[jboss-user] [Security & JAAS/JBoss] - Installing a new SecurityManager

[timba07]

Hi,

I'm currently trying to install a RMISecurityManager inside my SEAM/EJB3 Application. Now, when I'm trying interact with the webside (login for example), I get the following Exceptions: 


  | 22:06:26,281 ERROR [SeamLoginModule] Error invoking login method
  | javax.el.ELException: java.security.AccessControlException: access denied (java.lang.RuntimePermission setContextClassLoader)
  |         at org.jboss.el.util.ReflectionUtil.invokeMethod(ReflectionUtil.java:332)
  |         at org.jboss.el.util.ReflectionUtil.invokeMethod(ReflectionUtil.java:341)
  |         at org.jboss.el.parser.AstPropertySuffix.invoke(AstPropertySuffix.java:58)
  |         at org.jboss.el.parser.AstValue.invoke(AstValue.java:96)
  |         at org.jboss.el.MethodExpressionImpl.invoke(MethodExpressionImpl.java:276)
  |         at org.jboss.seam.core.Expressions$2.invoke(Expressions.java:174)
  |         at org.jboss.seam.security.jaas.SeamLoginModule.login(SeamLoginModule.java:108)
  |         at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
  |         at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
  |         at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
  |         at java.lang.reflect.Method.invoke(Method.java:597)
  |         at javax.security.auth.login.LoginContext.invoke(LoginContext.java:769)
  |         at javax.security.auth.login.LoginContext.access$000(LoginContext.java:186)
  |         at javax.security.auth.login.LoginContext$5.run(LoginContext.java:706)
  |         at java.security.AccessController.doPrivileged(Native Method)
  |         at javax.security.auth.login.LoginContext.invokeCreatorPriv(LoginContext.java:703)
  |         at javax.security.auth.login.LoginContext.login(LoginContext.java:575)
  |         at org.jboss.seam.security.Identity.authenticate(Identity.java:335)
  | .
  | .
  | .
  | .
  | 

Is it possible to install a security Manager? Do I have to set permissions in a policy file?

I'm Using JBoss AS 4.2.2, Seam 2.0

Greetings,
Stefan

View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4108237#4108237

Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4108237