January 2007 - jboss-user - Jboss List Archives

[JBoss Portal] - Re: Securing the Default Page

by dexxa

How do you customize the login page? (version 2.6) View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4004957#4004957 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4004957

19 years, 3 months

1
0
0 / 0

[Security & JAAS/JBoss] - 3.2.0 to 4.0.5 causes failure when trying to access secure E

by pcarrollnf

I upgraded from JBoss3.2.0 to 4.0.5. I am using FORM based authentication. I have a custom login module that entends DatabaseServerLoginModule. I am able to login to the web application correctly. All the correct roles are assigned to the user. However, when I access a secured method in one of my EJB's, the principal is null. Here is the error I am receiving: java.rmi.AccessException: SecurityException; nested exception is: java.lang.SecurityException: Insufficient method permissions, principal=null, ejbName=IndexingManager, method=create, interface=HOME, requiredRoles=[INDEX], principalRoles=[ANONYMOUS, PARTNER] It gives me the ANONYMOUS and PARTNER roles because these are the roles associated with the unauthenticatedIdentity. Here is my login-config.xml: <application-policy name = "myRealm"> | <authentication> | <login-module code="com.pcarrollnf.appserver.jboss.security.CustomLoginModule" flag="required"> | <module-option name = "unauthenticatedIdentity">anonymous</module-option> | <module-option name = "dsJndiName">java:/jdbc/myRealm</module-option> | <module-option name = "principalsQuery">SELECT A.PASSWORD FROM USERS A WHERE A.IS_ENABLED = 1 AND A.USER_NAME = ? AND ( A.EXPIRATION_DATE IS NULL OR A.EXPIRATION_DATE >= ? )</module-option> | <module-option name = "rolesQuery">SELECT DISTINCT A.USER_NAME, C.ROLE_NAME FROM USER_GROUP A, ROLE_GROUP B, ROLES C WHERE A.USER_NAME = ? AND A.GROUP_ID = B.GROUP_ID AND B.ROLE_ID = C.ROLE_ID</module-option> | </login-module> | </authentication> | </application-policy> | I tried adding: <login-module code = "org.jboss.security.ClientLoginModule" flag = "required"></login-module> as the last login module in the myRealm policy but this did not work. Here is a snippet from my web.xml <login-config> | <auth-method>FORM</auth-method> | <realm-name>DefaultRealm</realm-name> | <form-login-config> | <form-login-page>/login.do</form-login-page> | <form-error-page>/loginError.do</form-error-page> | </form-login-config> | </login-config> | | <security-role> | <role-name>ADMIN</role-name> | </security-role> | <security-role> | <role-name>CONFIG</role-name> | </security-role> | <security-role> | <role-name>INDEX</role-name> | </security-role> | <security-role> | <role-name>PUBLISH</role-name> | </security-role> | <security-role> | <role-name>USER</role-name> | </security-role> | <security-role> | <role-name>PARTNER</role-name> | </security-role> | <security-role> | <role-name>ANONYMOUS</role-name> | </security-role> Here is my ejb-jar.xml: <ejb-jar> | <enterprise-beans> | | <session> | <ejb-name>IndexingManager</ejb-name> | <home>com.pcarrollnf.indexing.api.IndexingManagerHome</home> | <remote>com.pcarrollnf.indexing.api.IndexingManager</remote> | <ejb-class>com.pcarrollnf.indexing.ejb.IndexingManagerBean</ejb-class> | <session-type>Stateless</session-type> | <transaction-type>Container</transaction-type> | <ejb-local-ref> | <ejb-ref-name>ejb/DocumentSchemaAttribute</ejb-ref-name> | <ejb-ref-type>Entity</ejb-ref-type> | <local-home>com.pcarrollnf.schema.ejb.DocumentLocalHome</local-home> | <local>com.digitalpaper.pcarrollnf.ejb.DocumentLocal</local> | <ejb-link>Document</ejb-link> | </ejb-local-ref> | | <security-identity><use-caller-identity/></security-identity> | </session> | | <assembly-descriptor> | <security-role> | <role-name>INDEX</role-name> | </security-role> | | <method-permission> | <role-name>INDEX</role-name> | <method> | <ejb-name>IndexingManager</ejb-name> | <method-name>*</method-name> | </method> | </method-permission> | | <container-transaction> | <method> | <ejb-name>IndexingManager</ejb-name> | <method-name>*</method-name> | </method> | <trans-attribute>Required</trans-attribute> | </container-transaction> | </assembly-descriptor> | </ejb-jar> Here is my jboss.xml: <jboss> | <security-domain>java:/jaas/myRealm</security-domain> | <enterprise-beans> | <session> | <ejb-name>IndexingManager</ejb-name> | <jndi-name>indexing/IndexingManager</jndi-name> | <configuration-name>Standard Stateless SessionBean</configuration-name> | </session> | </enterprise-beans> | <container-configurations> | <container-configuration extends="Standard CMP 2.x EntityBean"> | <container-name>CMP 2.x and Cache</container-name> | <commit-option>D</commit-option> | <optiond-refresh-rate>300</optiond-refresh-rate> | </container-configuration> | </container-configurations> | </jboss> Any help would be appreciated. If you need me to post more information, please let me know. Thanks. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4004955#4004955 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4004955

