[JBoss Seam] - Seam remoting and security problem
by Stateless Bean
Hi,
I have problem with seam remoting.
My app works fine on FF, but on IE,Avant Browser and Opera 9x, first time when user login and change somethinkg using ajax remoting, user is logouted from page and redirected to main page and "User not logged in" exception is thrown.
Second try do login and change ajax everythink now works fine. Can anyone tell me what is going on?
Here is my configuration:
components.xml
anonymous wrote :
| <?xml version="1.0" encoding="UTF-8"?>
| <components xmlns="http://jboss.com/products/seam/components"
| xmlns:core="http://jboss.com/products/seam/core"
| xmlns:security="http://jboss.com/products/seam/security"
| xmlns:drools="http://jboss.com/products/seam/drools"
| xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
| xsi:schemaLocation=
| "http://jboss.com/products/seam/core http://jboss.com/products/seam/core-1.1.xsd
| http://jboss.com/products/seam/components http://jboss.com/products/seam/components-1.1.xsd
| http://jboss.com/products/seam/security http://jboss.com/products/seam/security-1.1.xsd
| http://jboss.com/products/seam/drools http://jboss.com/products/seam/drools-1.1.xsd">
|
| <core:init jndi-pattern="Universum/#{ejbName}/local" debug="false"/>
|
| <core:manager conversation-timeout="120000"
| concurrent-request-timeout="500"
| conversation-id-parameter="cid"
| conversation-is-long-running-parameter="clr"/>
|
| <core:dispatcher/>
|
| false
| 2
| 1
|
|
| <security:identity authenticate-method="#{authenticator.authenticate}"/>
|
| <drools:rule-base name="securityRules">
| <drools:rule-files>/META-INF/security-rules.drl</drools:rule-files>
| </drools:rule-base>
|
| <component name="em" auto-create="true" class="org.jboss.seam.core.ManagedPersistenceContext">
| java:/sguEntityManagerFactory
|
|
| <core:locale-selector cookie-enabled="true"/>
|
|
pages.xml
| <!DOCTYPE pages PUBLIC
| "-//JBoss/Seam Pages Configuration DTD 1.2//EN"
| "http://jboss.com/products/seam/pages-1.2.dtd">
|
| <pages>
| <page view-id="/blc.xhtml" action="#{engineControler.calcUserPoints}" />
|
| <page view-id="/pages/*">
| <restrict>#{s:hasRole('user')}</restrict>
| <navigation from-action="#{gameAction.logout}">
| <redirect view-id="/Universum.xhtml"/>
| </navigation>
| ....
|
web.xml
| <?xml version="1.0" encoding="UTF-8"?>
| <web-app version="2.4"
| xmlns="http://java.sun.com/xml/ns/j2ee"
| xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
| xsi:schemaLocation="http://java.sun.com/xml/ns/j2ee http://java.sun.com/xml/ns/j2ee/web-app_2_4.xsd">
|
|
| <listener>
| <listener-class>org.jboss.seam.servlet.SeamListener</listener-class>
| </listener>
|
| <listener>
| <listener-class>org.apache.myfaces.webapp.StartupServletContextListener</listener-class>
| </listener>
|
| <context-param>
| <param-name>javax.faces.STATE_SAVING_METHOD</param-name>
| <param-value>client</param-value>
| </context-param>
|
| <context-param>
| <param-name>facelets.DEVELOPMENT</param-name>
| <param-value>true</param-value>
| </context-param>
|
| <context-param>
| <param-name>javax.faces.DEFAULT_SUFFIX</param-name>
| <param-value>.xhtml</param-value>
| </context-param>
|
| <filter>
| <filter-name>Seam Exception Filter</filter-name>
| <filter-class>org.jboss.seam.servlet.SeamExceptionFilter</filter-class>
| </filter>
|
| <filter>
| <filter-name>Seam Redirect Filter</filter-name>
| <filter-class>org.jboss.seam.servlet.SeamRedirectFilter</filter-class>
| </filter>
|
| <filter-mapping>
| <filter-name>Seam Exception Filter</filter-name>
| <url-pattern>*.seam</url-pattern>
| </filter-mapping>
|
| <filter-mapping>
| <filter-name>Seam Redirect Filter</filter-name>
| <url-pattern>*.seam</url-pattern>
| </filter-mapping>
|
| <servlet>
| <servlet-name>Seam Resource Servlet</servlet-name>
| <servlet-class>org.jboss.seam.servlet.ResourceServlet</servlet-class>
| </servlet>
|
| <servlet-mapping>
| <servlet-name>Seam Resource Servlet</servlet-name>
| <url-pattern>/seam/resource/*</url-pattern>
| </servlet-mapping>
|
| <servlet>
| <servlet-name>Faces Servlet</servlet-name>
| <servlet-class>javax.faces.webapp.FacesServlet</servlet-class>
| <load-on-startup>1</load-on-startup>
| </servlet>
|
| <servlet-mapping>
| <servlet-name>Faces Servlet</servlet-name>
| <url-pattern>*.seam</url-pattern>
| </servlet-mapping>
| </web-app>
and my remoting :
method
public List<String mymethod() { }
and in console i added: @WebRemote
For me it looks like security problem,
View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4055156#4055156
Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4055156
19Â years
[Installation, Configuration & Deployment] - Binding Manager
by sradford
Hi,
In the sample binding manager config file: docs/examples/binding-manager/sample-bindings.xml the sections for the JMSProviderLoader don't change the jnp.discoveryPort (it is always 1102). Is this correct?
Thanks,
Sean
| <service-config name="jboss.mq:service=JMSProviderLoader,name=HAJNDIJMSProvider"
| delegateClass="org.jboss.services.binding.AttributeMappingDelegate">
| <!--
| MAKE SURE java.naming.provider.url
| PORT IS SAME AS HA-JNDI ABOVE !!!
| -->
| <delegate-config>
| <attribute name="Properties"><![CDATA[
| java.naming.factory.initial=org.jnp.interfaces.NamingContextFactory
| java.naming.factory.url.pkgs=org.jboss.naming:org.jnp.interfaces
| java.naming.provider.url=${jboss.bind.address:localhost}:1100
| jnp.disableDiscovery=false
| jnp.partitionName=${jboss.partition.name:DefaultPartition}
| jnp.discoveryGroup=${jboss.partition.udpGroup:230.0.0.4}
| jnp.discoveryPort=1102
| jnp.discoveryTTL=16
| jnp.discoveryTimeout=5000
| jnp.maxRetries=1
| ]]>
| </attribute>
| </delegate-config>
| <!-- NOTE: YOU MUST ADD THIS ELEMENT, BUT THE VALUE DOESN'T MATTER
| BE SURE THE CORRECT VALUE IS IN java.naming.provider.url ABOVE -->
| <binding port="1100"/>
| </service-config>
|
View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4055155#4055155
Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4055155
19Â years