Ok.  So I have taken the easy approach and collapsed all necessary classes to a 
single package - a little bit of an architectural cop-out, but I need to move 
things along.

My next issue is surrounding security.  I have enabled declarative security in 
the stateless session been which works when accessed from a standard web app; 
however when accessed via the web service, I receive the following:

anonymous wrote : javax.security.auth.login.FailedLoginException: Password 
Incorrect/Password Required
  | 

With trace level enabled on the jboss classes, I see that the username is not 
being picked up, thus the resulting password failure.  The following is a 
listing of the trace output:

2006-04-26 12:13:57,821 TRACE 
[org.jboss.security.auth.login.XMLLoginConfigImpl] Begin 
getAppConfigurationEntry(dia-policy), size=10
  | 2006-04-26 12:13:57,821 TRACE 
[org.jboss.security.auth.login.XMLLoginConfigImpl] End 
getAppConfigurationEntry(dia-policy), authInfo=AppConfigurationEntry[]:
  | [0]
  | LoginModule Class: org.jboss.security.auth.spi.UsersRolesLoginModule
  | ControlFlag: LoginModuleControlFlag: required
  | Options:name=rolesProperties, value=props/jbossws-roles.properties
  | name=usersProperties, value=props/jbossws-users.properties
  | [1]
  | LoginModule Class: org.jboss.security.ClientLoginModule
  | ControlFlag: LoginModuleControlFlag: required
  | Options:
  | 2006-04-26 12:13:57,821 TRACE 
[org.jboss.security.auth.spi.UsersRolesLoginModule] initialize, [EMAIL 
PROTECTED]
  | 2006-04-26 12:13:57,821 TRACE 
[org.jboss.security.auth.spi.UsersRolesLoginModule] findResource: null
  | 2006-04-26 12:13:57,821 TRACE 
[org.jboss.security.auth.spi.UsersRolesLoginModule] Properties 
file=file:/C:/java/jboss-4.0.4.CR2/server/dias/conf/props/jbossws-users.properties,
 defaults=null
  | 2006-04-26 12:13:57,821 DEBUG 
[org.jboss.security.auth.spi.UsersRolesLoginModule] Loaded properties, 
users=[jamesbr, kermit]
  | 2006-04-26 12:13:57,821 TRACE 
[org.jboss.security.auth.spi.UsersRolesLoginModule] findResource: null
  | 2006-04-26 12:13:57,821 TRACE 
[org.jboss.security.auth.spi.UsersRolesLoginModule] Properties 
file=file:/C:/java/jboss-4.0.4.CR2/server/dias/conf/props/jbossws-roles.properties,
 defaults=null
  | 2006-04-26 12:13:57,821 DEBUG 
[org.jboss.security.auth.spi.UsersRolesLoginModule] Loaded properties, 
users=[jamesbr, kermit]
  | 2006-04-26 12:13:57,821 TRACE 
[org.jboss.security.auth.spi.UsersRolesLoginModule] login
  | 2006-04-26 12:13:57,821 TRACE 
[org.jboss.security.auth.spi.UsersRolesLoginModule] Authenticating as 
unauthenticatedIdentity=null
  | 2006-04-26 12:13:57,821 DEBUG 
[org.jboss.security.auth.spi.UsersRolesLoginModule] Bad password for 
username=null
  | 2006-04-26 12:13:57,821 TRACE 
[org.jboss.security.auth.spi.UsersRolesLoginModule] abort

My login-config.xml entry is as follows (and works from a web app):

  |     <application-policy name="myapp-policy">
  |         <authentication>
  | 
  |             <login-module 
code="org.jboss.security.auth.spi.UsersRolesLoginModule" flag="required">
  |                 <module-option 
name="usersProperties">props/jbossws-users.properties</module-option>
  |                 <module-option 
name="rolesProperties">props/jbossws-roles.properties</module-option>
  |             </login-module>
  |             <login-module code="org.jboss.security.ClientLoginModule" 
flag="required" />
  |         </authentication>
  |     </application-policy>
  | 

Can anyone provide insight into why this is occuring? 

-- James

View the original post : 
http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3939560#3939560

Reply to the post : 
http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3939560


-------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
JBoss-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/jboss-user

Reply via email to