Re: [JBoss-user] set Port number

2001-05-03 Thread Scott M Stark

See http://www.jboss.org/documentation/HTML/ch10s03.html
for port configuration.

- Original Message - 
From: "Larchet Vincent" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, May 03, 2001 8:03 AM
Subject: [JBoss-user] set Port number


> Hi all,
> 
> I want to use jboss from behind a firewall and for this, i have to use fixed
> port numbers, i can block port number 1099, 
> but I can't find out how to block the third one that seems to be random
> generated.
> 
> Does any one knows how to do this?? Surely a configuration thing...
> 
> Thanx very much
> 
> vinz
> 



___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: use jnp as general purpose naming service? Re: [JBoss-user] persistent bind to jnp possible?

2001-05-03 Thread Scott M Stark

The jnp implementation does not support persistent storage of bindings. You
will have to federate with some other JNDI provider that does this.

- Original Message - 
From: <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, May 03, 2001 7:52 AM
Subject: use jnp as general purpose naming service? Re: [JBoss-user] persistent bind 
to jnp possible?


> 
> 
> Thanks for the reply. What I need is to use jnp as a general purpose naming
> service. We just need to store up to a hundred entries and only need
> naming, so, we do not want to get into a separate naming/directory
> service/server.
> 



___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] Anyone know how to federate across multiple jnp ...

2001-05-03 Thread Scott M Stark

Yes, jnp properly resovles references of type URL.

- Original Message - 
From: "Sam Yan" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, May 03, 2001 1:24 PM
Subject: RE: [JBoss-user] Anyone know how to federate across multiple jnp ...


> I looked for the example and must have missed something.  Also, I believe
> that I need to be more exact in my language, because it is easy to say
> something subtlety different than what I really meant.  Please forgive me
> for my inaccuracy and any help from a knowledgeable person is greatly
> appreciated.
> 
> I realize that you can use absolute url paths (i.e. use
> jnp://machine:port/somewhere) if one keeps around the url for all instances
> or JNDI, or in this case jnp.  What I was hoping for and am still uncertain
> as to whether jnp supports is the ability to bind a javax.naming.Reference,
> which contains a javax.naming.StringRefAddr that specifies a URL federated
> to another name space.   JNDI supports this as "URLs as References for
> Federation".  This saves complexity in the code by not having to keep urls
> around.  Then urls can be obtained on the fly (within JNDI) and not
> explicitly specified.  This allows for in context lookups which unites name
> space context with federation of name spaces.
> 
> We have a very complicated problem where our name space will continue to
> grow and grow.  It would be great to be able to stitch together name spaces
> using this technique.  Then we have separated a configuration problem from a
> programing problem.
> 
> Thanks again!
> 
> Sam
> -Original Message-
> From: Guy Rouillier [mailto:[EMAIL PROTECTED]]
> Sent: Wednesday, May 02, 2001 6:02 PM
> To: [EMAIL PROTECTED]
> Subject: Re: [JBoss-user] Anyone know how to federate across multiple
> jnp ...
> 
> 
> I provided an example of this just yesterday.
> 
> - Original Message -
> From: "Sam" <[EMAIL PROTECTED]>
> To: "JBOSS" <[EMAIL PROTECTED]>
> Sent: Wednesday, May 02, 2001 6:04 PM
> Subject: [JBoss-user] Anyone know how to federate across multiple jnp ...
> 
> 
> > Has anyone tried creating a URL reference to bind in jnp such that it
> > references another jnp on another instances of JBoss?
> >
> > I get confused when looking for a URL scheme name on a name space based on
> > jnp (i.e. ldap would look like ldap:/machine/dc=root).  All examples while
> > using jnp don't require a scheme name.
> >
> > Does anyone know if jnp supports url references?
> >
> > Any help is appreciated!
> >
> > Sam
> >
> > ___
> > JBoss-user mailing list
> > [EMAIL PROTECTED]
> > http://lists.sourceforge.net/lists/listinfo/jboss-user
> >
> 
> 
> ___
> JBoss-user mailing list
> [EMAIL PROTECTED]
> http://lists.sourceforge.net/lists/listinfo/jboss-user
> 
> ___
> JBoss-user mailing list
> [EMAIL PROTECTED]
> http://lists.sourceforge.net/lists/listinfo/jboss-user
> 


___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] MBean Newbie Difficulties -- JNDIMap

2001-05-04 Thread Scott M Stark

The stack trace is from the point where the JMX MLet loads beans from the jboss.conf
file, not the point where the Configuration loads the jboss.jcml file so the problem is
likely that you tried to place your entry in jboss.conf?

- Original Message - 
From: "Matt Davies" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, May 04, 2001 12:14 AM
Subject: [JBoss-user] MBean Newbie Difficulties -- JNDIMap


> Hi Guys,
> 
> I have written a general non-JBoss-specific MBean along the lines of Scott's 
> HOWTO document with JBoss providing a development and testing environment for 
> my activities. Having had some difficulty "deploying" my MBean I have reverted 
> to the original example in the HOWTO as shown in figure 11.8.
> 
> I cut and pasted these files into java files, creating a package "mbeantest", 
> and put the JAR into lib/ext. I had to remove the "log" object method calls as 
> it was not found and I was just trying to replicate my error using a well 
> known test case.
> 
> The jcml file update was exactly as provided in the HOWTO (at the bottom) with 
> a change to prefix JNDIMap with "mbeantest." for the code (xml) attribute.
> 
> Running this program using jboss 2.2.1 I get:
> 
> ...
> [Service Control] Registered with server
> java.lang.IllegalArgumentException: No object name specified
> at com.sun.management.jmx.MBeanServerImpl.createMBean(MBeanServerImpl.j
> ava:528)
> at javax.management.loading.MLet.getMBeansFromURL(MLet.java:523)
> at javax.management.loading.MLet.getMBeansFromURL(MLet.java:369)
> at org.jboss.Main.(Main.java:173)
> at org.jboss.Main$1.run(Main.java:107)
> at java.security.AccessController.doPrivileged(Native Method)
> at org.jboss.Main.main(Main.java:103)
> [Service Control] Initializing 11 MBeans
> ...
> 



___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] Logging

2001-05-04 Thread Scott M Stark

This is the default behavior for logging. All System.out.println statements
for me show up both on the console and the server.log file. Have you
changed the logging configuration from the default?

- Original Message - 
From: "Bojan Smojver" <[EMAIL PROTECTED]>
To: "JBoss User" <[EMAIL PROTECTED]>
Sent: Friday, May 04, 2001 6:24 AM
Subject: [JBoss-user] Logging


> A really simple and probably a really stupid question too: how do you
> make the System.out and System.err be redirected to server.log or any
> other file? All the System.out.println calls from within EJB's go
> nowhere for me...
> 
> Config:
> - RH Linux 7
> - Sun JDK 1.3.0_02
> - JBoss 2.2.1
> 
> Thanks,
> Bojan
> 
> ___
> JBoss-user mailing list
> [EMAIL PROTECTED]
> http://lists.sourceforge.net/lists/listinfo/jboss-user
> 


___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] Re: Web modules started before EJB modules. Why?

2001-05-04 Thread Scott M Stark

Enter it as a bug as sourceforge.

- Original Message - 
From: "Ralf Purnhagen" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, May 04, 2001 9:01 AM
Subject: [JBoss-user] Re: Web modules started before EJB modules. Why?


> Same at stopApplication. Would'nt it be more natural to first
> undeploy web modules and then EJBs?
> 
> Ralf
> 
> [EMAIL PROTECTED] wrote:
> > 
> > Hello everyone!
> > 
> > Let's examine startApplication(...) in
> > org.jboss.deployment.J2eeDeployer (Revision 1.20 or
> > 1.21, JBoss 2.2.1 or CVS).
> > 
> > It starts web modules (lines ca. 403), then it starts
> > EJB modules (lines ca. 423).
> > I didn't find any documentation that explains
> > this choice of behaviour. Wouldn't it be more natural
> > to start EJBs first?
> > Then autorun servlets wouldn't receive
> > javax.naming.NameNotFoundException due to not started
> > EJBs.
> > 
> > Please, enlight me :)
> > 
> > Jason: Thanks for explanation and fix of the
> > Handles :)
> > 
> > Andris Birkmanis
> > 
> > __
> > Do You Yahoo!?
> > Yahoo! Auctions - buy the things you want at great prices
> > http://auctions.yahoo.com/
> > 
> > ___
> > JBoss-user mailing list
> > [EMAIL PROTECTED]
> > http://lists.sourceforge.net/lists/listinfo/jboss-user
> 
> 
> ___
> JBoss-user mailing list
> [EMAIL PROTECTED]
> http://lists.sourceforge.net/lists/listinfo/jboss-user
> 


___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] Anyone know how to federate across multiple jnp ...

2001-05-04 Thread Scott M Stark

This is an issue seperate from References of type URL, but the jnp
InitialContextFactory does now accept jnp urls passed in via the provider url
property.

- Original Message - 
From: "Jason Dillon" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, May 04, 2001 7:25 PM
Subject: Re: [JBoss-user] Anyone know how to federate across multiple jnp ...


> Does this mean that jnp should accept more URL-like strings for
> Context.PROVIDER_URL inside the environment properties for an InitialContext:
> 
>   jnp://localhost:1099
> 
> I do not believe that it does.
> 
> --jason
> 
> 



___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] Anyone know how to federate across multiple jnp ...

2001-05-05 Thread Scott M Stark

Its been about a week. Here is a simple test that works against the current cvs:

jboss 722>cat tstNS.java
import java.util.Properties;
import javax.naming.*;

class tstNS
{
public static void main(String[] args) throws NamingException
{
Properties env = new Properties();
env.setProperty(Context.INITIAL_CONTEXT_FACTORY, 
"org.jnp.interfaces.NamingContextFactory");
env.setProperty(Context.PROVIDER_URL, "jnp://localhost:1099");
env.setProperty(Context.URL_PKG_PREFIXES , 
"org.jboss.naming:org.jnp.interfaces");
InitialContext ctx = new InitialContext(env);
System.out.println("Connected to JNDI");
}
}
jboss 723>java -classpath "/tmp/cvs/jboss/dist/client/jnp-client.jar;." tstNS
Connected to JNDI
jboss 724>

Most likely your using a jndi.properties that does not include the org.jnp.interfaces
package in the URL_PKG_PREFIXES if this does not work for you.

- Original Message - 
From: "Jason Dillon" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, May 04, 2001 9:50 PM
Subject: Re: [JBoss-user] Anyone know how to federate across multiple jnp ...


> How recently was this added?  I am just curious, because the EJB handle
> impl that I added (for container remembrance) would not work if I set the
> url to jnp://:, I had to set it to :.
> 
> --jason
> 
> On Fri, 4 May 2001, Scott M Stark wrote:
> 
> > This is an issue seperate from References of type URL, but the jnp
> > InitialContextFactory does now accept jnp urls passed in via the provider url
> > property.



___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] Anyone know how to federate across multiple jnp ...

2001-05-06 Thread Scott M Stark

jnp is the name of the jndi provider used by JBoss and is the protocol
url just as t3 is the weblogic's.
The jnp.properties file is used as the default values. If you don't set the port
values via the NamingService mbean attributes then the jnp.properties file
is used.

This jboss.jcml entry:
  
along with this jnp.properties file:
### JNP server configuration
jnp.port=1299
jnp.rmiPort=0

results in the naming service starting on port 1299:

...
[Naming] Starting
[Naming] Starting jnp server
[Naming] Started jnpPort=1299, rmiPort=0
[Naming] Naming started on port 1299
[Naming] Started

The

- Original Message - 
From: "Guy Rouillier" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, May 07, 2001 10:53 AM
Subject: Re: [JBoss-user] Anyone know how to federate across multiple jnp ...


> > Properties env = new Properties();
> > env.setProperty(Context.INITIAL_CONTEXT_FACTORY,
> "org.jnp.interfaces.NamingContextFactory");
> > env.setProperty(Context.PROVIDER_URL,
> "jnp://localhost:1099");
> > env.setProperty(Context.URL_PKG_PREFIXES ,
> "org.jboss.naming:org.jnp.interfaces");
> > InitialContext ctx = new InitialContext(env);
> 
> I left this in jboss.jcml:
> 
>   
>name="DefaultDomain:service=Naming">
> 1099
>   
> 
> and changed jnp.properties to this:
> 
> jnp.port=1299
> jnp.log=true
> 
> My client could connect with this in its jndi.properties file:
> 
> java.naming.provider.url=w2k-pro  OR
> java.naming.provider.url=w2k-pro:1099
> 
> but failed when I put this in jndi.properties:
> 
> java.naming.provider.url=jnp://w2k-pro:1299
> 
> with the following error:
> 
> Exception caught: javax.naming.ServiceUnavailableException: jnp [Root
> exception
> is java.net.UnknownHostException: jnp]
> 
> Obviously, I'm confused.
> 
> (1) What is the relationship between jnp and jndi?
> (2) When is jnp used?  In the default configuration, I only see the naming
> service specified in the jboss.jcml mbean started, as follows:
> 
> [Naming] Starting
> [Naming] [Naming] Started on port 1099
> [Naming] Naming started on port 1099
> [Naming] Started
> 
> When does jnp come into play, and when does jnp.properties get used?
> 



___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] Imports on jsp with tomcat on jboss.

2001-05-07 Thread Scott M Stark

The jsp compiler only sees the classes in the WEB-INF/classes directory.
This is a limitation of the jasper integration into tomcat.

