Bugs item #441638, was opened at 2001-07-16 02:22
You can respond by visiting: 
http://sourceforge.net/tracker/?func=detail&atid=376685&aid=441638&group_id=22866

Category: None
Group: None
Status: Open
Resolution: None
Priority: 5
Submitted By: Oleg Orlov (oleg_orlov)
Assigned to: Nobody/Anonymous (nobody)
Summary: failed to set custom security manager

Initial Comment:
I use JBoss-2.2.2_Tomcat-3.2.2 and edit jboss.jcml :

  <mbean 
code="org.jboss.security.plugins.JaasSecurityManagerSer
vice"
name="Security:name=JaasSecurityManager">
    <!--
    <attribute
name="SecurityManagerClassName">org.jboss.security.plug
ins.JaasSecurityManag
er</attribute>
    -->
    <attribute
name="SecurityManagerClassName">my.CustomSecurityManage
r</attribute>
  </mbean>

But after deployment security manager remains
org.jboss.security.plugins.JaasSecurityManager.

After some investigations i catch the source of the 
problem.
Constructor JaasSecurityManagerService() sets
org.jboss.security.plugins.JaasSecurityManager as 
default.
Next time, while reading jboss.jcml, container sets 
my.CustomSecurityManager
and register self as
the security manager factory.
While deployng, container make lookup
(securityManagerJNDIName). Lookup
instantiates security
manager factory, ie JaasSecurityManagerService, and in 
the constructor sets
default security
manager again!
This prevent me from replacing the security manager 
untill replacing
JaasSecurityManagerService or correcting
it code.

Possible fix in 
org.jboss.security.plugins.JaasSecurityManagerService:

    public JaasSecurityManagerService()
    {
        try
        {   // Use JaasSecurityManager as the default 
            if (securityMgrClass == null) 
            {
            setSecurityManagerClassName
("org.jboss.security.plugins.JaasSecurityManager");
            }
            // Use SubjectSecurityProxyFactory as the 
default SecurityProxyFactory
            if (securityProxyFactoryClass == null) 
            {
            setSecurityProxyFactoryClassName
("org.jboss.security.SubjectSecurityProxyFactory");
            }
        }
        catch(ClassNotFoundException e)
        {
        }
    }



----------------------------------------------------------------------

You can respond by visiting: 
http://sourceforge.net/tracker/?func=detail&atid=376685&aid=441638&group_id=22866

_______________________________________________
Jboss-development mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-development

Reply via email to