Scott,

Thanks for your help.

We are not using a custom cache or accessing the cache via JNDI. It's worth 
noting that the hsm policy, which is used by the application to authenticate 
Browser users, uses a custom principal and sets its principal via 
SecurityAssociationValve.userPrincipal.set(myIdentity). We did a walk-through 
of this code with a JBoss consultant a few months ago.  This should not matter 
at all because our analysis shows that the stack trace is only generated by one 
of datasources.  Always the second one accessed within a transaction.

We have also done a bunch of automated testing and it seems that the error does 
not occur if the databases are on the same server.

I did look into the source code of TimedCachePolicy and JaasSecurityManager 
before my last post. What really puzzled me was the synchronized block of 
domainCache for inserting entry should guarantee it should never try to insert 
duplicate entries, unless the peek() and remove() check code before insertion 
was somehow bypassed, which seemed only possible if there is a JDK bug for 
HashMap implementation of containKey() and get(). But I checked its source 
code, they are using the same algorithms under hood. So this will lead to a 
question of how does TimedCachePolicy get instantiated? I noticed it has other 
contructors with threadSafe flag defaults to false, but searching the whole 
JBoss source code base yields no direct calling of its constructors.

-Wei

View the original post : 
http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3936979#3936979

Reply to the post : 
http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3936979


-------------------------------------------------------
This SF.Net email is sponsored by xPML, a groundbreaking scripting language
that extends applications into web and mobile media. Attend the live webcast
and join the prime developer group breaking into this new coding territory!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642
_______________________________________________
JBoss-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/jboss-user

Reply via email to