- Original Message - 
From: "Eugene Gluzberg" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, May 07, 2001 9:48 AM
Subject: [JBoss-user] Imports on jsp with tomcat on jboss.


> Hi all,
> 
> I am trying to do an import in a jsp:
> <%@ page import="com.company.blah.*" %>
> 
> And I get a "package not found in import" error on compilation of the jsp.
> 
> The jsp is part of a WAR, the class that I am trying to import is in a ejb
> jar that is part of the same EAR application.
> 
> The j2ee deployer sais "add all ejb jar files to the common classpath". What
> am I doing wrong here?
> 
> Does the jsp compiler not get the "common classpath"?
> Error output below.
> 
> Thanks for your help.
> Eugene.
> 



___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] how to actually log from beans, JSPs, etc. (using the included log4j)

2001-05-08 Thread Scott M Stark

You have to configure the Log4jService to have the legacy jboss logging
pass through log4j. After that you use log4j as you would anywhere
else. Beans should simply use log4j directly.

- Original Message - 
From: "Otis Gospodnetic" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, May 08, 2001 9:26 AM
Subject: [JBoss-user] how to actually log from beans, JSPs, etc. (using the included 
log4j)


> Hello,
> 
> I searched the archives before asking, but the answers were not very clear
> to me.
> 
> JBoss does include log4j (in lib/ext directory there is log4j.jar).
> 
> But does JBoss include any logging beans that use log4j, or is that
> log4j.jar included simply to make it easier for people to write their own
> logging beans?
> 
> I need to provide logging feature to other beans, and I'm wondering what the
> most elegant and the fastest way to do that is.
> 
> If JBoss already has logging for beans then how do I use it?
> If it doesn't then should I implement my own logging stateless session bean?
> 
> Thank you,
> 
> Otis
> 
> 
> 
> ___
> JBoss-user mailing list
> [EMAIL PROTECTED]
> http://lists.sourceforge.net/lists/listinfo/jboss-user
> 


___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] Access Control Problem

2001-05-08 Thread Scott M Stark

Add -Djava.security.debug=all to the command line and make sure you
redirect the output to a file as you will get a ton of security debugging that
will tell you what policy files are loaded, etc.

- Original Message - 
From: "Michael Hustler" <[EMAIL PROTECTED]>
To: "Jboss (E-mail)" <[EMAIL PROTECTED]>
Sent: Tuesday, May 08, 2001 10:20 AM
Subject: [JBoss-user] Access Control Problem


> Hi, I'm having problems with the access control during a get or set
> Properties call.
> My server.policy file looks like:
> 
> grant {
> // Allow everything for now
> permission java.security.AllPermission;
> };
> 
> But I don't think it is being read.  Is there a way to verify this?
> The exception trace is bellow.
> 
> Exception in thread "main" java.security.AccessControlException: access
> denied (java.util.PropertyPermission * read,write)
> at
> java.security.AccessControlContext.checkPermission(AccessControlContext.java
> , Compiled Code)
> at
> java.security.AccessController.checkPermission(AccessController.java,
> Compiled Code)
> at java.lang.SecurityManager.checkPermission(SecurityManager.java,
> Compiled Code)
> at
> java.lang.SecurityManager.checkPropertiesAccess(SecurityManager.java,
> Compiled Code)
> at java.lang.System.getProperties(System.java, Compiled Code)
> at TestBmpClient.main(TestBmpClient.java, Compiled Code)
> 
> Thanks!
> mike.
> 
> 
> ___
> JBoss-user mailing list
> [EMAIL PROTECTED]
> http://lists.sourceforge.net/lists/listinfo/jboss-user
> 


___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] Access Control Problem

2001-05-08 Thread Scott M Stark

The server.policy is only for the JBoss server, not clients.

- Original Message - 
From: "Michael Hustler" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, May 08, 2001 1:22 PM
Subject: RE: [JBoss-user] Access Control Problem


> That helped - thanks!  Using the debug=all I found that the .java.policy
> file could not be found in my unix home directory or in the java rje
> directory.  I created a .java.policy file in my home directory which was
> identical to the server.policy file below.
> 
> Why was the server.policy file not used?  When running on NT, I don't
> remember having to define a .java.policy file.
> 
> thanks in advance.
> 
> m.
> 



___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] question

2001-05-08 Thread Scott M Stark

Either no protocol or jnp. The following are equivalent:

host:port
jnp://host:port

- Original Message - 
From: Eric Lindauer 
To: [EMAIL PROTECTED] 
Sent: Tuesday, May 08, 2001 3:16 PM
Subject: [JBoss-user] question


Hi from a new Jboss user.

I have a probably simple question.  In the jboss documentation, there exists 
a class with the following line, which is describing how to change the setup
of an initialContext to allow bean clients to connect from a machine other than
the one the server is running on:

IMPORTANT: If you want to test this in a real client-server
configuration, this class goes on the client; the URL of the naming provider
specifed in the class must be changed from 'localhost:1099' to the URL of the
naming service on the server


I have the IP address of the server machine, but can't seem to format the URL
correctly.  If the server ip is xxx.xxx.xxx.xxx, I've tried all of these:

xxx.xxx.xxx.xxx:1099
//xxx.xxx.xxx.xxx:1099
ldap://xxx.xxx.xxx.xxx:1099
http://xxx.xxx.xxx.xxx:1099

as you can see, I have no idea what the correct protocol is for finding JNDI
on the jBoss server.   Could anyone shed some light?

Thanks in advance for your help.
 Eric Lindauer
 [EMAIL PROTECTED]


___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] Anyone know how to federate across multiple jnp ...

2001-05-08 Thread Scott M Stark

It works fine for me from the client:

/tmp 586> java tstNS
Connecting to JNDI, env={java.naming.provider.url=jnp://localhost:1299,
java.naming.factory.initial=org.jnp.interfaces.NamingContextFactory,
java.naming.factory.url.pkgs=org.jboss.naming:org.jnp.interfaces}
Connected to JNDI
jnp://localhost:1299/queue -> org.jnp.interfaces.NamingContext@112b29b
queue -> org.jnp.interfaces.NamingContext@112a2f1
/tmp 587>cat tstNS.java
import java.util.Properties;
import javax.naming.*;

class tstNS
{
public static void main(String[] args) throws NamingException
{
Properties env = new Properties();
env.setProperty(Context.INITIAL_CONTEXT_FACTORY, 
"org.jnp.interfaces.NamingContextFactory");
env.setProperty(Context.PROVIDER_URL, "jnp://localhost:1299");
env.setProperty(Context.URL_PKG_PREFIXES , 
"org.jboss.naming:org.jnp.interfaces");
System.out.println("Connecting to JNDI, env="+env);
InitialContext ctx = new InitialContext(env);
System.out.println("Connected to JNDI");
Object tmp = ctx.lookup("jnp://localhost:1299/queue");
System.out.println("jnp://localhost:1299/queue -> "+tmp);
tmp = ctx.lookup("queue");
System.out.println("queue -> "+tmp);
}
}

- Original Message -
From: "Guy Rouillier" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, May 07, 2001 12:15 PM
Subject: Re: [JBoss-user] Anyone know how to federate across multiple jnp ...


> Scott, I used this approach and it does as you say - thanks.  One more
> question regarding jnp: is this protocol only used between 2 instances of
> JBoss?  I tried to use jnp://myserver:1299 from a command line client, and
> was told
>
> Exception caught: javax.naming.ServiceUnavailableException: jnp [Root
> exception
> is java.net.UnknownHostException: jnp]
>



___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] Anyone know how to federate across multiple jnp ...

2001-05-09 Thread Scott M Stark

The only fix is to use the latest cvs version and make sure your jndi.properties
includes both the org.jboss.naming and org.jnp.interfaces in the
Context.URL_PKG_PREFIXES, for example:

java.naming.factory.initial=org.jnp.interfaces.NamingContextFactory
java.naming.provider.url=jnp://serverhost:1099
java.naming.factory.url.pkgs=org.jboss.naming:org.jnp.interfaces

- Original Message - 
From: "Eric Lindauer" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, May 09, 2001 7:29 AM
Subject: Re: [JBoss-user] Anyone know how to federate across multiple jnp ...


> Hi Scott,
> 
> I got the same exception as Guy Roulier below.  I'm having trouble following
> the conversation you seem to have had with him about how to fix this
> problem...
> Would you mind repeating the fix to me?
> 
> I have not done any security policy configuration.  Using jnp:// does not
> work
> either connecting from the same machine ( where "localhost:1099" does work )
> or from a different machine. They both produce the exception listed.
> 
>   Thanks very much,
>Eric
> 



___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] seperate context

2001-05-09 Thread Scott M Stark

Define the nature of the collision so I can understand what you mean by
jar isolation.

- Original Message - 
From: "Ferguson, Doug" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, May 09, 2001 9:37 AM
Subject: [JBoss-user] seperate context


> Hey,
> 
> I am one of 3 developers currently working together on a jboss project.
> 
> We each are developing on our own piece of the project and sometimes
> updating utility classes that we all use.  We we are testing these updates,
> we don't won't to distribute the code to each other so we each build our
> own jar files and deploy seperately. Today we had our first collition, 
> we thought that jboss isolated jar files... but apparently they are sharing
> some sort of classloading...
> 
> Is ther anyway to setup seperate contexts in jboss? 
> Or some way to prevent us from stepping on each others toes, other
> than installing jboss on our local machines.
> 
> 
> The tomcat convention is really sweet. We have our dev env setup
> so that each developer has their own context(sandbox). 
> 
> Thanks,
> 
> d.
> 
> ___
> JBoss-user mailing list
> [EMAIL PROTECTED]
> http://lists.sourceforge.net/lists/listinfo/jboss-user
> 


___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] seperate context

2001-05-09 Thread Scott M Stark

Are there no jars in the classpath or lib/ext directory that are used by the
beans? Are there any exception being generated?

- Original Message - 
From: "Ferguson, Doug" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, May 09, 2001 11:36 AM
Subject: RE: [JBoss-user] seperate context


> We are still investivating the issue.
> 
> But what we see happen is.
> Developer A deploys bean A in a.jar.
> It works fine.
> Developer B deploys bean B in b.jar
> it works fine but breaks A.
> If a.jar is redeployed then A works again but B stops working.
> 
> d.
> 
> -Original Message-
> From: Scott M Stark [mailto:[EMAIL PROTECTED]]
> Sent: Wednesday, May 09, 2001 12:18 PM
> To: [EMAIL PROTECTED]
> Subject: Re: [JBoss-user] seperate context
> 
> 
> Define the nature of the collision so I can understand what you mean by
> jar isolation.
> 
> - Original Message - 
> From: "Ferguson, Doug" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: Wednesday, May 09, 2001 9:37 AM
> Subject: [JBoss-user] seperate context
> 
> 
> > Hey,
> > 
> > I am one of 3 developers currently working together on a jboss project.
> > 
> > We each are developing on our own piece of the project and sometimes
> > updating utility classes that we all use.  We we are testing these
> updates,
> > we don't won't to distribute the code to each other so we each build our
> > own jar files and deploy seperately. Today we had our first collition, 
> > we thought that jboss isolated jar files... but apparently they are
> sharing
> > some sort of classloading...
> > 
> > Is ther anyway to setup seperate contexts in jboss? 
> > Or some way to prevent us from stepping on each others toes, other
> > than installing jboss on our local machines.
> > 
> > 
> > The tomcat convention is really sweet. We have our dev env setup
> > so that each developer has their own context(sandbox). 
> > 
> > Thanks,
> > 
> > d.
> > 
> > ___
> > JBoss-user mailing list
> > [EMAIL PROTECTED]
> > http://lists.sourceforge.net/lists/listinfo/jboss-user
> > 
> 
> 
> ___
> JBoss-user mailing list
> [EMAIL PROTECTED]
> http://lists.sourceforge.net/lists/listinfo/jboss-user
> 
> ___
> JBoss-user mailing list
> [EMAIL PROTECTED]
> http://lists.sourceforge.net/lists/listinfo/jboss-user
> 


___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] catching all runtime exceptions in one place ??

2001-05-09 Thread Scott M Stark

My suggestion would be to use a custom log4j appender that only
looked for runtime exceptions and routed them as required. There
isn't one entry point into JBoss unless your talking just about EJB
access, in which case you could replace the LogInterceptor, there
isn't one point to collect all RuntimeExceptions

- Original Message - 
From: "Jim Archer" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, May 09, 2001 12:36 PM
Subject: [JBoss-user] catching all runtime exceptions in one place ??


