[jboss-jira] [JBoss JIRA] Closed: (JBAS-4932) Invalid principal: anonymous

[Anil Saldhana (JIRA)]

     [ http://jira.jboss.com/jira/browse/JBAS-4932?page=all ]

Anil Saldhana closed JBAS-4932.
-------------------------------

    Resolution: Done

=========================================
tests-run-internal:
    [junit] Running org.jboss.test.ws.jaxrpc.jbws723.JBWS723TestCase
    [junit] FIXME: [JBAS-3595] - Tomcat allows http access with transport guarantie CONFIDENTIAL
    [junit] Tests run: 7, Failures: 0, Errors: 0, Time elapsed: 68.422 sec

BUILD SUCCESSFUL
Total time: 1 minute 11 seconds
==========================================

Thomas,  I have a comment with reference to org.jboss.wsf.container.jboss50.InvocationHandlerEJB21

You do not have any do any explicit processing for the invocation principal/credential (as they are anyway set on the security context on the thread local and will be picked up automatically for ejb local invocations). So unless you are making a remote invocation, you do not need to explicitly set the invocation principal/credential.  So, may be you can do away with the security context explicit work and also the security adapters.

> Invalid principal: anonymous
> ----------------------------
>
>                 Key: JBAS-4932
>                 URL: http://jira.jboss.com/jira/browse/JBAS-4932
>             Project: JBoss Application Server
>          Issue Type: Sub-task
>      Security Level: Public(Everyone can see) 
>            Reporter: Thomas Diesler
>         Assigned To: Anil Saldhana
>             Fix For:  JBossAS-5.0.0.Beta3
>
>
> [tdiesler at tddell jbossws-native-2.0.2]$ ant -Dtest=jaxrpc/jbws723 test
> tests-run-internal:
>     [junit] Running org.jboss.test.ws.jaxrpc.jbws723.JBWS723TestCase
>     [junit] FIXME: [JBAS-3595] - Tomcat allows http access with transport guarantie CONFIDENTIAL
>     [junit] Tests run: 7, Failures: 0, Errors: 1, Time elapsed: 44.363 sec
>     [junit] Test org.jboss.test.ws.jaxrpc.jbws723.JBWS723TestCase FAILED
> 11:13:23,483 INFO  [MCKernelAbstraction] installing bean: jboss.j2ee:jar=jaxrpc-jbws723-client.jar,name=jbossws-client,service=EJB3 with dependencies:
> 11:13:23,483 INFO  [MCKernelAbstraction]   and supplies:
> 11:13:23,761 INFO  [ClientENCInjectionContainer] STARTED CLIENT ENC CONTAINER: jbossws-client
> 11:13:33,532 ERROR [SOAPFaultHelperJAXRPC] SOAP request exception
> java.rmi.AccessException: SecurityException; nested exception is: 
>         java.lang.SecurityException: Denied: caller with subject=Subject:
>         Principal: anonymous
>         Principal: Roles(members)
>  and security context post-mapping roles=Roles(members)
>         at org.jboss.ejb.plugins.LogInterceptor.handleException(LogInterceptor.java:388)
>         at org.jboss.ejb.plugins.LogInterceptor.invoke(LogInterceptor.java:209)
>         at org.jboss.ejb.plugins.ProxyFactoryFinderInterceptor.invoke(ProxyFactoryFinderInterceptor.java:138)
>         at org.jboss.ejb.SessionContainer.internalInvoke(SessionContainer.java:651)
>         at org.jboss.ejb.Container.invoke(Container.java:1013)
>         at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
>         at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
>         at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
>         at java.lang.reflect.Method.invoke(Method.java:585)
>         at org.jboss.mx.interceptor.ReflectedDispatcher.invoke(ReflectedDispatcher.java:157)
>         at org.jboss.mx.server.Invocation.dispatch(Invocation.java:96)
>         at org.jboss.mx.server.Invocation.invoke(Invocation.java:88)
>         at org.jboss.mx.server.AbstractMBeanInvoker.invoke(AbstractMBeanInvoker.java:264)
>         at org.jboss.mx.server.MBeanServerImpl.invoke(MBeanServerImpl.java:668)
>         at org.jboss.wsf.container.jboss50.InvocationHandlerEJB21.invoke(InvocationHandlerEJB21.java:144)
>         at org.jboss.ws.core.server.ServiceEndpointInvoker.invoke(ServiceEndpointInvoker.java:220)

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira