10:06 a.m.
Hello all,
I am testing authenticated access to a web service, with a security domain of my own and
username/password taken from a mySQL database. I am using JBoss 4.0.5 and JBossWS 2.0.3,
and on my localhost I have the mySQL database from where the username and password are
taken, as well as the client.
Everything works perfectly when I have all things deployed locally (web service, database,
client). However, I run into problems when invoking the web service deployed on a remote
machine.
On the remote server console a "no route to host" error appears:
anonymous wrote :
| Caused by: com.mysql.jdbc.CommunicationsException: Communications link failure due to
underlying exception:
|
| ** BEGIN NESTED EXCEPTION **
|
| java.net.SocketException
| MESSAGE: java.net.NoRouteToHostException: No route to host
|
| STACKTRACE:
|
| java.net.SocketException: java.net.NoRouteToHostException: No route to host
| at com.mysql.jdbc.StandardSocketFactory.connect(StandardSocketFactory.java:156)
| at com.mysql.jdbc.MysqlIO.(MysqlIO.java:284)
|
On the client side I receive an "Unauthorized" error:
anonymous wrote : 3875 [main] DEBUG org.jboss.remoting.transport.http.HTTPClientInvoker -
Error invoking http client invoker.
| org.jboss.ws.WSException: Invalid HTTP server response [401] - Unauthorized
| at
org.jboss.ws.core.soap.SOAPMessageUnMarshaller.read(SOAPMessageUnMarshaller.java:77)
| at
org.jboss.remoting.transport.http.HTTPClientInvoker.useHttpURLConnection(HTTPClientInvoker.java:175)
| ...
| javax.xml.ws.WebServiceException: java.io.IOException: Could not transmit message
|
Using the default "JBossWS" security domain, with username "kermit"
and password "thefrog" taken from users.properties, works with both local and
remote deployment of my web service. So I was thinking maybe the data source is not
found?
However, the database seems to be correctly bound, judging by the server log data:
anonymous wrote : INFO [org.jboss.resource.adapter.jdbc.remote.WrapperDataSourceService]
Bound ConnectionManager 'jboss.jca:service=DataSourceBinding,name=jdbc/WSTwoDS' to
JNDI name 'java:jdbc/WSTwoDS'
Perhaps my client needs special jndi.properties settings? (pure brainstorming, potentially
stupid, based on some forum posts I browsed)
How my files look like:
Security-relevant annotations on Web Service (which is deployed as SLSB in an ear):
@org.jboss.wsf.spi.annotation.WebContext(contextRoot = "/webservices-ws",
urlPattern="/services/WSTwo/*", authMethod="BASIC",
transportGuarantee="NONE", secureWSDLAccess=false)
| @SecurityDomain("wstwo")
| @RolesAllowed("friend")
In server/default/conf/login-config.xml on the remote machine I have added the
"wstwo" application policy thus:
<application-policy name="wstwo">
| <authentication>
| <login-module
code="org.jboss.security.auth.spi.DatabaseServerLoginModule"
| flag="required">
| <module-option
name="dsJndiName">java:/jdbc/WSTwoDS</module-option>
| <module-option name="principalsQuery">
| select pass from USERS where login=?
| </module-option>
| <module-option name="rolesQuery">
| select role,'Roles' from USER_ROLES where login=?
| </module-option>
| </login-module>
| </authentication>
| </application-policy>
And the data source for the web service is defined in the server/default/deploy/*-ds.xml
file like this:
<local-tx-datasource>
| <jndi-name>jdbc/WSTwoDS</jndi-name>
|
<connection-url>jdbc:mysql://IP_OF_MY_LOCALHOST:3306/security</connection-url>
| ...
| </local-tx-datasource>
And of course the tables as described in the application policy are defined on my local
machine.
In the client I pass the username and password:
((BindingProvider)wstwo).getRequestContext().put(BindingProvider.USERNAME_PROPERTY,
"user");
| ((BindingProvider)wstwo).getRequestContext().put(BindingProvider.PASSWORD_PROPERTY,
"pass");
Does anyone have any idea about where I'm doing something wrong? Thank you!
View the original post :
http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4162598#...
Reply to the post :
http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...