> Hi All...
> 
> I have been beating up jBoss pretty hard and in general things go well. I 
> did find that Hypersonic tends to run out of memory (I really have to 
> switch to PostgreSQL) eventually and throws an Out of Memory Exception. 
> Well, thats fine.
> 
> However, it made me wonder if it is possible to have one spot where I can 
> catch these types of unexpected runtime exceptions and notify someone by 
> sending an email that it occured, or at least send it to something like 
> syslogd. Is there a facility for this or else is there a way I could write 
> one? Could an mbean do this?
> 
> Thanks...
> 
> Jim
> 
> 
> 
> 
> ___
> JBoss-user mailing list
> [EMAIL PROTECTED]
> http://lists.sourceforge.net/lists/listinfo/jboss-user
> 


___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] jBoss-2.2.1_Tomcat-3.2.1 rlease startup issue - WAR starts B4 EJBs

2001-05-09 Thread Scott M Stark

There is already a bug in sourceforge about this behavior.
http://sourceforge.net/tracker/index.php?func=detail&aid=421956&group_id=22866&atid=376685

- Original Message - 
From: "Jim Archer" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, May 09, 2001 12:43 PM
Subject: [JBoss-user] jBoss-2.2.1_Tomcat-3.2.1 rlease startup issue - WAR starts B4 
EJBs


> Hi All...
> 
> I am using the release of the jBoss/Tomcat bundle and it works very nicely.
> 
> One thing I have noticed during my testing is that when I start the server 
> and deploy my EAR, the servlets seem to deploy and start to operate before 
> the EJBs are bound in JNDI. Since the users are numerous and spread out 
> around the world, they are always trying to connect, even when the server 
> is down.
> 
> So what happens is that while jBoss is deploying my EAR, the servlets start 
> to work and get naming exceptions when they try to lookup EJBs that are not 
> bound yet. This results in my servlet sending a "server failed" error to 
> the client, which is usually an appropriatwe action when the servlet gets a 
> naming exception. This continues until the EJBs are bound and deployed, at 
> which time things start to work correctly.
> 
> I realize I could work around this by putting the network down on the 
> server or even just yanking the CAT5, but I'm wondering if there is a way 
> to configure it such that the servlets don't become active until the EJBs 
> are all completely deployed?
> 
> In case it matters, I'm on Debian/Linux with Sun JVM 1.3.
> 
> Thanks very much...
> 
> Jim
> 
> 
> 
> 
> ___
> JBoss-user mailing list
> [EMAIL PROTECTED]
> http://lists.sourceforge.net/lists/listinfo/jboss-user
> 


___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] Security Exception , but from where and how

2001-05-10 Thread Scott M Stark

See: http://www.jboss.org/documentation/migration.html

- Original Message - 
From: "Mukul Kumar" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, May 10, 2001 7:00 AM
Subject: [JBoss-user] Security Exception , but from where and how


> hi friends, 
> 
> I am having this strange problem . My bean compiles fine and is deployed
> fine on JBOSS2.2 . My client gives me the following exce[ption. I have tried
> this with all kind of beans from BMP's to stateles session beans. The point
> woth noting is that the same beansand clients used to work fine on jboss 2.0
> earlier. Please help me resolve my dilemna ASAP.
> 
> Got reference
> Exception in thread "main" java.lang.NoClassDefFoundError:
> org/jboss/security/SecurityAssociation
> at
> org.jboss.ejb.plugins.jrmp.interfaces.GenericProxy.getPrincipal(GenericProxy
> .java:184)
> at
> org.jboss.ejb.plugins.jrmp.interfaces.HomeProxy.invoke(HomeProxy.java:231)
> at $Proxy0.create(Unknown Source)
> at InterestClient.main(InterestClient.java:50)
> 
> Thanks,
> 
> Regards
> Mukul kumar
> 
> 
> 
> 
> ___
> JBoss-user mailing list
> [EMAIL PROTECTED]
> http://lists.sourceforge.net/lists/listinfo/jboss-user
> 


___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] tomcat-service.jar

2001-05-10 Thread Scott M Stark

I just verified this using the new jbosstest web integration testsuite. I'll
update the bundle with the correct tomcat-service.jar.

- Original Message - 
From: "Mayo, Eric" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, May 10, 2001 10:11 AM
Subject: [JBoss-user] tomcat-service.jar


> Hi all,
> 
> If anyone is authenticating with tomcat and passing the credentials through
> to jboss, there is a problem with the latest tomcat/jboss bundle:
> JBoss-2.2.1 + Tomcat-3.2.1
> 
> (9671204) [APR-19-2001] 
> 
> It seems that the tomcat-service.jar in the lib/ext directory is older than
> the one on the previous release, which is causing an error when jboss goes
> to authenticate (the function that retrieves the user password is getting a
> null pointer exception). 
> At any rate, copying the newer tomcat-service.jar from the previous release
> and restarting jboss seems to fix this problem.
> 
> Eric



___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] Unable to resolve JNDI name

2001-05-10 Thread Scott M Stark

Read the jboss.xml dtd which is available here: 
http://www.jboss.org/documentation/jboss.dtd

A descriptor like this:




com.asset.SMTPAdapter
com.asset.SMTPAdapterBean
com.asset.SMTPAdapterHome
com.asset.SMTPAdapter
Stateless
...




requires this:




com.asset.SMTPAdapter
com.asset.SMTPAdapterHome




for a client to be able to do this:
 Context ctx = new InitialContext();
 SMTPAdapterHome home = (SMTPAdapterHome)ctx.lookup("com.asset.SMTPAdapterHome");

- Original Message - 
From: "Manu Srivastava" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
Sent: Thursday, May 10, 2001 9:36 PM
Subject: Re: [JBoss-user] Unable to resolve JNDI name


> Hi Danch,
> 
> Thanks for the answer. 
> 
> Problem in copy and paste :-(
> 
>  tag is there in the jBoss.xml but
> it still it does not get the correct JNDI name. It
> deploys correctly though.
> 
> Any other clues??
> 
> Thanks and regards
> Manu
> 
> 



___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] System.out,System.err

2001-05-11 Thread Scott M Stark

I see calls to System.out appearing in the server.log file in 2.2.1
You'll have to look further into the issue.

- Original Message - 
From: "Scherr Gerolf" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, May 11, 2001 1:48 AM
Subject: [JBoss-user] System.out,System.err


> hi everybody!
> 
> - it seems to me that System.out and System.err do not appear in server.log
> anymore in jboss 2.2.1
> is there a config flag to change this behaviour or do I have to redirect
> them manually to a file? - if yes, where would be a good place to do that?
> 
> (we have some components which live in the server vm running as nt service,
> so we can't watch the console anymore)
> 
> gerolf.



___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] Question on Security Role Mapping

2001-05-11 Thread Scott M Stark

See the security tutorial: http://www.jboss.org/documentation/HTML/ch11s78.html

- Original Message - 
From: "Dale V. Georg" <[EMAIL PROTECTED]>
To: "jBoss mailing List" <[EMAIL PROTECTED]>
Sent: Friday, May 11, 2001 9:10 AM
Subject: [JBoss-user] Question on Security Role Mapping


> 
> In my ejb-jar.xml, I define a number of security roles, for example:
> 
> 
> All users with read access to instance
> 1
> Instance1Reader
> 
> 
> In other application servers that I have worked with, this role-name is
> a "logical" role name, which in turn must be mapped to a "physical"
> principle in the app server specific xml.  For example, in
> weblogic-ejb-jar.xml, I would specify:
> 
> 
>Instance1Reader
> guest
> 
> 
> However, unless I am missing something, it seems that jboss.xml does not
> provide an equivalent mapping, and that jBoss expects the role-name from
> the ejb-jar.xml file itself to be the actual principle name.  Is this
> correct?
> 
> Thanks,
> Dale
> 



___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] java:/comp/env problems?

2001-05-11 Thread Scott M Stark

For the jsp issue you need to include a jboss-web.xml descriptor in the WEB-INF
dir to map the ejb-refs in the web-app.xml descriptor to the deployment jndi name:

   
 ejb/UserAuthority
 ejb/UserAuthority
   


Your jboss.xml is missing:



OracleDS
java:/OracleDS



- Original Message - 
From: "David Ward" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, May 11, 2001 6:38 AM
Subject: [JBoss-user] java:/comp/env problems?


> Hi all,
> 
> I'm having a problem where my JSP can't find my ejb
> when in the java:comp/env namespace in JBoss.
> 
> In using the pre-configured/bundled
> JBoss-2.2.1_Tomcat-3.2.1 on RedHat Linux 7.0 (intel),
> JDK 1.3.0_02, and my EAR I created using the
> deploytool deploys fine on j2eesdk1.2.1.  It's a
> simple app: a jsp looks up a stateless session ejb
> which looks up a DataSource pointing at Oracle 8i.  I
> followed the online docs to the "T" to set up the
> OracleDS.
> 
> I've included the pertinant files, but basically, it
> doesn't
> look like the jsp can find the ejb when I reference it
> with java:comp/env/...  If I change my references back
> to not use java:comp/env/, it works on jboss but not
> on j2eesdk.  How can an EAR be completely J2EE
> portable when this happens?  Any suggestions?
> 
> Also, another problem I'm having though is
> that (when I change my code so it can find the ejb) my
> ejb can't seem to find the datasource, though
> it can in the j2eesdk.  Is there something wrong with
> my jboss.xml file?
> 
> Thanks for any help (and sorry for the long include
> below)...
> David
> 



___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] Plans for IIOP support in future releases of jBoss

2001-05-11 Thread Scott M Stark

At some point there will be support at its a requirement in EJB2.0.
Others have indicated they were looking into integrating IIOP but I
have not heard anything concrete. Search the archives at:
http://www.mail-archive.com/jboss-user%40lists.sourceforge.net/

- Original Message - 
From: "Pete Bennett" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, May 11, 2001 9:58 AM
Subject: [JBoss-user] Plans for IIOP support in future releases of jBoss


> I hope I am not going to get too flamed for posting this, but I have checked
> :-
> 
> - the jBoss FAQ "Q. Does jBoss support RMI/IIOP ? A. No"
> - all postings since I joined the group (no comments on future plans to
> support IIOP)
> - the mailing list archive (some questions and answers on the general topic
> but no concrete answers to some of the questions I wish to pose)
> 
> ... and not found the answer to the questions I wish to ask.
> 
> My situation is as follows :-
> 
> My company is likely to be in scenarios where it is using jBoss as an EJB
> container to wrap a variety of existing services in enterprise beans (to
> gain the pooling, scaleability, security, transactions etc... etc...).
> 
> However, within these scenarios we are very likely to face situations where
> we have a large number of non-Java, non-JSP clients (e.g. native Windows
> apps or hand-crafted Perl scripts) that wish to make use of the remote
> interfaces exposed by these enterprise beans.
> 
> I can see three broad scenarios to handle this eventuality :-
> 
> - get hold of the Java stubs as normal and then wrap them into C++ stubs for
> the native applications (C++, VB or Perl) to access (OK, but a little
> inelegent and possibly requiring a lot of work per bean)
> 
> - expose calls into the jBoss container via a "cross-platform" protocol. The
> two candidates which appeal to people in the C++, VB, Perl world are IIOP or
> SOAP.
> 
> - I have started to work with the ZOAP module which looks very promising,
> especially for the future, and can meet the cross-platform protocol needs I
> describe nicely.
> 
> - However, IIOP is well established now and people are used to working with
> it from all the languages I mention (plus the fact that you can easily
> reverse compile Java remotes into IDL and back into C++ stubs). They may
> have ORBs already integrated into their working environments so the learning
> curve is much shallower.
> 
> Apologies if I am opening up an age-old, done and dusted discussion (in
> which case, could someone point me to a reference to that
> discussion/possibly update the FAQ to prevent posts like this in the future)
> 
> ... but, if this is still an open topic ...
> 
> Why is it hard to support IIOP on the wire (technical issues ? no-one has
> come forward wanting to implement it ?)
> 
> Is there a general demand amongst users of the mailing list to support the
> sort of scenarios I lay out above ? How are you handling it now ?
> 
> Are there in fact plans "behind the scenes" to support IIOP in a future
> version of jBoss ?
> 
> Thanks in advance for any help you can give me on this topic,
> Pete
> 
> --
> Pete Bennett (mailto:[EMAIL PROTECTED])
> Principal Architect, Synomics Ltd.
> http://www.synomics.com
> 



___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] jboss.xml for web app

2001-05-11 Thread Scott M Stark

There is no jboss.xml for web applications, this is only for ejb-jars. You
use a jboss-web.xml for web applictions and it goes into the WEB-INF
directory.

