor.invoke(PortalNodeInterceptor.java:61)
| at org.jboss.portal.core.command.CommandInterceptor.invoke(CommandInterceptor.java:38)
| at org.jboss.portal.server.invocation.Invocation.invokeNext(Invocation.java:130)
| at org.jboss.portal.core.aspects.controller.NavigationInterceptor.invoke(NavigationInterceptor.java:58)
| at org.jboss.portal.core.command.CommandInterceptor.invoke(CommandInterceptor.java:38)
| at org.jboss.portal.server.invocation.Invocation.invokeNext(Invocation.java:130)
| at org.jboss.portal.server.invocation.Invocation.invoke(Invocation.java:175)
| at org.jboss.portal.core.command.CommandContext.execute(CommandContext.java:107)
| at org.jboss.portal.core.command.ExecutionContext.execute(ExecutionContext.java:93)
| at org.jboss.portal.core.command.ExecutionContext.execute(ExecutionContext.java:77)
| at org.jboss.portal.core.CoreController.handle(CoreController.java:190)
| at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
| at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
| at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
| at java.lang.reflect.Method.invoke(Method.java:585)
| at org.jboss.mx.interceptor.ReflectedDispatcher.invoke(ReflectedDispatcher.java:155)
| at org.jboss.mx.server.Invocation.dispatch(Invocation.java:94)
| at org.jboss.mx.interceptor.AbstractInterceptor.invoke(AbstractInterceptor.java:133)
| at org.jboss.mx.server.Invocation.invoke(Invocation.java:88)
| at org.jboss.mx.interceptor.ModelMBeanOperationInterceptor.invoke(ModelMBeanOperationInterceptor.java:142)
| at org.jboss.mx.server.Invocation.invoke(Invocation.java:88)
| at org.jboss.mx.server.AbstractMBeanInvoker.invoke(AbstractMBeanInvoker.java:264)
| at org.jboss.mx.server.MBeanServerImpl.invoke(MBeanServerImpl.java:659)
| at org.jboss.mx.util.JMXInvocationHandler.invoke(JMXInvocationHandler.java:287)
| at $Proxy136.handle(Unknown Source)
| at org.jboss.portal.server.ServerInvocation.dispatch(ServerInvocation.java:76)
| at org.jboss.portal.server.invocation.Invocation.invokeNext(Invocation.java:140)
| at org.jboss.portal.core.aspects.server.SubjectAssociationInterceptor.invoke(SubjectAssociationInterceptor.java:47)
| at org.jboss.portal.server.ServerInterceptor.invoke(ServerInterceptor.java:38)
| at org.jboss.portal.server.invocation.Invocation.invokeNext(Invocation.java:130)
| at org.jboss.portal.core.aspects.server.PolicyAssociationInterceptor.invoke(PolicyAssociationInterceptor.java:52)
| at org.jboss.portal.server.ServerInterceptor.invoke(ServerInterceptor.java:38)
| at org.jboss.portal.server.invocation.Invocation.invokeNext(Invocation.java:130)
| at org.jboss.portal.server.aspects.server.ContentTypeInterceptor.invoke(ContentTypeInterceptor.java:68)
| at org.jboss.portal.server.ServerInterceptor.invoke(ServerInterceptor.java:38)
| at org.jboss.portal.server.invocation.Invocation.invokeNext(Invocation.java:130)
| at org.jboss.portal.core.aspects.server.LocaleInterceptor.invoke(LocaleInterceptor.java:69)
| at org.jboss.portal.server.ServerInterceptor.invoke(ServerInterceptor.java:38)
| at org.jboss.portal.server.invocation.Invocation.invokeNext(Invocation.java:130)
| at org.jboss.portal.core.aspects.server.UserInterceptor.invoke(UserInterceptor.java:184)
| at org.jboss.portal.server.ServerInterceptor.invoke(ServerInterceptor.java:38)
| at org.jboss.portal.server.invocation.Invocation.invokeNext(Invocation.java:130)
| at org.jboss.portal.server.aspects.server.SessionInvalidatorInterceptor.invoke(SessionInvalidatorInterceptor.java:87)
| at org.jboss.portal.server.ServerInterceptor.invoke(ServerInterceptor.java:38)
| at org.jboss.portal.server.invocation.Invocation.invokeNext(Invocation.java:130)
| at org.jboss.portal.core.aspects.server.TransactionInterceptor.invoke(TransactionInterceptor.java:75)
| at org.jboss.portal.server.ServerInterceptor.invoke(ServerInterceptor.java:38)
| at org.jboss.portal.server.invocation.Invocation.invokeNext(Invocation.java:130)
| at org.jboss.portal.server.invocation.Invocation.invoke(Invocation.java:175)
| at org.jboss.portal.server.servlet.PortalServlet.doGet(PortalServlet.java:221)
| at org.jboss.portal.server.servlet.PortalServlet.doPost(PortalServlet.java:149)
| at javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
| at javax.servlet.http.HttpServlet.service(HttpServlet.java:810)
| at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:252)
| at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:173)
| at org.jboss.web.tomcat.filters.ReplyHeaderFilter.doFilter(ReplyHeaderFilter.java:96)
| at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:202)
| at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:173)
| at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:213)
| at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:178)
| at org.jboss.web.tomcat.security.SecurityAssociationValve.invoke(SecurityAssociationValve.java:175)
| at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:432)
| at org.jboss.web.tomcat.security.JaccContextValve.invoke(JaccContextValve.java:74)
| at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:126)
| at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:105)
| at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:107)
| at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:148)
| at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:869)
| at org.apache.coyote.http11.Http11BaseProtocol$Http11ConnectionHandler.processConnection(Http11BaseProtocol.java:664)
| at org.apache.tomcat.util.net.PoolTcpEndpoint.processSocket(PoolTcpEndpoint.java:527)
| at org.apache.tomcat.util.net.MasterSlaveWorkerThread.run(MasterSlaveWorkerThread.java:112)
| at java.lang.Thread.run(Thread.java:595)
| Caused by: javax.faces.el.EvaluationException: Exception while invoking expression #{user.concatenateNames}
| at org.apache.myfaces.el.MethodBindingImpl.invoke(MethodBindingImpl.java:153)
| at org.apache.myfaces.application.ActionListenerImpl.processAction(ActionListenerImpl.java:63)
| ... 148 more
| Caused by: java.lang.ClassCastException: org.jboss.portlet.JBossActionRequest
| at com.nielsenmedia.foundations.faces.beans.User.concatenateNames(User.java:38)
| at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
| at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
| at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
| at java.lang.reflect.Method.invoke(Method.java:585)
| at org.apache.myfaces.el.MethodBindingImpl.invoke(MethodBindingImpl.java:129)
| ... 149 more
|
View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3959667#3959667
Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3959667
19 years, 9 months