Hi,
we wrote a small application with some beans (cmp, stateful, stateless) and some JSP's.
The beans and the webapp are in the same security domain behind a form based login and
the DatabaseServerLoginModule.
After successful login (principal = name) and getting some JSP-stuff, the first access
to a ejb from another ejb throws a SecurityException.
The server had lost the principal (principal = null).
What's wrong ?
Our config:
JBoss 2.4.0.26 with Tomcat 3.2.3
Windows 2000
Oracle 8
the log:
[JBossSecurityMgrRealm] Authenticating access, username: alxs R( /foo + /control +
/sec/signin)
[JBossSecurityMgrRealm] ClassLoader: AdaptiveClassLoader( ):250746
[JBossSecurityMgrRealm] Servlet ClassLoader: AdaptiveClassLoader( ):1419599
...
[Default] User 'alxs' authenticated.
...
[JBossSecurityMgrRealm] Username: alxs is authenticated
[JBossSecurityMgrRealm] Authorizing access, username: alxs R( /foo + /control +
/sec/signin)
[JBossSecurityMgrRealm] ClassLoader: AdaptiveClassLoader( ):250746
[JBossSecurityMgrRealm] Servlet ClassLoader: AdaptiveClassLoader( ):1419599
[JBossSecurityMgrRealm] User: alxs is authorized
this happens when the ejb which was sucessfully created by the web-client tries to
create another bean:
[ClientController] Authentication exception, principal=null
[mi2DS] Pool mi2DS [0/1/10] returned object
org.jboss.pool.jdbc.xa.wrapper.XAConnectionImpl@1acd47 to the pool.
[ClientController] TRANSACTION ROLLBACK EXCEPTION:checkSecurityAssociation; nested
exception is:
java.lang.SecurityException: Authentication exception, principal=null; nested
exception is:
java.rmi.RemoteException: checkSecurityAssociation; nested exception is:
java.lang.SecurityException: Authentication exception, principal=null
[ClientController] java.rmi.RemoteException: checkSecurityAssociation; nested
exception is:
[ClientController] java.lang.SecurityException: Authentication exception,
principal=null
[ClientController] java.lang.SecurityException: Authentication exception,
principal=null
many thanks,
Gerald
_______________________________________________
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user
