July 2007 - jboss-user - Jboss List Archives

[Security & JAAS/JBoss] - stick authentication info to EJB handle?

by nlmarco

Hello *, in our use case, quite a few EJB methods (mostly of stateless session beans) need to communicate with many EJBs on different servers (some on the same server, but then mostly still as different user). Therefore, we want to stick the authentication info to the EJBs, making code like this possible: EjbOfPartner ejbOfPartner1 = EjbOfPartnerUtil.getHome(getInitCtxProps(partner1)).create(); | EjbOfPartner ejbOfPartner2 = EjbOfPartnerUtil.getHome(getInitCtxProps(partner2)).create(); | EjbOfPartner ejbOfPartner3 = EjbOfPartnerUtil.getHome(getInitCtxProps(partner3)).create(); | | ejbOfPartner1.doSomeBusiness(...); | Result result = ejbOfPartner2.doSomethingElse(...); | ejbOfPartner1.doSomethingWithResult(result); | ejbOfPartner3.doWhatever(...); | // ... and so on ... Without this feature, the user of our framework would need to track manually for which EJB handle he needs to be authenticated how; and then login, logout, login, etc. all the time. This makes things extremely error-prone and some code even impossible (e.g. where EJB handles are provided by a factory). Already a while ago, I tried to use org.jboss.security.jndi.LoginInitialContextFactory. But after analysing the source-code ('cause it didn't work), I saw that it doesn't really stick the user data to the EJB handle, but instead only performs a login. Hence, in my above example, the calls to ejbOfPartner1 and 2 fail (if the EJBs are on a remote server) or communicate with partner3 instead of 1/2 (if the EJBs are on the same server). This is, because the user required for partner3 is logged in globally (for all EJB handles) after the last EjbOfPartnerUtil.getHome(...).create(). Therefore, I hacked a workaround consisting of an InitialContextFactory, a Context and an Interceptor. This seemed to work fine for JBoss 3.2.x (not sure anymore, but I think it was 3.2.5). Unfortunately, I didn't work on the code requiring this feature for quite a while and didn't recognize that it broke some time ago. You can find details for my workaround here, btw.: * source * wiki page * issue tracking Now, I need to get it running again, and I was already extremely happy when I saw the new org.jboss.security.jndi.JndiLoginInitialContextFactory which seemed (according to the wiki page) to do exactly what I need. Unfortunately, however, it doesn't :-( and actually behaves in the same wrong way as my workaround does. I tried to set the flags jnp.restoreLoginIdentity and jnp.multi-threaded, but it didn't help. What am I doing wrong? Doesn't JndiLoginInitialContextFactory support what I need? Well, I thought I'll take a look at my workaround again and I saw that the org.jboss.invocation.InvocationContext which I use to pass my auth info, is somehow reused for different EJB handles pointing to different partners (maybe there's a new caching feature?). This leads to wrong authentications :-( Maybe I should add, that multiple partners can be hosted on the same machine and thus connections to different partners can sometimes go to the same server (even locally, i.e. loopback). Is there an easy way to do what I want? Maybe using JndiLoginInitialContextFactory correctly (in case I'm doing this wrong) or using another InitialContextFactory (which one?)... any ideas? If there's no such solution, can you give me hints on how I can pass the information from my own InitialContextFactory to an interceptor? Or is there a totally different and better way to achieve this? Maybe EJB3? Thanks a lot in advance! Best regards, Marco :-) View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4068930#4068930 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4068930

18 years, 8 months

1
0
0 / 0

[JBoss Portal] - ViewRecursive vs PersonalizeRecursive

by swisst

I am using JBoss Portal Server 2.6.1GA on JBoss AS 4.2.1GA... According to the docs: http://docs.jboss.com/jbportal/v2.6/referenceGuide/html/security.html#sec... it seems like PersonalizeRecursive would also include ViewRecursive. However, when I specify PersonalizeRecursive only (for the Admin Role) on the default portal, and then try to login as the admin, I get a 403 error. This error goes away when I additionally specify ViewRecursive. Are the docs wrong or is the implementation wrong, or (most likely) is my understanding of how this should work wrong? View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4068927#4068927 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4068927

18 years, 8 months

1
0
0 / 0

[Beginners Corner] - Re: allowing users to access server-created files

by PeterJ

Are you using the getRealPath method of the ServletRequest or ServletContext to convert the relative path to a real path? If not, the path is calculated based on the current working directory, which is typically jboss_home/bin. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4068924#4068924 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4068924