- Original Message - 
From: "Jason Trust" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, May 11, 2001 10:23 AM
Subject: [JBoss-user] jboss.xml for web app


> Which directory does the jboss.xml go in for web applications:
> 
> META-INF
> or
> WEB-INF
> 
> Since the web.xml file is in WEB-INF, I am unsure if it needs to go here to
> be used, or in the META-INF.
> 
> 
> Thanks,
> Jason E. Trust
> 
> 
> ___
> JBoss-user mailing list
> [EMAIL PROTECTED]
> http://lists.sourceforge.net/lists/listinfo/jboss-user
> 


___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] jboss.xml res-ref-name exception during deploy

2001-05-11 Thread Scott M Stark

Because it does not conform to the jboss.xml dtd. See:
http://www.jboss.org/documentation/HTML/ch06.html
"Advanced container configuration : use of jboss.xml"

- Original Message - 
From: "David Ward" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Cc: <[EMAIL PROTECTED]>
Sent: Friday, May 11, 2001 10:49 AM
Subject: [JBoss-user] jboss.xml res-ref-name exception during deploy


> Does anyone know why this jboss.xml file causes the
> following exception when I drop it into
> $JBOSS_HOM/deploy/.?
> 
> 
>   
> 
>   UserAuthority
>   ejb/UserAuthority
>   
>   
> jdbc/database
> OracleDS
>   
> 
>   
>   
>  res-class="javax.sql.DataSource">
>   OracleDS
>   java:/OraceDS
> 
>   
>  
> 
> [Container factory]
> 
>Deploying:file:/usr/local/JBoss-2.2.1_Tomcat-3.2.1/jboss/tmp/deploy/Default/UserTest.ear
> [Container factory] org.jboss.ejb.DeploymentException:
> Error in jboss.xml for Bean UserAuthority: expected
> one res-ref-name tag
> [Container factory] at
> org.jboss.metadata.ApplicationMetaData.importJbossXml(ApplicationMetaData.java:323)
> [Container factory] at
> org.jboss.metadata.XmlFileLoader.load(XmlFileLoader.java:120)
> [Container factory] at
> org.jboss.ejb.ContainerFactory.deploy(ContainerFactory.java:388)
> 
> 
> 
> 
> __
> Do You Yahoo!?
> Yahoo! Auctions - buy the things you want at great prices
> http://auctions.yahoo.com/
> 
> ___
> JBoss-user mailing list
> [EMAIL PROTECTED]
> http://lists.sourceforge.net/lists/listinfo/jboss-user
> 


___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] Question on Security Role Mapping

2001-05-11 Thread Scott M Stark

The ejb-jar.xml roles are logical names. Where are you getting that they
are the principal name? The tutorial demonstrates that they are not
by securing the beans using a roles of Echo & Coder, to which the principal
names are mapped via the JAAS login module. The ejb-jar.xml descriptor
is completely portable to JBoss.

The only difference is that JBoss does not do the mapping via the jboss.xml
descriptor directly. Rather the  element specifies
the security manger instance that does this at runtime based on the authenticated
principal name.

- Original Message - 
From: "Dale V. Georg" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, May 11, 2001 11:45 AM
Subject: Re: [JBoss-user] Question on Security Role Mapping


> 
> Yes, I did read through that; in fact, I used that as my guide for
> converting our app from WebLogic to jBoss, and everything is working
> great.  I was just questioning whether the role-name in the ejb-jar.xml
> mapping directly to the security principle was the only way jBoss
> supported roles, or whether there was an additional mapping you could do
> in the jboss.xml.  
> 
> The main reason I'm looking at this is we are trying to make our app
> support multiple application servers.  Up until now, ejb-jar.xml was
> generic and didn't require changes between the different app servers,
> since any app server specific stuff was in the appserver.xml.  Further,
> in the appserver.xml we are mapping all of our roles to guest by
> default.  But if jBoss assumes that the role-name from ejb-jar.xml is
> the principle name, then we may need to have a special case for jBoss.
> 
> Thanks,
> Dale
> 
> 



___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] java:/comp/env problems?

2001-05-11 Thread Scott M Stark

Integrated support for jboss-web.xml independent of the web container
was just added recently and so has not been documented. The dtd is
available in the jboss cvs module as src/resources/org/jboss/metadata/jboss-web.dtd
which can be obtained online at sourceforge.

- Original Message - 
From: "David Ward" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Cc: <[EMAIL PROTECTED]>
Sent: Friday, May 11, 2001 11:52 AM
Subject: Re: [JBoss-user] java:/comp/env problems?


> Scott,
> 
> Thanks!  That got rid of all my problems.  It now
> finds everything, all the way down to the datasource,
> fine.
> 
> Does anyone know where on the jboss site there are
> docs that talk about the jboss-web.xml file?  There's
> a big DTD gif outlining jboss.xml, but I dont'
> remember reading anything about jboss-web.xml...
> 
> Thanks again,
> David



___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] java:/comp/env problems?

2001-05-12 Thread Scott M Stark

The java:comp/env namespace is a J2EE notion that applies to both
J2EE ejb & web components. The ejb spec goes into some detail
on this and the j2ee spec generalizes this. The servlet spec briefly
mentions the java:comp/env namespace and defers to the j2ee spec.

- Original Message - 
From: "Guy Rouillier" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, May 11, 2001 2:44 PM
Subject: Re: [JBoss-user] java:/comp/env problems?


> I thought the comp/env space was only for use from within EJBs.  I could be
> wrong, though, which is why I'm posting this so those who know can point
> that out.
> 
> - Original Message -
> From: "Mike Hoolehan" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: Friday, May 11, 2001 12:30 PM
> Subject: Re: [JBoss-user] java:/comp/env problems?
> 
> 
> > I've had trouble with lookups from web componenets to the comp/env space
> if
> > I don't have a jboss-web.xml file included in my WEB-INF directory. Try in
> > cluding an "empty" jboss-web.xml file, like this:
> 



___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] Question on Security Role Mapping

2001-05-14 Thread Scott M Stark

That is correct.

On Mon, 14 May 2001 15:52:05 -0400
 "Dale V. Georg" <[EMAIL PROTECTED]> wrote:
> 
> OK, I think I understand now.  Here's why I was getting
> confused:  I was
> looking at the JAAS login module which uses the
> users.properties and
> roles.properties files and I was sort of equating it to
> NT security
> where users.properties represents the NT users and
> roles.properties
> represents the NT groups.  And looking at it that way led
> me to the
> erroneous conclusion that the ejb-jar.xml entries were
> thus the
> principles (note that by principle I mean either the user
> id OR a user
> group from the underlying security system, and maybe that
> was another
> source of confusion on my part).  However, what you're
> saying is that
> the right way to look at it is that users.properties is
> the users and
> roles.properites maps the physical users to the logical
> roles.  Gee,
> it's obvious once you understand it. :)  Theoretically,
> then, you could
> have a JAAS login module that authenticated the user
> against an NT
> domain, discovered the NT groups the user belonged to,
> and then mapped
> those groups to the logical roles, correct?
> 
> Dale
> 
> 
>Dale V. Georg
>Technical Manager
>Indus Consultancy Services
>[EMAIL PROTECTED]
>(201) 261-3100 x229
> 
> 
> 

___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] SSL + Jaas

2001-05-14 Thread Scott M Stark

I haven't tried Tomcat/SSL so I would guess the credentials
are being stored differently and the JbossRealm needs to
access them differently. Can you post how your configuring
Tomcat with SSL so I can look into it?

On Mon, 14 May 2001 12:37:14 +0100
 Shotton Mark MMUk <[EMAIL PROTECTED]> wrote:
> Hello
> 
> Can anyone help me with a problem that I have with
> logging in to the JBoss
> security realm via Tomcat with SSL ...
> 
> I am running JBoss with an embedded Tomcat that has SSL
> enabled. I login to
> the tomcat SimpleRealm via SSL and the user is
> authenticated OK. However the
> user credentials are not propogated to the JbossRealm
> properly. I get a
> "principal = null" message from the JBoss
> SecurityInterceptor when I try to
> access some protected bean methods which this user has
> access to. If I don't
> use SSl, everything is OK.
> 
> Any advice would be much appreciated.
> 
> Mark
> 
> 
> Dr M.W. Shotton
> MICROMASS UK LIMITED
> Floats Road
> Wythenshawe
> Manchester M23 9LZ
> UK
> 
> +44 (0) 161 718 4548
> 
> 
> 
> ___
> JBoss-user mailing list
> [EMAIL PROTECTED]
> http://lists.sourceforge.net/lists/listinfo/jboss-user


___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] NamingService initialization problems--ConnectionException

2001-05-15 Thread Scott M Stark

The problem is the warning msg displayed at the start
of the server startup regarding the jndi.properties
file. You have a jndi.properties file in your classpath
that most likely contains a provider url which puts
the naming service in client mode and so fails to connect
to the non-existant server. Remove the jndi.properties
file from you classpath and all will be fine.

On Mon, 14 May 2001 19:01:21 -0500
 Tim Taylor <[EMAIL PROTECTED]> wrote:
> The NamingService initialization intermittently fails for
> me on both 
> JBoss-2.2 and JBoss-2.2.1.  I am running on Java 1.3
> under Cygwin on 
> Windows 2000.
> 
> It looks like the org.jboss.naming.NamingService.initService()
> method is 
> creating an InitialContext.  It seems strange that an
> InitialContext 
> should be created in the initialization of the naming
> service itself, 
> and that's where I get a ConnectionException.  The log
> with stack trace 
> is below.
> 
> I noticed that the initService() method no longer creates
> an 
> InitialContext in the latest/greatest JBoss in CVS.  Is
> there a 
> workaround for previous versions or do I need to use the
> development 
> version?   I'd rather use a released version if possible.
> 
> Thanks,
> 
> Tim Taylor
> 
> jboss.home = C:\cygwin\opt\jboss-2.2
> Using configuration "default"
> Please make sure the following is intended (check your
> CLASSPATH):
>   jndi.properties is read from

___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] JBoss security question

2001-05-16 Thread Scott M Stark

My reading of the spec is that if no roles have been assigned to a method
then
it is not acessible. This is base on these two paragraphs from page 233 of
the
1.1 spec:


Method permissions are defined in the deployment descriptor as a binary
relation from the set of security
roles to the set of methods of the home and remote interfaces of the
enterprise beans, including all
their superinterfaces (including the methods of the EJBHome and EJBObject
interfaces). The
method permissions relation includes the pair (R, M) if and only if the
security role R is allowed to
invoke the method M.

...

It is possible that some methods are not assigned to any security roles.
This means that none of the security
roles defined by the Application Assembler needs access to the methods.


- Original Message -
From: "Ralf Metzger" <[EMAIL PROTECTED]>
To: "JBOSS-User List" <[EMAIL PROTECTED]>
Sent: Monday, May 14, 2001 4:09 AM
Subject: [JBoss-user] JBoss security question


> Hi there,
> I have a question about security in jboss.
> When I want to invoke a method on my bean, I get an Illegal access
> Exception, because I have not set a  in my
> ejb-jar.xml. I found a posting in the archive, which is saying, that I
> need  for every method I want to access, but I could
> not find anything in the ejb secification. I thought, if no
>  is set, anybody could access it and I have to code
> the -Tag only for the methods I want to restrict the
> access to? This works fine with weblogic, but doesen't with jboss. Do I
> have to code  for every method in my ejb-jar.xml?
> Regards,
> -r.m.
>
> ___
> JBoss-user mailing list
> [EMAIL PROTECTED]
> http://lists.sourceforge.net/lists/listinfo/jboss-user
>


___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] JBossRealm Security Bug

2001-05-16 Thread Scott M Stark

Agreed. I'll update it.

- Original Message -
From: "Shotton Mark MMUk" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, May 15, 2001 6:12 AM
Subject: [JBoss-user] JBossRealm Security Bug


> Hello there
>
> There is an omission in the version of
org.jboss.tomcat.security.JbossRealm
> that I checked out of CVS from the contrib/tomcat area. The principal and
> credentials propogated from Tomcat are stored in ThreadLocal objects in
> org.jboss.security.SecurityAssociation. However these ThreadLocal
variables
> are never reset to null. So the threads are returned to the pool and can
be
> used again with the principal and credentials still set (not very
secure!).
>
> The JbossRealm should implement a method to reset the principal and
> credentials to null. I have done this as below:
>



___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] Using LDAP as an external context.

2001-05-16 Thread Scott M Stark

I've done federation with ldap but have not tried to write/read beans into
it. What is
your code for doing the bind and lookup of the bean?

- Original Message -
From: <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, May 14, 2001 5:39 AM
Subject: [JBoss-user] Using LDAP as an external context.


> I'm currently investigating federating an LDAP server (IPlanet currently)
> into JBoss's namespace.  I've been able to bind the LDAP namespace into
> JBoss using the ExternalContext mbean, and have even deployed a bean into
> that namespace.  The problem I'm encountering is that when I perform a
> lookup on the bean, the object that comes back is always an instance of an
>
> LdapContext.  Has anyone had any experience attempting this or something
> similar?
>
> Here is the information from the jboss.xml file I'm using to store the
> bean in the LDAP namespace.
>
> 
>   HelloWorld
>   external/ldap/testenv/cn=HelloWorld
> 
>
> -Mike Wolf
>
> ___
> JBoss-user mailing list
> [EMAIL PROTECTED]
> http://lists.sourceforge.net/lists/listinfo/jboss-user
>


___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] NamingService initialization problems--ConnectionException

2001-05-16 Thread Scott M Stark

There is supposed to be a jndi.properties file in the conf/default or
equivalent
jboss dist directory  that either does not set the provider url or has it
commented out. This sets only the initial context factory and the prefix
url packages.

