[jboss-user] [Security & JAAS/JBoss] - Migration to AS 5.0.1 -> Authentication Exception

[smith.gerry@gmail.com]

Our app works great in production on AS 4.2.1.
We are trying to migrate to AS 5.0.1.
In the middle of a method in a session bean, it seems like it forgets the security domain.
Even calling a create method on the local home of an EJB 2.1 which has already been called earlier in the method can cause the problem.
It always occurs at the same point, but we can clear it by moving code up the method but then the problem occurs somewhere else such as calling some local interface method on an EJB that has already been instantiated.
We are using a security domain with a custom login module.

Here's the stack trace,

Any ideas what's going on ?

Thanks !!

2009-04-05 15:29:17,993 DEBUG [org.jboss.security.integration.JNDIBasedSecurityManagement] (ajp-192.168.11.4-8009-5) Creating SDC for domain=BYPASSED-SECURITY
2009-04-05 15:29:17,994 DEBUG [org.jboss.security.plugins.auth.JaasSecurityManagerBase.BYPASSED-SECURITY] (ajp-192.168.11.4-8009-5) CallbackHandler: org.jboss.security.auth.callback.JBossCallbackHandler at 1ba7069
2009-04-05 15:29:17,994 DEBUG [org.jboss.security.plugins.auth.JaasSecurityManagerBase.BYPASSED-SECURITY] (ajp-192.168.11.4-8009-5) CachePolicy set to: org.jboss.util.TimedCachePolicy at 12a38da
2009-04-05 15:29:17,994 DEBUG [org.jboss.security.integration.JNDIBasedSecurityManagement] (ajp-192.168.11.4-8009-5) setCachePolicy, c=org.jboss.util.TimedCachePolicy at 12a38da
2009-04-05 15:29:18,024 ERROR [org.jboss.security.auth.spi.UsersRolesLoginModule] (ajp-192.168.11.4-8009-5) Failed to load users/passwords/role files
java.io.IOException: No properties file: users.properties or defaults: defaultUsers.properties found
	at org.jboss.security.auth.spi.Util.loadProperties(Util.java:198)
	at org.jboss.security.auth.spi.UsersRolesLoginModule.loadUsers(UsersRolesLoginModule.java:186)
	at org.jboss.security.auth.spi.UsersRolesLoginModule.createUsers(UsersRolesLoginModule.java:200)



     .....................................................


	at $Proxy326.getAccounts(Unknown Source)

     ...........................................................


2009-04-05 15:29:18,036 ERROR [org.jboss.ejb.plugins.SecurityInterceptor] (ajp-192.168.11.4-8009-5) Error in Security Interceptor
java.lang.SecurityException: Authentication exception, principal=gsmith
	at org.jboss.ejb.plugins.SecurityInterceptor.checkSecurityContext(SecurityInterceptor.java:321)
	at org.jboss.ejb.plugins.SecurityInterceptor.process(SecurityInterceptor.java:243)
	at org.jboss.ejb.plugins.SecurityInterceptor.invoke(SecurityInterceptor.java:211)
	at org.jboss.ejb.plugins.security.PreSecurityInterceptor.process(PreSecurityInterceptor.java:134)
	at org.jboss.ejb.plugins.security.PreSecurityInterceptor.invoke(PreSecurityInterceptor.java:81)
	at org.jboss.ejb.plugins.LogInterceptor.invoke(LogInterceptor.java:205)
	at org.jboss.ejb.plugins.ProxyFactoryFinderInterceptor.invoke(ProxyFactoryFinderInterceptor.java:138)
	at org.jboss.ejb.EntityContainer.internalInvoke(EntityContainer.java:533)
	at org.jboss.ejb.Container.invoke(Container.java:1029)
	at org.jboss.ejb.plugins.local.BaseLocalProxyFactory.invoke(BaseLocalProxyFactory.java:436)
	at org.jboss.ejb.plugins.local.EntityProxy.invoke(EntityProxy.java:65)
	at $Proxy326.getAccounts(Unknown Source)



View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=4223527#4223527

Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=4223527