Just a guess: The interceptor element looks a bit different in the docs on http://www.globus.org/toolkit/docs/4.2/4.2.1/security/wsaajava/descriptor/
(It's a containerSecurityDescriptor and not a serviceSecurityDescriptor, but still...) Does <interceptor name="gridmapAuthz:org.globus.wsrf.impl.security.GridMapPDP"> instead of <interceptor name="gridmap"> make it work? -Martin Johannes Duschl wrote: > Hello, > > I'm running gt-4.2.1.1 on Debian Lenny and want to use a separate > gridmap-file for a service. The security descriptor looks like this: > > <serviceSecurityConfig > xmlns="http://www.globus.org/security/descriptor/service"; > xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"; > xsi:schemaLocation="http://www.globus.org/security/descriptor > name_value_type.xsd" > xmlns:param="http://www.globus.org/security/descriptor";> > > <auth-method> > <GSISecureConversation/> > </auth-method> > > <authzChain> > <pdps> > <interceptor name="gridmap"> > <parameter> > <param:nameValueParam> > <param:parameter > name="gridmap-file" > > value="/home/globus/grid-mapfile"/> > </param:nameValueParam> > </parameter> > </interceptor> > </pdps> > </authzChain> > > </serviceSecurityConfig> > > However, when I connect to the service I get the following error: > > org.globus.wsrf.ResourceContextException: ; nested exception > is: > javax.naming.NamingException: [JWSCORE-203] Bean security > initialization failed [Root exception is > org.globus.wsrf.config.ConfigException: [JWSSEC-245] Error > parsing file: > "etc/at_jku_tk_service_core/service-instance-security.xml" [Caused > by: cvc-complex-type.2.4.c: The matching wildcard is strict, but no > declaration can be found for element 'param:nameValueParam'.]] > Exception in thread "main" java.lang.NullPointerException > > I assume there is something wrong with this schema > > xsi:schemaLocation="http://www.globus.org/security/descriptor > name_value_type.xsd > > but I have no idea what's causing the error. Anybody got a clue? > > Greetings, > Johannes >
