I apologize for not researching further before asking, but I'm hoping you
(someone) knows of the top of your head.
>This is a bug in the JAAS login config file class.
Has this been reported to Sun?
>The workaround it to have a single thread force a
>load of the login configuration file so that when the frames all try to
>access secured beans they don't cause the ConfigFile to be loaded
>by multiple threads.
Not sure what the implications of the bug are. Is the config file something
that gets loaded into cache once? Per user, or global, or could I have the
problem when any two people try to login at the same time? If global, is
there a call I can put into a static block somewhere (or in the servlet init
method) that will go ahead and load the file. If the problem occurs per
user, this could be a huge deal, if it is global, at worst I can add it to
the list of things to do when restarting JBoss, "login to clear threading
errors".
>I thought I added a synchronization that would prevent this
>from happening.
Where did you add this synchronization. 1) I want to make sure I have the
right version, 2) If I do, I'll be happy to explore and see why my code
still breaks.
Thanks,
Alex
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Scott M
Stark
Sent: Monday, May 21, 2001 12:05 PM
To: [EMAIL PROTECTED]
Subject: Re: [JBoss-user] problem with authentication
This is a bug in the JAAS login config file class. It is not thread safe and
when multiple login threads run at the same time it can produce the error
your seeing. I thought I added a synchronization that would prevent this
from happening. The workaround it to have a single thread force a
load of the login configuration file so that when the frames all try to
access secured beans they don't cause the ConfigFile to be loaded
by multiple threads.
----- Original Message -----
From: "Alex Radka" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, May 21, 2001 7:41 AM
Subject: [JBoss-user] problem with authentication
> Hi,
>
> I'm using JBoss-2.2.1 w/ the embedded Tomcat that comes with the release
> (3.2.1) on Win2000, and MySQL.
>
> I'm using Basic Authentication but to a DB instead of the prop files.
>
> My app uses frames with each frame calling a servlet which attaches to
> action classes which call stateless session beans. The start page has a
> tree navigation tool on one side, and an entry page on the other with some
> info based on who the user is.
>
> Everything works fine when my initial page has only one frame calling the
> servlet, so I'm pretty sure I have everything configured correctly. I get
> very odd behavior when both frames are hitting different session beans at
> the same time (which really only happens on the initial login).
>
> After login, depending on which frame gets 'there' first, a Security
> Exception is thrown, and the other frame builds correctly. What I mean by
> 'get there first', is that the next time I recreate, the other frame fails
> (with the same exception) while the original frame that failed builds
> correctly. All subsequent logins work fine until I restart JBoss.
>
> I'm not sure what info to include, so I'll start with the stack trace.
>
> Any help would be appreciated.
>
> Alex
>
> [ERROR] Mon May 21 09:18:23 EDT 2001--
> java.rmi.ServerException: Container exception. Notify the container
> developers :-); nested exception is:
> java.lang.SecurityException: Configuration Error:
> Line 55: expected '=', found 'null'
> java.lang.SecurityException: Configuration Error:
> Line 55: expected '=', found 'null'
> at
>
com.sun.security.auth.login.ConfigFile.getAppConfigurationEntry(ConfigFile.j
> ava:221)
> at javax.security.auth.login.LoginContext.init(LoginContext.java:172)
> at javax.security.auth.login.LoginContext.<init>(LoginContext.java:266)
> at javax.security.auth.login.LoginContext.<init>(LoginContext.java:380)
> at
>
org.jboss.security.plugins.JaasSecurityManager.defaultLogin(JaasSecurityMana
> ger.java:331)
_______________________________________________
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user
_______________________________________________
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user
