LDAP Security Realm created via Console can fail deployment
-----------------------------------------------------------

         Key: GERONIMO-1791
         URL: http://issues.apache.org/jira/browse/GERONIMO-1791
     Project: Geronimo
        Type: Bug
  Components: security  
    Versions: 1.0, 1.2, 1.1    
 Environment: Geronimo 1.0.0
    Reporter: Donald Woods
 Assigned to: Donald Woods 
    Priority: Minor
     Fix For: 1.1


Creation of an LDAP Security Realm through the Console can fail at runtime, due 
to a NullPointerException being thrown by the LDAPLoginModule not checking that 
the optional connectionProtocl and authentication attributes have not been 
supplied, while other attributes are being checked for null and empty string.

 655: 17:43:45,328 WARN [TomcatGeronimoRealm] Login exception authenticating 
username "system"
656: javax.security.auth.login.LoginException: Error filling callback list
657:  at 
org.apache.geronimo.security.jaas.client.ServerLoginProxy.login(ServerLoginProxy.java:78)
658:  at 
org.apache.geronimo.security.jaas.client.JaasLoginCoordinator.performLogin(JaasLoginCoordinator.java:189)
659:  at 
org.apache.geronimo.security.jaas.client.JaasLoginCoordinator.login(JaasLoginCoordinator.java:113)
660:  at sun.reflect.GeneratedMethodAccessor218.invoke(Unknown Source)
661:  at 
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java(Compiled
 Code))
662:  at java.lang.reflect.Method.invoke(Method.java(Compiled Code))
663:  at javax.security.auth.login.LoginContext.invoke(LoginContext.java:699)
664:  at 
javax.security.auth.login.LoginContext.access$000(LoginContext.java:151)
665:  at javax.security.auth.login.LoginContext$4.run(LoginContext.java:634)
666:  at java.security.AccessController.doPrivileged1(Native Method)
667:  at 
java.security.AccessController.doPrivileged(AccessController.java(Compiled 
Code))
668:  at 
javax.security.auth.login.LoginContext.invokeModule(LoginContext.java:631)
669:  at javax.security.auth.login.LoginContext.login(LoginContext.java:557)
670:  at 
org.apache.geronimo.tomcat.realm.TomcatGeronimoRealm.authenticate(TomcatGeronimoRealm.java:332)
671:  at 
org.apache.geronimo.tomcat.realm.TomcatGeronimoRealm.authenticate(TomcatGeronimoRealm.java:282)
672:  at 
org.apache.catalina.authenticator.FormAuthenticator.authenticate(FormAuthenticator.java:256)
673:  at 
org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:391)
674:  at 
org.apache.geronimo.tomcat.GeronimoStandardContext$SystemMethodValve.invoke(GeronimoStandardContext.java:273)
675:  at 
org.apache.geronimo.tomcat.valve.GeronimoBeforeAfterValve.invoke(GeronimoBeforeAfterValve.java:31)
676:  at 
org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:126)
677:  at 
org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:105)
678:  at 
org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:107)
679:  at 
org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:526)
680:  at 
org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:148)
681:  at 
org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:856)
682:  at 
org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.processConnection(Http11Protocol.java:744)
683:  at 
org.apache.tomcat.util.net.PoolTcpEndpoint.processSocket(PoolTcpEndpoint.java:527)
684:  at 
org.apache.tomcat.util.net.LeaderFollowerWorkerThread.runIt(LeaderFollowerWorkerThread.java:80)
685:  at 
org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:684)
686:  at java.lang.Thread.run(Thread.java:570)
687: Caused by: javax.security.auth.login.LoginException: LDAP Error
688:  at 
org.apache.geronimo.security.realm.providers.LDAPLoginModule.login(LDAPLoginModule.java:162)
689:  at 
org.apache.geronimo.security.jaas.server.JaasLoginService.performLogin(JaasLoginService.java:236)
690:  at 
org.apache.geronimo.security.jaas.server.JaasLoginService$$FastClassByCGLIB$$95b84fc9.invoke(<generated>)
691:  at net.sf.cglib.reflect.FastMethod.invoke(FastMethod.java(Inlined 
Compiled Code))
692:  at 
org.apache.geronimo.gbean.runtime.FastMethodInvoker.invoke(FastMethodInvoker.java(Compiled
 Code))
693:  at 
org.apache.geronimo.gbean.runtime.GBeanOperation.invoke(GBeanOperation.java(Inlined
 Compiled Code))
694:  at 
org.apache.geronimo.gbean.runtime.GBeanInstance.invoke(GBeanInstance.java(Compiled
 Code))
695:  at 
org.apache.geronimo.gbean.runtime.RawInvoker.invoke(RawInvoker.java(Inlined 
Compiled Code))
696:  at 
org.apache.geronimo.kernel.basic.RawOperationInvoker.invoke(RawOperationInvoker.java(Compiled
 Code))
697:  at 
org.apache.geronimo.kernel.basic.ProxyMethodInterceptor.intercept(ProxyMethodInterceptor.java(Compiled
 Code))
698:  at 
org.apache.geronimo.security.jaas.server.JaasLoginServiceMBean$$EnhancerByCGLIB$$4883447f.performLogin(<gene
rated>)
699:  at 
org.apache.geronimo.security.jaas.client.ServerLoginProxy.login(ServerLoginProxy.java:74)
700:  ... 29 more
701: Caused by: java.lang.NullPointerException
702:  at java.util.Hashtable.put(Hashtable.java(Compiled Code))
703:  at 
org.apache.geronimo.security.realm.providers.LDAPLoginModule.open(LDAPLoginModule.java:422)
704:  at 
org.apache.geronimo.security.realm.providers.LDAPLoginModule.authenticate(LDAPLoginModule.java:200)
705:  at 
org.apache.geronimo.security.realm.providers.LDAPLoginModule.login(LDAPLoginModule.java:155)
706:  ... 40 more

Thanks to VAMSAVARDHANA Vamsi for finding this problem.


-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
   http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see:
   http://www.atlassian.com/software/jira

Reply via email to