February 2009 - jboss-user - Jboss List Archives

[Security & JAAS/JBoss] - JBoss 4.2.3: non-compliant behavior of JACC implementation?

by kcg

Hello, I'm porting our custom JACC provider to JBoss. For access control I've found that JBoss is using not recommended practice of calling `getPermission' on policy provider. JACC 1.0 final release specification claims that after this call container must call `implies' method on the returned PermissionCollection object. My debug messages proof that this is not the case with JBoss 4.2.3GA. For your reference, this is ``4.8 Checking the Caller for a Permission'' specification paragraph, where someone might read: anonymous wrote : The J2EE 1.4 container calls | java.security.Policy.getPermissions with an argument | ProtectionDomain that was constructed with the principals of the caller. The | container must call the implies method on the returned | PermissionCollection using the permission being checked as argument. If the | PermissionCollection implies the permission being tested, the permission has | been granted to the caller. Otherwise it has not. This technique is supported but | not recommended. Am I doing anything wrong or is it really a non-compliant bit of JBoss JACC implementation? Our JACC provider is written in a way that it requires to have `implies' called on the policy provider. So I written simple facade PermissionCollection which behave like normal permission collection, but delegates it's implies to the policy provider. The problem is, its `implies' is not called. Do you have any idea how to convience JBoss to call either implies on the returned value from getPermission or implies directly on the policy provider? Thanks! Karelanonymous wrote : View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4206710#4206710 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4206710

17 years, 2 months

1
0
0 / 0

[Installation, Configuration & DEPLOYMENT] - Re: Gettting the webconsole alert

by PeterJ

Apparently this application is secure and requires a login. Is this your application or did you get it from someone else? If from someone else, you need to ask them how you go about logging it. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4206708#4206708 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4206708

17 years, 2 months

1
0
0 / 0

[Installation, Configuration & DEPLOYMENT] - Gettting the webconsole alert

by simple1234

Hi Guys, we deployed a war to jboss and when i am trying to access the application we are getting webconsole alert asking for username / Pwd. but other applications deployed in the same server are working fine. an help is greatly appreciated. Thanks View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4206704#4206704 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4206704

17 years, 2 months

1
0
0 / 0

[JBossWS] - Re: Should @EJB work in Pojo's deployed as a WebService?

by bryan.kearney

I am running this in JBoos 5.0, Using JbossWS-Metro 3.0.5 as the web container. In addition, I have updated the web.xml as described at the end of this post: http://www.jboss.com/index.html?module=bb&op=viewtopic&t=143277 View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4206701#4206701 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4206701

17 years, 2 months

1
0
0 / 0

[JBoss Cache: Core Edition] - Re: Problems with Transaction Manager

by fatboysuns

One more thing, I tried to start a thread which would act as the loader. I tried this stupid approach of making it sleep for some time and then call the method to load the cache. The idea being that the cache would get evoked only after the server started up and the jboss transaction manager would be in place. Even after doing this, the cache was getting bound to dummytransactionManager only. My code was private boolean retryAndLoadCache(Thread t) { for (int i = 0; i < 3; i++) { try { t.sleep(20000); boolean cacheLoaded = checkIfCacheLoaded(); //sets up the configuration for my singleton cache object if (cacheLoaded) { return true; } else { cacheFactory.destroyCache(); // calls cache.destroy and makes the cache object back to null. log.info("destroying cache"); } } catch (NameAlreadyBoundException nabe) { //log.error(nabe, nabe); log.info("Retrying " + i + "th time."); } catch (InterruptedException e) { log.error(e, e); } } return false; } View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4206699#4206699 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4206699

17 years, 2 months

1
0
0 / 0

[JBoss Cache: Core Edition] - CacheProvider for JBoss 3.0.2 w/MVCC and Hibernate 3.2 (not

by dukehoops

I am looking for a recommended CacheProvider for the following config: -JBoss Cache Core 3.0.2 (will run in cluster, using async invalidation) -Hibernate 3.2.6.ga (cannot use hibernate 3.3.x because problems with javassist require using CGLIB, but http://opensource.atlassian.com/projects/hibernate/browse/ANN-782 prevents using 3.3.x) -will use entity, query, and collection caches (Cache instance per) -use MVCC (avoid synchronization on reads) This PDF guide http://galder.zamarreno.com/wp-content/uploads/2008/09/hibernate-jbosscac... is inapplicable to Hibernate < 3.3.1, requiring usage of RegionFactory rather than CacheProvider On the other hand, this blog http://galder.zamarreno.com/?p=56 does use a CacheProvider, but seems to be geared for JBoss Cache < 3, so no MVCC (locking reads...). So which CacheProvider should I use, given above constraints? thanks -nikita View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4206696#4206696 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4206696

17 years, 2 months

1
0
0 / 0

[Installation, Configuration & DEPLOYMENT] - Re: Copying large ear over network: URLDeploymentScanner rea

by PeterJ

Yes, you can do this. With the scanner off, call the deploy operation of the jboss.system:service=MainDeployer mbean. Here is an example using twiddle: twiddle invoke "jboss.system:service=MainDeployer" deploy /jboss/home/server/xxx/deploy/myapp.ear View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4206693#4206693 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4206693

17 years, 2 months

1
0
0 / 0

[JBossWS] - Re: Should @EJB work in Pojo's deployed as a WebService?

by PeterJ

Which version of JBoss AS? I don't think that those annotations are supported until JBoss AS 5.0.0 View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4206692#4206692 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4206692

17 years, 2 months

1
0
0 / 0

[JBoss Tools (users)] - Re: problems with downloading of a tools

by max.andersen＠jboss.com

sf.net is having issues, we have an case open with them to figure out what is causing it. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4206689#4206689 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4206689

17 years, 2 months

1
0
0 / 0

[Security & JAAS/JBoss] - Re: JBoss 5 authentication / authorization problem

by apph_

Hi Wolfgang, Still the same problem with the correct ID. "Wolfgang Knauf" wrote : Hi, | did you try to activate logging of the security layer? Yes I did. But i don't see any errors related to these packages: org.apache.catalina, org.jboss.web.tomcat.security and org.jboss.security. The only warning (or maybe that's not even warning but trace): TRACE [SecurityAssociation][org.jboss.security.SecurityAssociation] WARN::Deprecated usage of SecurityAssociation. Use SecurityContext Appreciate your help. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4206687#4206687 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4206687

17 years, 2 months

1
0
0 / 0

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

jboss-user February 2009