- Original Message -
From: "Tim Taylor" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, May 15, 2001 10:40 AM
Subject: RE: [JBoss-user] NamingService initialization
problems--ConnectionException


> Scott, thanks for the reply.  I get an NPE when I delete the
jndi.properties
> file.
>
> Here's the code for org.jboss.naming.NamingService.initService() in JBoss
> 2.2.1.  Without the jndi.properties file, the System.getProperties... line
> gets an NPE.  With the jndi.properties file in place, the Context ctx =
...
> line gets a ConnectionException.  If the jndi.properties file contains no
> provider url, the Context ctx = ... line gets a ConfigurationException
> saying "Provider URL missing."
>
> Tim Taylor
>
> public void initService()
>throws Exception
> {
>// Read jndi.properties into system properties
>// RO: this is necessary because some components (=Tomcat servlets) use
a
>
>// buggy classloader that disallows finding the resource properly
>
>
System.getProperties().load(Thread.currentThread().getContextClassLoader().g
> etResourceAsStream
>("jndi.properties"));
>
>// Create "java:comp/env"
>RefAddr refAddr = new StringRefAddr("nns", "ENC");
>Reference envRef = new Reference("javax.naming.Context", refAddr,
> ENCFactory.class.getName(), null);
>Context ctx = (Context)new InitialContext().lookup("java:");
>ctx.rebind("comp", envRef);
> }



___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] Embedded Tomcat Load-On-Startup w/ EJB's

2001-05-16 Thread Scott M Stark

Embedded Tomcat Load-On-Startup w/ EJB'sIts a startup ordering bug that
needs to be fixed.
- Original Message -
From: John Moore
To: jBoss Users (E-mail)
Sent: Monday, May 14, 2001 11:54 AM
Subject: [JBoss-user] Embedded Tomcat Load-On-Startup w/ EJB's




We have a servlet that loads static data into the application object through
our entity beans; everything is running in jboss /w embedded tomcat.
Because Embedded Tomcat starts before the EJB container the servlet can't
get to the data.   I moved embedded tomcat to the end of the load sequence
(jboss.jcml) and it worked but .ear's can't be deployed.  Other than a
timer, is their a signal/listener that i can register with to wait for JBoss
to deploy the beans so I can then let the servlet go do it's thing?  Should
I just do a shell script to force the initialization of the servlet
immediately following jboss loading.  This doesn't really seem to warrant an
mbean.
Has anyone tackled something like this yet?
TIA,
John Moore


___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] NamingService initialization problems--ConnectionException

2001-05-19 Thread Scott M Stark

I'm not sure which version of JBoss your using so lets get in synch on that point.
What version are you using?

I use cygwin on w2k as well and the only time I came across the issue you mention
is when I first rebuilt the jnp JNDI provider code and dropped it onto the 2.2.0
release. This is when I saw that there had been a change to the jnp code that had
not been tested against the jboss code and so I updated the NamingService code to
not attempt to start the jnp provider in initService.

If you using a cygwin sh to start JBoss post that as well in case there is some cygwin
issue although I doubt it.

- Original Message - 
From: "Tim Taylor" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, May 16, 2001 6:38 AM
Subject: RE: [JBoss-user] NamingService initialization problems--ConnectionException


> Yes.  That file is there and it sets no provider url.  That causes a
> "Missing Provider URL ConfigurationException" in the
> NamingService.initService() method.  If I slow the server startup down with
> a debugger, the server starts up fine.  It looks like you may have fixed
> this issue in the CVS trunk by moving the creation of the InitialContext to
> after the naming.start() call in the NamingService.startService() method.  
> 
> However, you also seem to be saying that it should be possible to create an
> InitialContext within JBoss's VM even if the NamingService.startService()
> has yet to be called in the startup sequence.  I.e., the naming service has
> a mode where it uses the provider url (client mode) and one where it doesn't
> (server mode).
> 
> Thanks for the help so far.  I'm using Cygwin, so I'm sure it's something
> I'm doing.
> 
> JBoss is great, BTW!  I'm running it on Solaris and Linux with zero
> problems.
> 



___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] Embedded Tomcat Load-On-Startup w/ EJB's

2001-05-19 Thread Scott M Stark

RE: [JBoss-user] Embedded Tomcat Load-On-Startup w/ EJB's
It should be a simple fix to the startApplication /stopApplication code of the
org.jboss.deployment.J2eeDeployer class.

Right now the web modules are deployed before the ejb modules. Just switch the
order of the two code fragments. I'll look at it tomorrow but if you have a tested
fix before then just post the patch to sourceforge.

- Original Message - 
From: John Moore 
To: '[EMAIL PROTECTED]' 
Sent: Wednesday, May 16, 2001 7:49 AM
Subject: RE: [JBoss-user] Embedded Tomcat Load-On-Startup w/ EJB's




Scott, 
I saw that you were identified as the owner of the bug; if you 
believe there is a straight forward solution and can point me in the 
right direction I'd be happy to take a look at it and see what I can 
come up with.  
It seems like you would have to wait for the container to deploy 
the EJB's and then signal Tomcat to execute the servlets identified 
in the load on startup.  
John Moore 

-Original Message- 
From: Scott M Stark [mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, May 16, 2001 3:56 AM 
To: [EMAIL PROTECTED] 
Subject: Re: [JBoss-user] Embedded Tomcat Load-On-Startup w/ EJB's 


Embedded Tomcat Load-On-Startup w/ EJB'sIts a startup ordering bug that 
needs to be fixed. 



___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] Embedded Tomcat Load-On-Startup w/ EJB's

2001-05-19 Thread Scott M Stark


That is a valid point as I can't find any clear statement in the spec that indicates
a web component should be able to access an ejb component in its init method.
Since web components do have a load on startup option, it does make sense
to load them last and unload first when deploying an ear. 

- Original Message - 
From: "Damon Hart-Davis" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, May 16, 2001 8:21 AM
Subject: Re: [JBoss-user] Embedded Tomcat Load-On-Startup w/ EJB's


> Hi,
> 
> I don't really see this as being a bug per se.  All the components of a
> large (for some J2EE platforms, distributed) app are bound to start up
> at different times.  I see something like this in Sun's RI and JBoss and
> Orion (I think).  I simply make the WAR prepared to back off if it finds
> the EJBs not to be ready.  A bit ugly, but since I am prepared to tunnel
> the data over HTTP and recover from errors in that gracefully I already
> had the infrastructure in place.
> 
> Rgds
> 
> Damon
> 
> > John Moore wrote:
> > 
> > Scott,
> > 
> > I saw that you were identified as the owner of the bug; if you
> > believe there is a straight forward solution and can point me in the
> > right direction I'd be happy to take a look at it and see what I can
> > come up with.
> > 
> > It seems like you would have to wait for the container to deploy
> > the EJB's and then signal Tomcat to execute the servlets identified
> > in the load on startup.
> > 
> > John Moore
> > 
> > -Original Message-
> > From: Scott M Stark [mailto:[EMAIL PROTECTED]]
> > Sent: Wednesday, May 16, 2001 3:56 AM
> > To: [EMAIL PROTECTED]
> > Subject: Re: [JBoss-user] Embedded Tomcat Load-On-Startup w/ EJB's
> > 
> > Embedded Tomcat Load-On-Startup w/ EJB'sIts a startup ordering bug
> > that
> > needs to be fixed.
> > - Original Message -
> > From: John Moore
> > To: jBoss Users (E-mail)
> > Sent: Monday, May 14, 2001 11:54 AM
> > Subject: [JBoss-user] Embedded Tomcat Load-On-Startup w/ EJB's
> > 
> > We have a servlet that loads static data into the application object
> > through
> > our entity beans; everything is running in jboss /w embedded tomcat.
> > Because Embedded Tomcat starts before the EJB container the servlet
> > can't
> > get to the data.   I moved embedded tomcat to the end of the load
> > sequence
> > (jboss.jcml) and it worked but .ear's can't be deployed.  Other than a
> > 
> > timer, is their a signal/listener that i can register with to wait for
> > JBoss
> > to deploy the beans so I can then let the servlet go do it's thing?
> > Should
> > I just do a shell script to force the initialization of the servlet
> > immediately following jboss loading.  This doesn't really seem to
> > warrant an
> > mbean.
> > Has anyone tackled something like this yet?
> > TIA,
> > John Moore
> > 
> > ___
> > JBoss-user mailing list
> > [EMAIL PROTECTED]
> > http://lists.sourceforge.net/lists/listinfo/jboss-user
> 
> -- 
> Work: [EMAIL PROTECTED]http://www.jWorkers.com/
> Idle: [EMAIL PROTECTED] http://d.hd.org/
> Tel: +44 20 8296 5566 / 5577 (fax 5578)
> 
> ___
> JBoss-user mailing list
> [EMAIL PROTECTED]
> http://lists.sourceforge.net/lists/listinfo/jboss-user
> 


___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] JBoss and ANT

2001-05-19 Thread Scott M Stark


JBoss ejb jars are pretty trivial constructs in ant because there is no stub
compiliation step as required by weblogic. I would have to look at the current
ejb jar ANT task to see if it offers sufficient simplication of the steps
required. Maybe it does.

- Original Message -
From: Michael P. McCutcheon
To: [EMAIL PROTECTED]
Sent: Wednesday, May 16, 2001 8:24 PM
Subject: [JBoss-user] JBoss and ANT


They are taking feature requests at the Jakarta project...wouldn't it be cool if ANT 
could build EJB jars that would work in JBoss?

Has anyone submitted a request to the ANT developers about this?  Currently I believe 
that the EJB jar generating feature in ANT
only supports BEA.

Oh, by the way...seen JBuilder 5?  It has been announced on Borland.com

Cool!

Mike


___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] 2nd Deployment Fails

2001-05-19 Thread Scott M Stark

You can't deploy the custom catgory and factory in the
same jar as the ejb-jar because each deployment results
in a new type of TraceCategory. In Java the identity of
a class is determined by both the class name and its
ClassLoader. The first time you deploy it works and the
log4j Category class saves away the TraceCategory
instance with a category name of MyMDB.class.getName()
in the Hierarchy instance hashtable. On subsequent deployments
a new instance is not created because a category with
the name MyMDB.class.getName() already exists but its
type != the TraceCategory in the newly loaded ejb-jar
because different ClassLoaders were used.

You have to put your log4j customizations in the JBoss
lib/ext directory or some other path added via the
ClassPathExtension MBean.


Michael Hustler wrote:

> I am using log4j as the trace mechanisim for all of my beans.  I have
> extended log4j slightly to add new categories.  The typical static
> definition inside each bean class is:
>   static TraceCategory trace =
>   (TraceCategory) TraceCategory.getInstance( MyMDB.class );
> 
> MDB or Entity Bean the problem is the same.
> 
> The first time I deploy everything works great.
> 
> If I deploy a second time (while the server is still running) I get a
> ClassCastException:
>ERROR 2001-05-18 08:55:28,952 [Auto deploy]
> java.lang.ExceptionInInitializerError: java.lang.ClassCastException
> 
> This is due to the static initializer shown above.  I have tried moving the
> initialization to the constructor instead with no success.  The
> getInstance() method above looks like this:
> 
>   public static Category getInstance( String name )
>   { 
>   return Category.getInstance( name, factory );
>   }
> 
> I have a single JAR file that I deploy.  It contains both MyMDB class and
> the TraceCategory class.
> 
> Your help is greately appreciated!!
> 
> -mike
> 


___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] Please help :-( tomcat Servlet => Jboss EJB => JAAS Authentiaction

2001-05-19 Thread Scott M Stark

Currently(JBoss-2.2.1) the security information that is obtained
from the server request is stored in a ThreadLocal and so
is only available to the request thread. You need to propagate
the security information to any child threads.

As of JBoss-2.3, security information is stored in an
InheritableThreadLocal and so is propgated automatically
to any child threads.

Lewis Henderson wrote:

> ...this is the important bit of the trace...
> ...the remote interface is stored and retrieved correctly on the session,
> however the SecurityAssociation was stored in a ThreadLocal on Thread-12
> earlier and now we are using Thread-10...
> 
> marc suggests that we need some kind of InheritableThreadLocal
> implementation to get round this...
> 
> I am using embedded tomcat if that helps anyone...?
> 


___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] External JNDI Configuration for a Filesystem

2001-05-19 Thread Scott M Stark

Attribute names are case sensitive.
external/fs/mike
must be:
external/fs/mike

- Original Message - 
From: "Michael Azzi" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, May 18, 2001 2:32 PM
Subject: [JBoss-user] External JNDI Configuration for a Filesystem


> Hi,
> 
> I am trying to incorporate my filesystem directories into the JBoss server
> JNDI namespace, using the ExternalContext JNDI MBean. But I am not
> having any luck whatsoever, and I would really appreciate some help.
> I followed Scott Stark's tutorial for this, and as the tutorial suggested
> I first added the ExternalContext MBean to the jboss.cml file, like so:
> 
>   
>name="DefaultDomain:service=ExternalContext,jndiName=external/fs/mike">
> external/fs/mike
> mike_fs.properties
> javax.naming.InitialContext
> true
>   
> 
> Then, I created a mike_fs.properties file that has the following content,
> 
> java.naming.factory.initial=com.sun.jndi.fscontext.FSContextFactory
> java.naming.provider.url=file:///mazzi
> #java.naming.factory.url.pkgs=org.jboss.naming
> 
> and put in the jboss/conf/tomcat directory.
> I also downloaded the JNDI File System Service Provider package
> and put it in the jboss/lib/ext directory.
> 
> The problem happens at start up time when I get the exception below.
> I am running JBoss2.2.1/Tomcat3.2.1, jdk1.3.1, on NT4.
> 
> Thanks in advance,
> Mike.
> 



___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] Can jndi.properties be remote?

2001-05-19 Thread Scott M Stark

It sounds like your trying to statically configure a potentially large
dynamic namespace. Why not look into using JINI to create a
self configuring namespace. Its simple to load a file from a URL,
but since you need a unique URL for each unique jndi.properties
file you have to setup a URL namespace to access your JNDI
namspace setup.

