[Installation, Configuration & DEPLOYMENT] - Network interfaces configuration
by localstorm
Hello, everybody!
I've a minor JBoss configuration problem. Consider the following
netstat -lanp | grep tcp | grep LISTEN output:
| tcp 0 0 127.0.0.1:3873 0.0.0.0:* LISTEN 3055/java
| tcp 0 0 0.0.0.0:53570 0.0.0.0:* LISTEN 3055/java
| tcp 0 0 0.0.0.0:43266 0.0.0.0:* LISTEN 3055/java
| tcp 0 0 0.0.0.0:1443 0.0.0.0:* LISTEN 3055/java
| tcp 0 0 127.0.0.1:1100 0.0.0.0:* LISTEN 3055/java
| tcp 0 0 127.0.0.1:1101 0.0.0.0:* LISTEN 3055/java
| tcp 0 0 0.0.0.0:49813 0.0.0.0:* LISTEN 3055/java
| tcp 0 0 127.0.0.1:8085 0.0.0.0:* LISTEN 3055/java
| tcp 0 0 127.0.0.1:4444 0.0.0.0:* LISTEN 3055/java
| tcp 0 0 127.0.0.1:4445 0.0.0.0:* LISTEN 3055/java
| tcp 0 0 127.0.0.1:4446 0.0.0.0:* LISTEN 3055/java
|
All I want is to force JBoss to listen sockets on 127.0.0.1 excepting only single HTTPS interface (0.0.0.0)
| tcp 0 0 0.0.0.0:1443 0.0.0.0:* LISTEN 3055/java
|
But after there are some strange sockets that are open on 0.0.0.0:
| tcp 0 0 0.0.0.0:53570 0.0.0.0:* LISTEN 3055/java
| tcp 0 0 0.0.0.0:43266 0.0.0.0:* LISTEN 3055/java
| tcp 0 0 0.0.0.0:49813 0.0.0.0:* LISTEN 3055/java
|
The questions are: what is that and how to dean with these sockets? Are there any security issues related to these ports?
Any help is appreciated.
View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=4250930#4250930
Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=4250930
16 years, 8 months
[Security & JAAS/JBoss] - WS-Security without client certificate validation possible?
by _guido
Hello,
I am new to WS-Security and i am very confused now:
I want to create a webservice where a lot of authorized clients (user+password protected) can call special methods. The communication between the client & server must be encrypted and the server should authenticate to the client (signature).
At first i secured my slsb webservice with jaas & roles. The webservice's @WebContext is set to authMethod="BASIC" so clients can bind a username+password to the request context and authenticate. That works well.
The next i wanted to do is to secure the communication between the client and server.
The standard for that seams to be the ws-security.
But why there is a must to store the clients public key on the server? To authenticate clients it could be needed ... ok. But my authentication is done at the ejb container and i only want to encrypt the communication (& authenticate the server to client).
Is there a way to use the ws-security like it is without storing & validating client public keys on the server side?
I think i didnt got the point and my understanding is a potential security risk...
So it would be nice if you can help me,
guido
View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=4250926#4250926
Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=4250926
16 years, 8 months
[JBoss Portal] - Jboss portal - nosuch user found error
by duskoknez
Environment:
Windows 2003 Server standard
Jboss EAP 4.3
Jboss portal 2.6.8 GA
removed Hypersoninc DS file added oracle-ds.xml and portal-ds.xml both pointing to Oracle 9i backend.
Checked the jbp_users table and it contains the admin and user users.
Jboss startsup and no errors on the portal side, but when I go to the home page, a "nosuchuser" exception is thrown.