19 years, 3 months

1
0
0 / 0

[Installation, Configuration & Deployment] - Re: Shared classpath within an EAR?

by bhar99328

I apologize if I've missed the answer to this question elsewhere, but does JBoss-5.0.0-Beta1 support the JEE 5 /lib directory in the root of ear file? I have a JEE 5 application that I've been using on glassfish, with shared library jars in the /lib folder of the ear file, but I am unable to deploy this application on JBoss 5... I get a NoClassDefFound exception for each class in the shared library jars (during deployment of EJBs). I'd just like to know if I still have to do the ear's manifest Class-Path thing... ... And I'd much rather be using JBoss... Thanks in advance! View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4004954#4004954 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4004954

19 years, 3 months

1
0
0 / 0

[JBossCache] - Re: JBossCache with Firebird (using Jaybird driver)

by ryanlecompte

This problem went away from I upgraded from Firebird 1.5 to Firebird 2.0. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4004950#4004950 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4004950

19 years, 3 months

1
0
0 / 0

[JBoss Seam] - Re: Seam & Maven2

by gavin.king＠jboss.com

I thought that E-EJB3 is distributed with both choices: the bundles jars, and a dir full of unbundled jars...? The versions of jars used in Seam are always from the E-EJB3 release. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4004949#4004949 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4004949

19 years, 3 months

1
0
0 / 0

[JBoss Seam] - Re: PersistenceContext in distributed environment

by gavin.king＠jboss.com

Seam-managed persistence contexts only work in the web tier. We have no mechanism for propagating the conversation context over RMI. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4004948#4004948 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4004948

19 years, 3 months

1
0
0 / 0

[Installation, Configuration & Deployment] - Re: jboss-service.xml in version 4.0.5

by dimitris＠jboss.org

Just ignore the DEBUG message. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4004947#4004947 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4004947

19 years, 3 months

1
0
0 / 0

[JBoss jBPM] - Re: Process Definition Deployment in jbpm-starters-kit-3.1.3

by koen.aers＠jboss.com

Hi Christopher, Can we have a peek at your processdefinition.xml? You probably forgot to add a task to your start state. Regards, Koen View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4004945#4004945 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4004945

19 years, 3 months

1
0
0 / 0

[JBoss jBPM] - Re: User integration with the web app?

by zipwow

Thanks kukeltje! Where can I get the 3.2 version? I'm fine with alpha software, just can't find the link. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4004943#4004943 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4004943

19 years, 3 months

1
0
0 / 0

[Installation, Configuration & Deployment] - .jar file location, CLASSPATH problem?

by Warlock

Hi to all, I have a problem with my jar files which are located under my deployed application in the WEB-INF/lib folder. I tried to get ajax4jsf working and put the .jar files under WEB-INF/lib following the documentation of ajax4jsf. But I got an ClassNotFoundException. Then I moved the .jar file inside the servers lib directory (jbosshome/server/default/lib) and my application works. I often had this situation where the jar files must be located under jbosshome/server/default/lib. Normally I place all the specific jars in the WEB-INF/lib dir of my deployed application. I remember that I had to place the following other files in the servers lib dir as well: - hibernate-annotations.jar - ejb3-persistence.jar So...it seems that it isn't due to specific jar files. Am I doing something wrong? Please help. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4004941#4004941 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4004941

19 years, 3 months

1
0
0 / 0

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

jboss-user January 2007