- Original Message - 
From: "Sam" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Cc: "Gagan Bhatia" <[EMAIL PROTECTED]>
Sent: Wednesday, May 16, 2001 1:26 PM
Subject: [JBoss-user] Can jndi.properties be remote?


> Hello JBoss,
> 
> We are currently investigating whether or not we can abstract also the
> access to a remote naming server.  Basically, we are looking for a way to
> load the JBoss system JNDI InitialContext() through a remote jndi.properties
> type file (or just its information).
> 
> We are planning to have lots of different service from lots of different
> machines, and we are planning to keep everything straight through extensive
> use of jndi/jnp.  This ability would allow lots of JBoss instances to point
> to a configurable common name space.
> 
> Is it possible to refer to jndi.properties through URL?  If so, how can this
> be configured?  Our hopes are to avoid having to set system properties
> manually with the correct configuration prior to 'new InitialContext()'.
> 
> Thanks in advance for your comments.
> 
> Sam
> 
> ___
> JBoss-user mailing list
> [EMAIL PROTECTED]
> http://lists.sourceforge.net/lists/listinfo/jboss-user
> 


___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] ClassPathExtension mechanism does not seem to work...

2001-05-21 Thread Scott M Stark

It works fine for me. Are you using the bundled JBoss/Tomcat distribution?

- Original Message - 
From: "Adam Lipscombe" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, May 21, 2001 6:46 AM
Subject: [JBoss-user] ClassPathExtension mechanism does not seem to work...


> Hi All,
> 
> 
> Does anyone know how the "org.jboss.util.ClassPathExtension" mechanism works
> in jboss.conf?
> 
> I added my libs there, and the server log reports that they have been
> loaded.
> However I get a ClassNotFoundException at runtime.
> 
> The only way I can get JBoss/Tomcat to "see" the extra libs is to specify
> them as the "-classpath" arg when starting jboss via run.bat.
> 
> 
> Is the ClassPathExtension broken?
> 
> 
> Cheers - Adam



___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] problem with authentication

2001-05-21 Thread Scott M Stark

This is a bug in the JAAS login config file class. It is not thread safe and
when multiple login threads run at the same time it can produce the error
your seeing. I thought I added a synchronization that would prevent this
from happening. The workaround it to have a single thread force a
load of the login configuration file so that when the frames all try to
access secured beans they don't cause the ConfigFile to be loaded
by multiple threads.

- Original Message - 
From: "Alex Radka" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, May 21, 2001 7:41 AM
Subject: [JBoss-user] problem with authentication


> Hi,
> 
> I'm using JBoss-2.2.1 w/ the embedded Tomcat that comes with the release
> (3.2.1) on Win2000, and MySQL.
> 
> I'm using Basic Authentication but to a DB instead of the prop files.
> 
> My app uses frames with each frame calling a servlet which attaches to
> action classes which call stateless session beans.  The start page has a
> tree navigation tool on one side, and an entry page on the other with some
> info based on who the user is.
> 
> Everything works fine when my initial page has only one frame calling the
> servlet, so I'm pretty sure I have everything configured correctly.  I get
> very odd behavior when both frames are hitting different session beans at
> the same time (which really only happens on the initial login).
> 
> After login, depending on which frame gets 'there' first, a Security
> Exception is thrown, and the other frame builds correctly.  What I mean by
> 'get there first', is that the next time I recreate, the other frame fails
> (with the same exception) while the original frame that failed builds
> correctly. All subsequent logins work fine until I restart JBoss.
> 
> I'm not sure what info to include, so I'll start with the stack trace.
> 
> Any help would be appreciated.
> 
> Alex
> 
> [ERROR] Mon May 21 09:18:23 EDT 2001--
> java.rmi.ServerException: Container exception. Notify the container
> developers :-); nested exception is:
> java.lang.SecurityException: Configuration Error:
> Line 55: expected '=', found 'null'
> java.lang.SecurityException: Configuration Error:
> Line 55: expected '=', found 'null'
> at
> com.sun.security.auth.login.ConfigFile.getAppConfigurationEntry(ConfigFile.j
> ava:221)
> at javax.security.auth.login.LoginContext.init(LoginContext.java:172)
> at javax.security.auth.login.LoginContext.(LoginContext.java:266)
> at javax.security.auth.login.LoginContext.(LoginContext.java:380)
> at
> org.jboss.security.plugins.JaasSecurityManager.defaultLogin(JaasSecurityMana
> ger.java:331)



___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] Message Driven Beans test problem

2001-05-21 Thread Scott M Stark

Every jar in lib/ext is automatically loaded. The fact that you have to insert two
jars ahead of your existing CLASSPATH to get things to work indicates that
you have an incompatible jar(s) in your CLASSPATH(like j2ee.jar) that is preventing
the loading of class files from the corresponding JBoss bundled jars. Cleanup
or don't use the global CLASSPATH.

The ejb-name DurableTopicBean should be MDB in the container-transaction element

- Original Message - 
From: "Darius Davidavicius" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, May 21, 2001 8:40 AM
Subject: Re: [JBoss-user] Message Driven Beans test problem


> HI all again,
> 
> if I adding line:
> 
> set 
>CLASSPATH=%JBOSS_HOME%\lib\ext\ejb2.0.jar;%JBOSS_HOME%\lib\ext\jms.jar;%CLASSPATH%;../lib/crimson.jar;
> in the run.cmd file everythink is ok.
> 
> I think it is strange and not correct way of problem solving.
> 
> And one more point:
> I have created test message driven bean according 
>http://www.jboss.org/documentation/HTML/ch07s03.html description.
> I can find ejb-jar of the MDB bean but  
> 
>
>   
>DurableTopicBean   < i think here should be MDB 
>instead of DurableTopicBean is it?
> ...
> 
> Regards,
> D&D
> 



___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] Please help :-( tomcat Servlet => Jboss EJB => JAAS Authentiaction

2001-05-21 Thread Scott M Stark

If by client side you mean a client running in a VM external to the JBoss
server VM, then this is the expected default behavior. Multi-threaded clients
need to enable the thread local storage mode of the SecurityAssociation
class by either calling SecurityAssociation.setServer() or equivalently
adding a multi-threaded=true option to the JAAS ClientLoginModule config:

other {
org.jboss.security.ClientLoginModule  required multi-threaded=true ;
};

- Original Message - 
From: "Lewis Henderson" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Sunday, May 20, 2001 1:31 PM
Subject: RE: [JBoss-user] Please help :-( tomcat Servlet => Jboss EJB => JAAS 
Authentiaction


> ...I tried the three new jars...I get the same problem...However, the
> problem is 'client' side.
> 
> Using two machines, both with JBoss & Embedded Tomcat, I connect my browser
> to machine 1 for Tomcat JSP's talking to machine 2's EJB's...
> 
> My proxy on the client-side looses the SecurityAssociation as it's threads
> change...
> 
> ...am I making sense and is there anything else I can try?
> 
> 
> Lewis
> -Original Message-



___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] Please help :-( tomcat Servlet => Jboss EJB => JAAS Authentiaction

2001-05-21 Thread Scott M Stark

So add a client configuration entry to the server auth.conf and use it for your
client LoginContext creation. The current contrib/tomcat module code has
two example tomcat request interceptors that integrate into the JBoss security
layer.

- Original Message - 
From: "Lewis Henderson" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, May 21, 2001 1:29 PM
Subject: Re: [JBoss-user] Please help :-( tomcat Servlet => Jboss EJB => JAAS 
Authentiaction


> ...I was trying to run an embedded tomcat client talking to jboss in the 
> same VM! There is another issue to this in that you cannot have override 
> java.security.auth.login.config for the client as the server also uses it!
> 
> If I use stand-alone tomcat everything seems to work...I'm still holding my 
> breath on this one!!
> 
> It seems from the above that there needs to be two SecurityAssociations, one 
> for the server and another for clients when using tomcat embedded...
> 
> 
> Lewis
> _
> Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.
> 
> 
> ___
> JBoss-user mailing list
> [EMAIL PROTECTED]
> http://lists.sourceforge.net/lists/listinfo/jboss-user
> 


___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] What is "Leaving out a server session"?

2001-05-21 Thread Scott M Stark

Its simply a debug message that should be "Handing out a server session"
in English. There appears to have been a slight translation problem when
the message was added. You can safely ignore the message.

- Original Message - 
From: "Jim Brownfield" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, May 21, 2001 6:35 PM
Subject: [JBoss-user] What is "Leaving out a server session"?


> I've looked on the archive, and I can't find a reference to this.
> 
> I have an MBean publishing ObjectMessage objects on a timer.  In my test,
> within the same JVM (although, of course, this wouldn't always be the case),
> I have a Message Driven Bean receiving the published objects and updating an
> entity bean.  Every time the timer fires off, I get this message in
> server.log:  "[Container factory] Leaving out a server session".  This
> message appears to be coming from
> org.jboss.jms.asf.StdServerSessionPool.getServerSession() and is a
> "Logger.debug()" level message, so presumably it's not too harmful.
> However, since this message is printed for every published message, I'm
> concerned that I am doing something stupid that is causing excess resource
> utilization.
> 
> Is this a problem, or can I just turn off debug-level output to the logs?
> 
> Thank you in advance for your time!
> Jim



___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] jaas not forwarding principal

2001-05-21 Thread Scott M Stark

I just added a test case to jbosstest that has a client call an unsecure bean
that in turn calls a secured bean and the principal is propagated correctly.
How do you know that the principal is coming in correctly from the servlet?

- Original Message - 
From: "Ferguson, Doug" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, May 21, 2001 5:36 PM
Subject: [JBoss-user] jaas not forwarding principal


> I have a bean that has a reference to another bean.
> 
> Bean #1 is deployed with no security and bean #2
> is deployed with security. 
> 
> I login from a servlet and the security gets passed
> to bean #1 but as soon as I hit bean #2 it looks like
> the credentials are getting passed! 
> 
> Any ideas?
> 
> d.
> 
> ___
> JBoss-user mailing list
> [EMAIL PROTECTED]
> http://lists.sourceforge.net/lists/listinfo/jboss-user
> 


___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] problem with authentication

2001-05-22 Thread Scott M Stark


> I apologize for not researching further before asking, but I'm hoping you
> (someone) knows of the top of your head.
> 
> >This is a bug in the JAAS login config file class.
> Has this been reported to Sun?
> 
Yes.

> >The workaround it to have a single thread force a
> >load of the login configuration file so that when the frames all try to
> >access secured beans they don't cause the ConfigFile to be loaded
> >by multiple threads.
> Not sure what the implications of the bug are.  Is the config file something
> that gets loaded into cache once? Per user, or global, or could I have the
> problem when any two people try to login at the same time?  If global, is
> there a call I can put into a static block somewhere (or in the servlet init
> method) that will go ahead and load the file.  If the problem occurs per
> user, this could be a huge deal, if it is global, at worst I can add it to
> the list of things to do when restarting JBoss, "login to clear threading
> errors".
> 
Its loaded only once unless explicity reloaded.

> >I thought I added a synchronization that would prevent this
> >from happening.
> Where did you add this synchronization.  1) I want to make sure I have the
> right version, 2) If I do, I'll be happy to explore and see why my code
> still breaks.
> 
The synchronization was removed so what your seeing is expected. You
could force a load of the auth.conf file on server startup by either creating an
mbean or a servlet that is loaded on startup that created a LoginContext.



___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] 2nd Deployment Fails

2001-05-22 Thread Scott M Stark


> However, I'm not completely sure I understand why the other didn't work.
> Before the second deployment the previous is undeployed.  Why does the
> TraceCategory instance live beyond this undeployment.  And is there
> something specific I can do such that it is destroyed and will not affect a
> second deployment?
> 
There is nothing you can do since you can't unload a class in general, and
you certainly can't unload a class that is being used as is the case here
since the Category is keeping track of its instances in a hashtable.

> Perhaps I am looking at this wrong.  Should helper classes not be part of
> the deployed jar file?  Is that jar file only for EJBs?  In general, should
> helper classes be installed elsewhere and pointed to by a ClassPathExtension
> MBean?
> 
Not if there are being shared across deployment jars. In this case they should
be loaded by a class loader that is a parent class loader to all classes using
the shared class. 