Her's part of the stack trace:
"ERROR
Cause: java.lang.RuntimeException: org.jboss.portal.identity.NoSuchUserException: No such user No user found with name: admin
Message: org.jboss.portal.identity.NoSuchUserException: No such user No user found with name: admin
StackTrace:
java.lang.RuntimeException: org.jboss.portal.identity.NoSuchUserException: No such user No user found with name: admin
at org.jboss.portal.cms.security.AuthorizationProviderImpl.getRoot(AuthorizationProviderImpl.java:236)
at org.jboss.portal.cms.impl.jcr.command.ACLEnforcer.computeAccess(ACLEnforcer.java:383)
at org.jboss.portal.cms.impl.jcr.command.ACLEnforcer.hasReadAccess(ACLEnforcer.java:238)
at org.jboss.portal.cms.impl.jcr.command.ACLEnforcer.hasReadAccess(ACLEnforcer.java:224)
at org.jboss.portal.cms.impl.jcr.command.ACLEnforcer.hasAccess(ACLEnforcer.java:132)
at org.jboss.portal.cms.security.AuthorizationManagerImpl.checkPermission(AuthorizationManagerImpl.java:114)
at org.jboss.portal.cms.impl.interceptors.ACLInterceptor.invoke(ACLInterceptor.java:190)
at org.jboss.portal.cms.CMSInterceptor.invoke(CMSInterceptor.java:36)
at org.jboss.portal.common.invocation.Invocation.invokeNext(Invocation.java:115)
at org.jboss.portal.common.invocation.Invocation.invoke(Invocation.java:157)
at org.jboss.portal.cms.impl.jcr.JCRCMS.execute(JCRCMS.java:625)
at org.jboss.portal.cms.impl.jcr.ha.HAJCRCMS.execute(HAJCRCMS.java:65)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
"
Any suggestions?
View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=4250921#4250921
Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=4250921
16 years, 8 months
[EJB 3.0] - Re: Could not obtain connection to any of these urls: Remote
by a0001428
"a0001428" wrote : Hi,
|
| problem is the same:
|
| javax.naming.CommunicationException [Root exception is java.rmi.UnknownHostException: Unknown host: obelix; nested exception is:
| java.net.UnknownHostException: obelix]
| at org.jnp.interfaces.NamingContext.lookup(NamingContext.java:724)
| at org.jnp.interfaces.NamingContext.lookup(NamingContext.java:589)
| at javax.naming.InitialContext.lookup(Unknown Source)
| at demoEJB.Testing.main(Testing.java:27)
| Caused by: java.rmi.UnknownHostException: Unknown host: obelix; nested exception is:
| java.net.UnknownHostException: obelix
| at sun.rmi.transport.tcp.TCPEndpoint.newSocket(Unknown Source)
| at sun.rmi.transport.tcp.TCPChannel.createConnection(Unknown Source)
| at sun.rmi.transport.tcp.TCPChannel.newConnection(Unknown Source)
| at sun.rmi.server.UnicastRef.invoke(Unknown Source)
| at org.jnp.server.NamingServer_Stub.lookup(Unknown Source)
| at org.jnp.interfaces.NamingContext.lookup(NamingContext.java:627)
| ... 3 more
| Caused by: java.net.UnknownHostException: obelix
| at java.net.PlainSocketImpl.connect(Unknown Source)
| at java.net.SocksSocketImpl.connect(Unknown Source)
| at java.net.Socket.connect(Unknown Source)
| at java.net.Socket.connect(Unknown Source)
| at java.net.Socket.(Unknown Source)
| at java.net.Socket.(Unknown Source)
| at sun.rmi.transport.proxy.RMIDirectSocketFactory.createSocket(Unknown Source)
| at sun.rmi.transport.proxy.RMIMasterSocketFactory.createSocket(Unknown Source)
| ... 9 more
|
|
| Server remote modify Host file:
|
| 127.0.0.1 localhost
| x.x.x.x obelix
|
| I was traying:
|
| obelix 77.226.178.32
| x.x.x.x localhost
|
| I was traying:
|
| obelix 77.226.178.32
| localhost x.x.x.x
|
| is the same .
|
|
| help me.
|
|
Hi ,
In my host file I has mapping Now.
127.0.0.1 local
z.z.z.z obelix
-----------------------
z.z.z.z is IP public
but the error is the same.
I hope you help me!
View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=4250917#4250917
Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=4250917
16 years, 8 months