[jboss-dev-forums] [JBoss ESB Development] - Re: ClassCastException in CertificateLoginModule

[h.wolffenbuttel]

Hi,

I'm using another callbackHandler:


  |    <security
  |     callbackHandler="org.jboss.soa.esb.services.security.auth.loginUserPassCallbackHandler"
  |     moduleName="CertLogin" rolesAllowed="worker" runAs="worker" useCallerIdentity="false">
  |     <property name="alias" value="xxxxxx"/>
  |    </security>
  | 


But with the suggested config:


  | <security
  |     callbackHandler="org.jboss.soa.esb.services.security.auth.login.CertCallbackHandler"
  |     moduleName="CertLogin" rolesAllowed="worker" runAs="worker" useCallerIdentity="false">
  |     <property name="alias" value="xxxxxxxx"/>
  |    </security>
  | 


I still get the following error (extracted via Debugging)


  | javax.security.auth.login.LoginException: java.lang.ClassCastException: [Ljava.security.cert.X509Certificate;
  | 	at org.jboss.soa.esb.services.security.auth.login.CertificateLoginModule.getCallerCertificate(CertificateLoginModule.java:406)
  | 	at org.jboss.soa.esb.services.security.auth.login.CertificateLoginModule.login(CertificateLoginModule.java:145)
  | 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
  | 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
  | 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
  | 	at java.lang.reflect.Method.invoke(Method.java:585)
  | 	at javax.security.auth.login.LoginContext.invoke(LoginContext.java:769)
  | 	at javax.security.auth.login.LoginContext.access$000(LoginContext.java:186)
  | 	at javax.security.auth.login.LoginContext$4.run(LoginContext.java:683)
  | 	at java.security.AccessController.doPrivileged(Native Method)
  | 	at javax.security.auth.login.LoginContext.invokePriv(LoginContext.java:680)
  | 	at javax.security.auth.login.LoginContext.login(LoginContext.java:579)
  | 	at org.jboss.security.plugins.JaasSecurityManager.defaultLogin(JaasSecurityManager.java:603)
  | 	at org.jboss.security.plugins.JaasSecurityManager.authenticate(JaasSecurityManager.java:537)
  | 	at org.jboss.security.plugins.JaasSecurityManager.isValid(JaasSecurityManager.java:344)
  | 	at org.jboss.web.tomcat.security.JBossSecurityMgrRealm.authenticate(JBossSecurityMgrRealm.java:330)
  | 	at org.apache.catalina.authenticator.SSLAuthenticator.authenticate(SSLAuthenticator.java:149)
  | 	at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:490)
  | 	at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127)
  | 	at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
  | 	at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
  | 	at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:262)
  | 	at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:844)
  | 	at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:583)
  | 	at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:446)
  | 	at java.lang.Thread.run(Thread.java:595)
  | 

The Object wich is called for the  credentials is org.jboss.security.auth.callback.ObjectCallback. Do i have a different version or something? I'm using AS 4.2.3 and ESB 4.6 with JBoss Remoting	2.2.3 and JBoss Messaging	1.4.4 GA

Regards,

Hans


View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=4259126#4259126

Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=4259126