[Security & JAAS/JBoss] - Rich Client & SSO & JBoss
by noFreak
Hi all,
after a few days of researech about single sign-on with jboss i have a possible solution for our requirement.
But first the outlined szenario:
We have a rich client (Eclipse RCP) which is running in an windows os. windows is working in a domain (windows 2003 server), also the domain login occur against the win server. The rich client have acces to ejb3 components which runs in JBoss AS.
Next the outlined requirement:
We need a single sign-on, which meens, that the client authentication against the ejb's works with the client side authentication infos. The ejb's should be secured with a security domain and the method acces should be role based (currently its implemented).
do anybody know wheter the following could be a possible solution? if not do anybody have other ideas how it maybe work?
One possible solution (with many questions :) with Kerberos and ActiveDirectiry)?!:
I use the com.sun.security.auth.module.Krb5LoginModule for the server side login module. The CallbackHandler on client side fills it with the correct TGT (But how? Again with the com.sun.security.auth.module.Krb5LoginModule?). Now JBoss knows the TGT and authenticate against the ADS and maybe it returns the roles fom the user. Know i can acces the secured ejb's.
Is this a possible way...or have i a significant error in reasoning? Or any other possible ideas?
View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4148950#4148950
Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4148950
18 years, 1 month
[JBossWS] - Failed to create a new SAX parser with JbossWS2.0.4
by ibrahim_theo
Hi,
I am testing my Webservices based on JAX-RPC (migrated from Jboss 403) under Jboss4.2.1 and Jbossws2.0.4.
I am invoquing the Webservices using SoapUI. When I use the following request:
<soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:web="http://test.com/webservices">
<soapenv:Header/>
<soapenv:Body>
<web:Querytest>
<String_1>user</String_1>
<String_2>passwd</String_2>
<int_3>123</int_3>
</web:Querytest>
</soapenv:Body>
</soapenv:Envelope>
The response is as expected but when I use the following request:
<soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:web="http://test.com/Finance/webservices">
<soapenv:Header/>
<soapenv:Body>
<web:Querytest1>
<String_1>user</String_1>
<String_2>pswd</String_2>
<Coplxstrt1>
<ID1>1</ID1>
<view1>yes</view1>
<Type1>txt</Type1>
</Coplxstrt1>
</web:Querytest1>
</soapenv:Body>
</soapenv:Envelope>
I am getting the following exception which I thought was fixed with jbossws2.02:
2008-05-06 16:03:22,075 ERROR - SOAP request exception
org.jboss.xb.binding.JBossXBRuntimeException: Failed to create a new SAX parser
at org.jboss.xb.binding.UnmarshallerFactory$UnmarshallerFactoryImpl.newUnmarshaller(UnmarshallerFactory.java:100)
at org.jboss.ws.core.jaxrpc.binding.jbossxb.JBossXBUnmarshallerImpl.unmarshal(JBossXBUnmarshallerImpl.java:54)
at org.jboss.ws.core.jaxrpc.binding.JBossXBDeserializer.deserialize(JBossXBDeserializer.java:103)
at org.jboss.ws.core.jaxrpc.binding.JBossXBDeserializer.deserialize(JBossXBDeserializer.java:62)
at org.jboss.ws.core.binding.DeserializerSupport.deserialize(DeserializerSupport.java:60)
at org.jboss.ws.core.soap.XMLContent.unmarshallObjectContents(XMLContent.java:180)
at org.jboss.ws.core.soap.XMLContent.transitionTo(XMLContent.java:97)
at org.jboss.ws.core.soap.SOAPContentElement.transitionTo(SOAPContentElement.java:141)
at org.jboss.ws.core.soap.SOAPContentElement.getObjectValue(SOAPContentElement.java:173)
at org.jboss.ws.core.EndpointInvocation.transformPayloadValue(EndpointInvocation.java:263)
at org.jboss.ws.core.EndpointInvocation.getRequestParamValue(EndpointInvocation.java:115)
at org.jboss.ws.core.EndpointInvocation.getRequestPayload(EndpointInvocation.java:135)
at org.jboss.ws.core.server.DelegatingInvocation.getArgs(DelegatingInvocation.java:82)
at org.jboss.wsf.container.jboss42.InvocationHandlerEJB21.getMBeanInvocation(InvocationHandlerEJB21.java:169)
at org.jboss.wsf.container.jboss42.InvocationHandlerEJB21.invoke(InvocationHandlerEJB21.java:144)
at org.jboss.ws.core.server.ServiceEndpointInvoker.invoke(ServiceEndpointInvoker.java:221)
at org.jboss.wsf.stack.jbws.RequestHandlerImpl.processRequest(RequestHandlerImpl.java:466)
at org.jboss.wsf.stack.jbws.RequestHandlerImpl.handleRequest(RequestHandlerImpl.java:284)
at org.jboss.wsf.stack.jbws.RequestHandlerImpl.doPost(RequestHandlerImpl.java:201)
at org.jboss.wsf.stack.jbws.RequestHandlerImpl.handleHttpRequest(RequestHandlerImpl.java:134)
at org.jboss.wsf.stack.jbws.EndpointServlet.service(EndpointServlet.java:84)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:803)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
at org.jboss.web.tomcat.filters.ReplyHeaderFilter.doFilter(ReplyHeaderFilter.java:96)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:230)
at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:175)
at org.jboss.web.tomcat.security.SecurityAssociationValve.invoke(SecurityAssociationValve.java:179)
at org.jboss.web.tomcat.security.JaccContextValve.invoke(JaccContextValve.java:84)
at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:128)
at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:104)
at org.jboss.web.tomcat.service.jca.CachedConnectionValve.invoke(CachedConnectionValve.java:157)
at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:241)
at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:844)
at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:580)
at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:447)
at java.lang.Thread.run(Unknown Source)
Caused by: org.jboss.xb.binding.JBossXBException: Failed to create a new SAX parser
at org.jboss.xb.binding.parser.sax.SaxJBossXBParser.(SaxJBossXBParser.java:96)
at org.jboss.xb.binding.UnmarshallerImpl.(UnmarshallerImpl.java:55)
at org.jboss.xb.binding.UnmarshallerFactory$UnmarshallerFactoryImpl.newUnmarshaller(UnmarshallerFactory.java:96)
... 39 more
Caused by: javax.xml.parsers.ParserConfigurationException: Feature 'http://apache.org/xml/features/xinclude' is not recognized.
at org.apache.xerces.jaxp.SAXParserFactoryImpl.newSAXParser(Unknown Source)
at org.jboss.xb.binding.parser.sax.SaxJBossXBParser.(SaxJBossXBParser.java:92)
... 41 more
Any idea?
Thanks in advance,
View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4148948#4148948
Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4148948
18 years, 1 month