jboss-development  

[JBoss-dev] [ jboss-Bugs-973563 ] Declarative security w/RMI fails under load, principal=null

SourceForge.net
Sun, 01 Aug 2004 20:58:07 -0700

Bugs item #973563, was opened at 2004-06-15 15:02
Message generated for change (Comment added) made by starksm
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=376685&aid=973563&group_id=22866

Category: JBossSX
Group: v3.2
>Status: Closed
>Resolution: Works For Me
Priority: 5
Submitted By: Gerald Turner (crazyfoam)
Assigned to: Scott M Stark (starksm)
Summary: Declarative security w/RMI fails under load, principal=null

Initial Comment:
I've appended a simple test method 'testStress' to the
existing EJBSpecUnitTestCase.  Patch is attached. 
Testsuite log output also attached.

----------------------------------------------------------------------

>Comment By: Scott M Stark (starksm)
Date: 2004-08-01 20:54

Message:
Logged In: YES 
user_id=175228

Then you are not adding the spec-test-multi-threaded config
to the correct auth.conf. It should be in the
testsuite/src/resources/security/auth.conf version that is
used by the tests. I have incorporated the testStress method
and it works fine.

----------------------------------------------------------------------

Comment By: Gerald Turner (crazyfoam)
Date: 2004-06-20 14:32

Message:
Logged In: YES 
user_id=571620

I was suspicious about the multi-threaded option - however I
didn't see it documented anyway and reviewing the source
(ClientLoginModule) I thought that it may have to do with
defeating the ThreadLocal-ness of JAAS (i.e. many threads
use a single LoginContext).

Anyway, I've updated the auth.conf and test case so that it
uses "spec-test-multi-threaded" with the added option, also
instantiates LoginContext and performs login/logout per
iteration rather than use the obviously non-thread-safe
(oops! sorry) login/logout methods.

Same results - random principal=null exceptions.

----------------------------------------------------------------------

Comment By: Scott M Stark (starksm)
Date: 2004-06-19 21:25

Message:
Logged In: YES 
user_id=175228

The multi-threaded mode is not valid because the spec-test
client login config has not been configured to run in
multi-threaded mode. The following change is needed:

spec-test {
    org.jboss.security.ClientLoginModule  required
   multi-threaded=true
   ;
};

There are still additional changes needed to make the test
threads create their own login context. The current
login()/logout() methods will not suffice.

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=376685&aid=973563&group_id=22866


-------------------------------------------------------
This SF.Net email is sponsored by OSTG. Have you noticed the changes on
Linux.com, ITManagersJournal and NewsForge in the past few weeks? Now,
one more big change to announce. We are now OSTG- Open Source Technology
Group. Come see the changes on the new OSTG site. www.ostg.com
_______________________________________________
JBoss-Development mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/jboss-development