___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] Validating users

2001-05-22 Thread Scott M Stark

Use the J2EE declarative security for both web content and EJBs and you
are able to secure your content/objects without adding security to your code.
When the 2.2.2 release is made next week there will be an updated version
of the JAAS security tutorial that shows how to do this using a database.

- Original Message - 
From: "Emanuel Galindo" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, May 22, 2001 8:52 AM
Subject: [JBoss-user] Validating users


> 
> Hi, this is a very conceptual question.
> Im looking for a way to authenticate my users against a database table
> with nick or user id and password.
> 
> I see a lot of ways and i imagine others. I want to know what is the best.
> 
> The best for me would be like apache-perl dir security with dbi. When you
> enter in a determined directory, they show you a pop u and you enter you
> id and pass, verifies that and do what you want.
> 
> Without includes or whatever in bussines logic.
> 
> Chao.
> 
> 
> ___
> JBoss-user mailing list
> [EMAIL PROTECTED]
> http://lists.sourceforge.net/lists/listinfo/jboss-user
> 


___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] what does jboss use instantDB for

2001-05-22 Thread Scott M Stark

Its just there for your use but it is not used by anything. Remove it if
you don't need it.

- Original Message - 
From: "Mader, Cary J" <[EMAIL PROTECTED]>
To: "Jboss-User (E-mail)" <[EMAIL PROTECTED]>
Sent: Tuesday, May 22, 2001 1:41 PM
Subject: [JBoss-user] what does jboss use instantDB for


> I couldn't find a clear answer in the list archives on what instantDB is
> actually used for by Jboss.  If anyone could provide a little detail, I'd
> like to hear it.  
> 
> Is the InstantDB instance that is started by JBoss there to use as I need?
> Or would I be better off starting a seperate instance of an InstantDB
> database?
> 
> Thanks.
> 
> Cary



___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] SecurityAssociationHandler - where do I find it?

2001-05-22 Thread Scott M Stark

Its in the 2.2 branch of the jbosssx cvs module. Get it from the sourceforge cvs
browser by selecting:

http://cvs.sourceforge.net/cgi-bin/viewcvs.cgi/jboss/jbosssx/src/main/org/jboss/security/auth/Attic/?only_with_tag=JBoss_2_2_1


- Original Message - 
From: "Dennis Ramos" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, May 22, 2001 1:26 PM
Subject: [JBoss-user] SecurityAssociationHandler - where do I find it?


> Does anyone know how to get the source code for
> 
> "org.jboss.security.auth.SecurityAssociationHandler"
> 
> I cannot find it. The only class I have found is
> 
> "org.jboss.security.auth.callback.SecurityAssociationHandler"
> 
> I am trying to figure out why there is a bug when trying to pass credentials from 
>JSP to
> an EJB.
> 
> Please help if you know the answer. Thanks.
> 
> 
> 
> 


___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] Internalisation.....

2001-05-23 Thread Scott M Stark

Look at i18n support in Java by going through the Java tutorial:
http://www.javasoft.com/docs/books/tutorial/i18n/index.html

- Original Message - 
From: "Penn" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, May 23, 2001 3:59 AM
Subject: [JBoss-user] Internalisation.


> Hi,
> 
> I'm working on a project that ned to support multi-lingua.
> May i know any good way of implementing it...
> 
> 
> tia
> 
> Penn
> 
> ___
> JBoss-user mailing list
> [EMAIL PROTECTED]
> http://lists.sourceforge.net/lists/listinfo/jboss-user
> 


___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] Information on JNDI

2001-05-23 Thread Scott M Stark

Write a custom mbean that populates JNDI on startup with the information
you need to make available.
- Original Message - 
From: "Pedro Gomez" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, May 23, 2001 6:03 AM
Subject: [JBoss-user] Information on JNDI


> I need to have available some configurations 
> parameters for all my EJB and for my servlets.
> 
> I think that the best way to do that is using 
> JNDI, i want to publish this parameters with 
> JNDI. 
> 
> But i could not find how to do it.
> 
> I have been looking at:
> http://www.jboss.org/documentation/HTML/ch11s145.html
> 
> And nothing.
> 
> Some ideas?
> 
> Thanks.
> 



___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] log4j slows down hypersonic startup

2001-05-23 Thread Scott M Stark

The slow startup has been fixed in main. The problem is that the startup code was
looking for a log msg to determine if Hypersonic had started and it does
not receive this when log4j is used.

The only time I have seen the nul problem is when both the legacy logging and
log4j mbeans are configured.

- Original Message - 
From: "Guy Rouillier" <[EMAIL PROTECTED]>
To: "JBoss User" <[EMAIL PROTECTED]>
Sent: Wednesday, May 23, 2001 1:00 PM
Subject: [JBoss-user] log4j slows down hypersonic startup


> I started working with log4j today, and I noticed a very long delay starting
> hypersonic when log4j is used.  Here is what I see with log4j (console
> logging and file logging disabled):
> 
> 2001-05-23 15:06:15,015  INFO [Hypersonic] (root) Starting
> 2001-05-23 15:06:45,031  INFO [Hypersonic] (root) Database started
> 2001-05-23 15:06:45,031  INFO [Hypersonic] (root) Started
> 
> Here is what I see with console logging and file logging (log4j disabled):
> 
> [2001-05-23 03.41.10.203][Hypersonic] Starting
> [2001-05-23 03.41.15.203][Hypersonic] Server 1.4 is running
> [2001-05-23 03.41.15.203][Hypersonic] Press [Ctrl]+[C] to abort
> [2001-05-23 03.41.15.203][Hypersonic] Database started
> [2001-05-23 03.41.15.203][Hypersonic] Started
> 
> Notice with log4j hypersonic takes 30 seconds to start, while with console
> and file logging it takes only 5.  Why the difference?
> 
> While I'm here, I'm getting a bunch of null characters in server.log with
> FileLogging.  Console logging is working fine.  This only appears to be
> happening during startup.  All the messages logged by EJBs are showing up as
> are all the shutdown messages.  After about 19153 nulls, here are the first
> lines I see:
> 
> [2001-05-23 03.54.12.953][Verifier] guyr.DbSource: Verified.
> [2001-05-23 03.54.12.953][Container factory] Deploying guyr.DbSource
> [2001-05-23 03.54.12.953][Container factory] Container Invoker RMI
> Port=''
> [2001-05-23 03.54.12.953][Container factory] Container Invoker Client
> SocketFactory='Default'
> [2001-05-23 03.54.12.953][Container factory] Container Invoker Server
> SocketFactory='Default'
> 
> It seem like every character getting logged during startup is being
> translated into a null.  Is anyone else getting this?  I'm using 2.2.1.
> 
> 
> ___
> JBoss-user mailing list
> [EMAIL PROTECTED]
> http://lists.sourceforge.net/lists/listinfo/jboss-user
> 


___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] JAAS & JBossSX vs Application Security

2001-05-23 Thread Scott M Stark

Reliance on static files is not a requirement; its simply the default mode. In
the JBossSX codebase is an example custom javax.security.auth.Policy 
implementation that obtains permission info from a IAppPolicyStore which
could be a database, ldap server, etc. The prototype uses an xml file.

JNDI cannot be secured via JAAS currently simply because it does not
make any permission checks. A future version of jnp will support secured
access via subject based permissions.

- Original Message - 
From: "Jason Dillon" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, May 22, 2001 6:13 PM
Subject: [JBoss-user] JAAS & JBossSX vs Application Security


> Hello, I am trying to figure out what the *best* approach is for adding
> robust security to a highly distributed JMX/EJB/JMS application.  I have
> just looked over the docs about JAAS as well as the JBossSX guide and I
> still do not have a good feel for what is the correct approach for what I
> am trying to do.
> 
> JAAS looks like it follows the basic Java 2 security model, which relies on a
> static file to list who has access to what, which seems a little odd since
> in most cases the 'who' is probably listed somewhere in a database, so I am
> a little confused by there examples.
> 
> Currently we perform the authentication ourselves, via an ejb call that
> returns a session bean that represents what that user can do.  This has some
> obvious issues, like if the user just tried to lookup an object which they
> are not supposed to directly instead of going through the gateway.
> 
> It looks like JAAS/JBossSX might solve, this forcing the user to login
> first, but it is unclear how that would solve all of the access problems
> that might occur.
> 
> Say User A created a file "user_a_private_stuff" via the FileManager bean,
> how would I prevent User B from logging in, creating a FM bean then reading
> that file?
> 
> Can the security framework be used to replace most (if not all) other
> aspects of security, such as forcing users through a gateway "access
> manager" bean?
> 
> Can it be used to grant/limit access to fine grained resources based on
> principal or credentials retrieved from a database lookup (via an entity
> bean)?
> 
> Is there any way to limit access via JNDI by this method?
> 
> Does anyone know of any detailed documentation/examples of non-trivial
> security implementations (like users with a set of permissions, application
> code that can check for a given permission or set of permissions as well as
> the identity of a user before executing an action, and storing all of that
> information in a database).
> 
> Or perhaps there is a way to use session beans similar to a servlet session
> to store this data... I just don't know. =(
> 
> Any help would be appreciated.
> 
> --jason
> 
> 
> ___
> JBoss-user mailing list
> [EMAIL PROTECTED]
> http://lists.sourceforge.net/lists/listinfo/jboss-user
> 


___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] JAAS & JBossSX vs Application Security

2001-05-23 Thread Scott M Stark

Theoretically yes, practially I don't know. You do need to have a Subject
with its associated Principals to create a Subject based permission context
using the Subject.doAs() or equivalent.

- Original Message - 
From: "Jason Dillon" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, May 23, 2001 11:58 AM
Subject: Re: [JBoss-user] JAAS & JBossSX vs Application Security


> Ok, then does it make sense to rely on JAAS for all of the security aspects
> of a system, or is the technology not mature enough yet?
> 
> Specifically can it be used to limit access to methods or individual
> resources (such as a file or a database record marked with some identifier)
> based on a single user login point?  Or will the application have to
> maintain some extra login state to achieve this level of security?
> 
> --jason
> 



___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] EmbeddedTomcat command line options

2001-05-23 Thread Scott M Stark

It will be possible in the next release.

- Original Message - 
From: "Richard Conway" <[EMAIL PROTECTED]>
To: "'JBoss User'" <[EMAIL PROTECTED]>
Sent: Tuesday, May 22, 2001 5:04 AM
Subject: [JBoss-user] EmbeddedTomcat command line options


> 
> I'm using 'JBoss-2.2.1_Tomcat-3.2.1' running on Solaris 2.6.
> 
> I would like to run the embedded tomcat service with the equivalent of
> '-config myconfig.xml' as can be done when tomcat is launched from the
> command line.
> 
> Is this possible ?
> 
> Richard.
> 



___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] Need help in starting jboss and Tomcat

2001-05-24 Thread Scott M Stark


Using what version of the tomcat/jboss bundle? 
- Original Message - 
From: Francesco Marchioni 
To: [EMAIL PROTECTED] 
Sent: Thursday, May 24, 2001 5:31 AM
Subject: [JBoss-user] Need help in starting jboss and Tomcat


Hello,
I'm having problems in starting tomcat + jboss.
I get the following server trace. Does anybody has a clue for me how
to fix it?
Thank you very much in advance.
Francesco


[Container factory] Started
[EmbeddedTomcat] Starting
[EmbeddedTomcat] Starting EmbeddedTomcat
2001-05-24 02:25:19 - ContextManager: Adding context Ctx( /examples )
2001-05-24 02:25:19 - ContextManager: Adding context Ctx( /admin )
[EmbeddedTomcat] Starting tomcat. Check logs/tomcat.log for error messages
2001-05-24 02:25:19 - ContextManager: Adding context Ctx(  )
2001-05-24 02:25:19 - ContextManager: Adding context Ctx( /test )
[EmbeddedTomcat] java.lang.NullPointerException
[EmbeddedTomcat]at 
org.jboss.tomcat.ContextClassLoaderInterceptor.contextInit(ContextClassLo
aderInterceptor.java:28)
[EmbeddedTomcat]at 
org.apache.tomcat.core.ContextManager.initContext(ContextManager.java:491
)
[EmbeddedTomcat]at 
org.apache.tomcat.core.ContextManager.init(ContextManager.java:453)
[EmbeddedTomcat]at org.jboss.tomcat.TomcatEntry.execute(TomcatEntry.java:325)
[EmbeddedTomcat]at org.jboss.tomcat.TomcatEntry.(TomcatEntry.java:72)
[EmbeddedTomcat]at 
org.jboss.tomcat.EmbeddedTomcatService.startService(EmbeddedTomcatService
.java:69)
[EmbeddedTomcat]at 
org.jboss.util.ServiceMBeanSupport.start(ServiceMBeanSupport.java:93)
[EmbeddedTomcat]at java.lang.reflect.Method.invoke(Native Method)
[EmbeddedTomcat]at 
com.sun.management.jmx.MBeanServerImpl.invoke(MBeanServerImpl.java:1628)
[EmbeddedTomcat]at 
com.sun.management.jmx.MBeanServerImpl.invoke(MBeanServerImpl.java:1523)
[EmbeddedTomcat]at org.jboss.util.ServiceControl.start(ServiceControl.java:97)
[EmbeddedTomcat]at java.lang.reflect.Method.invoke(Native Method)
[EmbeddedTomcat]at 
com.sun.management.jmx.MBeanServerImpl.invoke(MBeanServerImpl.java:1628)
[EmbeddedTomcat]at 
com.sun.management.jmx.MBeanServerImpl.invoke(MBeanServerImpl.java:1523)
[EmbeddedTomcat]at org.jboss.Main.(Main.java:203)
[EmbeddedTomcat]at org.jboss.Main$1.run(Main.java:107)
[EmbeddedTomcat]at java.security.AccessController.doPrivileged(Native Method)
[EmbeddedTomcat]at org.jboss.Main.main(Main.java:103)
[EmbeddedTomcat] OK
[EmbeddedTomcat] Started


___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] Log4j xml configuration in the log4j service mbean

2001-05-24 Thread Scott M Stark

Add it as a feature request at sourceforge.net

- Original Message - 
From: Paul Austin 
To: [EMAIL PROTECTED] 
Sent: Thursday, May 24, 2001 4:46 AM
Subject: [JBoss-user] Log4j xml configuration in the log4j service mbean


Are there any plans to modify the Log4jService to use the DOMConfigurator if the user 
specifies a xml config file?

cheers,
Paul

Paul Austin
Viant
Tel: +44-20-7984-7158
Fax: +44-20-7984-7101
AIM: PaustinViant
YahooIM: p_d_austin
JabberIM: paustin


___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] JBoss 2.2.1 and Windows 2000

2001-05-24 Thread Scott M Stark

Your picking up an old version of the org.xml.sax.Attributes class.
You must have some xml classes in your VM lib/ext directory.

