I would assume you are talking HTTP to JBoss, which means the HTTP login would setup the JAAS context. If there is no auth passed, then no principle.
1. Most clients (.NET, GLUE) have a specific flag or property to set which gets them to send the HTTP auth info.
2. Use a HTTP Snooper to see what HTTP headers are really getting sent.
3. Some Web Service clients just won't send auth info until there is a specific auth HTTP error state returned. The HTTP trace will tell you exactly what HTTP states are being returned before the EJBException is thrown.
HTH, Fred
Bates, Alex wrote:
I am having a strange problem trying to expose secured EJBs as web services in JbossNet (using Jboss 3.2.1). Everything deploys fine. But when I call one of the web service methods, I get this exception (intermittently):
javax.ejb.EJBException: checkSecurityAssociation; CausedByException is:
Authentication exception, principal=null
Is anyone else on the planet trying to expose secured EJBs as web services? (or EJBs that must use secured EJBs)? Or is this too cutting edge?
*I thought the JSR Web Services for J2EE said it was excluding security, so don't know why JBossNet is trying to enforce security in the web service layer (no way for web service client to establish security context!)
-Alex
------------------------------------------------------- This SF.net email is sponsored by: SF.net Giveback Program. Does SourceForge.net help you be more productive? Does it help you create better code? SHARE THE LOVE, and help us help YOU! Click Here: http://sourceforge.net/donate/ _______________________________________________ JBoss-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/jboss-user
------------------------------------------------------- This SF.net email is sponsored by: SF.net Giveback Program. Does SourceForge.net help you be more productive? Does it help you create better code? SHARE THE LOVE, and help us help YOU! Click Here: http://sourceforge.net/donate/ _______________________________________________ JBoss-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/jboss-user