18 years, 8 months

1
0
0 / 0

[Beginners Corner] - Re: allowing users to access server-created files

by wesomon99

I have deployed my application exploded, which worked fine. However, I can't create a file within the web file structure. The path .../myproject/csv/example.csv does not work, it gives me an error of no such file or directory even though the directory is definitely there. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4068922#4068922 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4068922

18 years, 8 months

1
0
0 / 0

[JBossWS] - Re: Documentation on generated WSDLs

by thomas.diesler＠jboss.com

Schema generation is delegated to jaxb, so I guess there is not. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4068920#4068920 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4068920

18 years, 8 months

1
0
0 / 0

[JBoss Portal] - Re: JSF Portlet tutorial out of date?

by andrewchukwu

Hi, Im a new-commer to to Jboss portal etc. There is a lot of info about. Your answer can be found on the Jboss wiki site: http://wiki.jboss.org/wiki/Wiki.jsp?page=Running2.6WithJBossAS4.2.xAndMyF... JBoss 4.2.x ships with Sun JSF, replace as indicated in the wiki and it should work. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4068918#4068918 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4068918

18 years, 8 months

1
0
0 / 0

[EJB/JBoss] - TransactionAttributeType.REQUIRED and nested transactions

by patelnikita

Hello everyone, I want to deploy two jars in my server/messaging/deploy folder, each having a persistence.xml file and also each having a stateless session bean having the @PersistenceContext(unitName="myUnit"). I call a WebMethod in one of my stateless beans, which in turn calls a WebMethod in the other stateless bean (which has been obtained using the @EJB annotation). But, I get a PersistenceException - TransactionRequiredException, when it tries to persist anything in the nested WebMethod call. I understand that nested transactions are not supported by the EJB spec. But I would sincerely appreciate any inputs on what is the best way to have an API in one EJB Bean call another API in another EJB bean, each having their own separate persistence units. Thank you, Nikita Patel View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4068917#4068917 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4068917

18 years, 8 months

1
0
0 / 0

[JBossWS] - Re: setting up an ssl web service & client

by thomas.diesler＠jboss.com

Our test clients use this | <sysproperty key="org.jboss.ws.wsse.keyStore" value="${tests.output.dir}/resources/jaxrpc/samples/wssecurity/wsse.keystore"/> | <sysproperty key="org.jboss.ws.wsse.trustStore" value="${tests.output.dir}/resources/jaxrpc/samples/wssecurity/wsse.truststore"/> | <sysproperty key="org.jboss.ws.wsse.keyStorePassword" value="jbossws"/> | <sysproperty key="org.jboss.ws.wsse.trustStorePassword" value="jbossws"/> | <sysproperty key="org.jboss.ws.wsse.keyStoreType" value="jks"/> | <sysproperty key="org.jboss.ws.wsse.trustStoreType" value="jks"/> | View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4068916#4068916 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4068916

18 years, 8 months

1
0
0 / 0

[EJB 3.0] - Re: Why is injection not working in AS 4.0 and 4.2 (servlets

by stan.silvert＠jboss.com

"tinny" wrote : So JBoss 5.0 beta2 supports servlet injection? Or is the functionality only going to be fully delivered in the final release? | Yes and Yes. The only injection I've heard that doesn't currently work is @EJB in the web layer. But everything in the JEE5 spec will be delivered in the final release of JBoss 5. Stan View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4068915#4068915 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4068915

18 years, 8 months

1
0
0 / 0

[EJB 3.0] - @EJB injection always injects remote object, why not local

by jainsau

I have a stateless EJB, and have another EJB injected into this EJB. The injection is straight forward: @EJB BeanInteface interface; The BeanInterface is available in both remote and local forms in the jmx-console-> JNDI view-> list. I am running JBoss 4.2.0 GA, on a single system, so the injection could also return a local proxy. But I always get a remote proxy. I even tried to attribute the injection like this: @EJB (name="earName/beanName/local") BeanInteface interface; but still I only get the remote proxy in the interface variable. Why is this happening? Why can't I fetch the local proxy via injection? Another slightly related question. Is there a way to find out at runtime (by enquiring the conatiner ?) whether an EJB is available locally or remotely so that I can try to access the correct proxy? View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4068914#4068914 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4068914

18 years, 8 months

1
0
0 / 0

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

jboss-user July 2007