- Original Message - 
From: "Michael Haupt" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, May 24, 2001 7:43 AM
Subject: [JBoss-user] JBoss 2.2.1 and Windows 2000


> Hello all,
> 
> I am trying to use JBoss 2.2.1 on Linux as well on Windows 2000. While
> everything is quite fine on Linux, JBoss won't start on Windows 2000.
> Below is what it says.
> 
> Thanks for any help,
> 
> Michael Haupt
> 
> --cut--
> C:\JBoss-2.2.1_Tomcat-3.2.1\jboss\bin>run
> JBOSS_CLASSPATH=;run.jar;../lib/crimson.jar
> jboss.home = C:\JBoss-2.2.1_Tomcat-3.2.1\jboss
> Using configuration "default"
> [Info] Java version: 1.3.0,IBM Corporation
> [Info] Java VM: Classic VM 1.3.0,IBM Corporation
> [Info] System: Windows 2000 5.0,x86
> [Shutdown] Shutdown hook added
> [Service Control] Registered with server
> [Default] Runtime error
> [Default] java.lang.NoSuchMethodError: org.xml.sax.Attributes: method
> getQName(
> )Ljava/lang/String; not found
> [Default]   at
> org.apache.crimson.tree.AttributeSet.(AttributeSet.jav
> :139)
> [Default]   at
> org.apache.crimson.tree.XmlDocumentBuilder.startElement(XmlD
> cumentBuilder.java:463)
> [Default]   at
> org.apache.crimson.parser.Parser2.maybeElement(Parser2.java:
> 449)
> [Default]   at
> org.apache.crimson.parser.Parser2.content(Parser2.java:1700)
> [Default]   at
> org.apache.crimson.parser.Parser2.maybeElement(Parser2.java:
> 468)
> [Default]   at
> org.apache.crimson.parser.Parser2.parseInternal(Parser2.java
> 499)
> [Default]   at
> org.apache.crimson.parser.Parser2.parse(Parser2.java:304)
> [Default]   at
> org.apache.crimson.parser.XMLReaderImpl.parse(XMLReaderImpl.
> ava:433)
> [Default]   at
> org.apache.crimson.jaxp.DocumentBuilderImpl.parse(DocumentBu
> lderImpl.java:179)
> [Default]   at
> org.jboss.configuration.ConfigurationService.loadConfigurati
> n(ConfigurationService.java:263)
> [Default]   at java.lang.reflect.Method.invoke(Native Method)
> [Default]   at
> com.sun.management.jmx.MBeanServerImpl.invoke(MBeanServerImp
> .java:1628)
> [Default]   at
> com.sun.management.jmx.MBeanServerImpl.invoke(MBeanServerImp
> .java:1523)
> [Default]   at org.jboss.Main.(Main.java:195)
> [Default]   at org.jboss.Main$1.run(Main.java:107)
> [Default]   at java.security.AccessController.doPrivileged(Native
> Method)
> [Default]   at org.jboss.Main.main(Main.java:103)
> [Default] JBoss 2.2.1 Started in 0m:1s
> [Default] Shutting down
> [Service Control] Stopping 0 MBeans
> [Service Control] Stopped 0 services
> [Service Control] Destroying 0 MBeans
> [Service Control] Destroyed 0 services
> [Default] Shutdown complete
> --uncut--
> 
> ___
> JBoss-user mailing list
> [EMAIL PROTECTED]
> http://lists.sourceforge.net/lists/listinfo/jboss-user
> 


___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] JBoss 2.2.1 and Windows 2000

2001-05-24 Thread Scott M Stark

The run with the -verbose mode VM flag and find where the
crimson xml classes are coming from because the error at
org.apache.crimson.tree.AttributeSet.(AttributeSet.jav:139)
does not match the crimson 1.1 source.

- Original Message - 
From: "Michael Haupt" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, May 24, 2001 9:56 AM
Subject: Re: [JBoss-user] JBoss 2.2.1 and Windows 2000


> Hi Scott,
> 
> Scott M Stark wrote:
> > Your picking up an old version of the org.xml.sax.Attributes class.
> > You must have some xml classes in your VM lib/ext directory.
> 
> I don't think so; the Linux installation is *exactly* the same (IBM JDK
> 1.3), and it works perfectly. :-(
> 
> Bye,
> 
> Michael
> 
> ___
> JBoss-user mailing list
> [EMAIL PROTECTED]
> http://lists.sourceforge.net/lists/listinfo/jboss-user
> 


___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] org.jboss.deployment.J2eeDeploymentException

2001-05-24 Thread Scott M Stark



Try using the run_with_tomcat.sh script

- Original Message -
From: Scott Salisbury
To: [EMAIL PROTECTED]
Sent: Thursday, May 24, 2001 4:30 PM
Subject: [JBoss-user] org.jboss.deployment.J2eeDeploymentException


Hello,

I have installed JBoss.  It seems to start OK except for the following errors related 
to Tomcat.  Is there something I should be
doing to start TomCat?
JBoss-2.2.1_Tomcat-3.2.1.zip is the file that I installed from.  I am running on Linux 
Redhat 7.0

Thanks,
Scott





___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] JBoss components doing System.out or System.err?

2001-05-24 Thread Scott M Stark

The use of System.out will be updated as the main branch is switched to use log4j.

- Original Message - 
From: "Guy Rouillier" <[EMAIL PROTECTED]>
To: "JBoss User" <[EMAIL PROTECTED]>
Sent: Thursday, May 24, 2001 5:31 PM
Subject: [JBoss-user] JBoss components doing System.out or System.err?


> I switched to log4j and turned off console logging.  But I still get the
> lines at the end of this message output to the terminal.  Are some JBoss
> components doing System.out or System.err calls?  Is there any plan to
> update these to logging calls?  There aren't that many, so I'll volunteer to
> start knocking them out if the powers that be give the okay.
> 



___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] A message appears millions times in my JBoss startup window until I kill the window

2001-05-25 Thread Scott M Stark

Using what version of JBoss and have you made any changes to
jboss.conf to enable the Log4jService?

System.out and System.err are intercepted to route through either the
legacy JMX based logging or the Log4jService console appender so
when BasicConfigurator tries to setup System.out a loop is being
established somewhere. Configuration should be done outside of EJBs
via an mbean. You don't know whose toes your stepping on when trying
to do the configuration from within an EJB.

- Original Message - 
From: "Zhou Cai" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, May 25, 2001 10:20 AM
Subject: RE: [JBoss-user] A message appears millions times in my JBoss startup window 
until I kill the window


> Hi,
>   I checked my code thoroughly. I found that I used "
> org.apache.log4j.BasicConfigurator.configure(); " before I call "
> System.out.println("This is a test");" . If I delete "
> org.apache.log4j.BasicConfigurator.configure(); ", everything is fine.
>Is there some impact between Log4j and JBoss?
>Thanks a lot.
> 
> Zhou
> 



___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] runAsMode and runAsIdentity

2001-05-29 Thread Scott M Stark

A run-as element was added as part of the EJB2.0 spec and that will be implemented in
2.3 of JBoss in the near future. There is no support for runAsIdentity or runAsMode.

- Original Message - 
From: "Hiep Luong" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, May 29, 2001 12:49 PM
Subject: [JBoss-user] runAsMode and runAsIdentity


> I am new to EJB and Jboss, can anyone tell me where I can set runAsMode and
> ranAsIdentity.  I thought I would find them in the deploment descriptor xml
> file but nada.  I also did a text search of the sun 1.1 spec and got
> nothing??
> Also in Weblogic you can set the Max number of instances of a session bean
> in the deployment descriptor.  I don't find this anywhere in jboss.
> Any help is much appreciated.
> 
> thanks,
> 
> Hiep
> 
> 
> 
> ___
> JBoss-user mailing list
> [EMAIL PROTECTED]
> http://lists.sourceforge.net/lists/listinfo/jboss-user
> 


___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] Losing principal from tomcat servlet, and yet authenticated

2001-05-29 Thread Scott M Stark

The documentation describes an external client that has its own auth.conf
login configuration file. To perform a client login within the same VM as the
application server you need to either change the server's auth.conf file to
have the "other" configuration section equal to that of the default client, or
create a "TestClient"(or whatever name you pass to LoginContext) to authenticate
against the org.jboss.security.ClientLoginModule, for example, 

TestClient {
org.jboss.security.ClientLoginModule  required;
};

- Original Message - 
From: "Grim Shieldsson" <[EMAIL PROTECTED]>
To: "JBOSS USER" <[EMAIL PROTECTED]>
Sent: Tuesday, May 29, 2001 12:33 PM
Subject: [JBoss-user] Losing principal from tomcat servlet, and yet authenticated


> This seems like the same problem that Lewis Henderson was having a bit
> ago.  He didn't appear to receive any on-list help, so I'm hoping for
> better results :)
> Here's what I'm getting:
> [] Base setup.. really need to move these into the setup for the EJB
> stuff.
> [] login( Anonymous, anonymous)
> [] Creating AppCallbackHandler.
> [] Creating LoginContext.
> [] Logging in.
> [UserDatabasePool] No transaction right now.
> [UserDatabasePool] Pool UserDatabasePool [1/1/Unlimited] gave out
> pooled object:
> org.opentools.minerva.jdbc.xa.wrapper.XAConnectionImpl@678fc6
> [UserDatabasePool] Pool UserDatabasePool [0/1/Unlimited] returned
> object org.opentools.minerva.jdbc.xa.wrapper.XAConnectionImpl@678fc6 to
> the pool.
> [JAASSecurity] User 'Anonymous' authenticated.
> [UserDatabasePool] No transaction right now.
> [UserDatabasePool] Pool UserDatabasePool [1/1/Unlimited] gave out
> pooled object:
> org.opentools.minerva.jdbc.xa.wrapper.XAConnectionImpl@678fc6
> [UserDatabasePool] Pool UserDatabasePool [0/1/Unlimited] returned
> object org.opentools.minerva.jdbc.xa.wrapper.XAConnectionImpl@678fc6 to
> the pool.
> [] connectToEJB( Anonymous)
> [] Connected, now trying to create the local copy
> [UserData] Authentication exception, principal=null
> [] java.rmi.RemoteException: checkSecurityAssociation; nested exception
> is: 
> java.lang.SecurityException: Authentication exception
> 
> As you can see, I am getting auhtenticated, however shortly after I'm
> losing the principal what's annoying is that this is happening
> within 10 lines of code inside the bean I'm using... first it
> authenticates then it tries to access the EJB bean... and that's when I
> get the principal = null bit.  
> I'm attaching my code, and ejb-jar.xml files.  Most of this is straight
> out of the documentation too
> In the User.java file.. you'll notice that the principal is being lost
> within several lines of code, and so this can't be a thread issue, or a
> loss of cookie issue or anything else.  I get authenticated, then lose
> the principal.
> I'm pretty sure I'm doing something stupid.. but I'll be hanged if I
> can figure out what.. 
> Thanks for any help in advance!
> 
> 
> 
> __
> Do You Yahoo!?
> Yahoo! Auctions - buy the things you want at great prices
> http://auctions.yahoo.com/


___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] Security in JBoss

2001-05-29 Thread Scott M Stark

I'll add support for externalizing the RMI socket factories so that you
can use that approach. A future version of the jnp provider will allow
for secured access based on Java2 permissions.

- Original Message - 
From: "Sampsa Ranta" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Sunday, May 27, 2001 5:51 PM
Subject: [JBoss-user] Security in JBoss


> 
> Hello,
> 
> I am just trying to become familiar with the JBoss architecture and what
> I am using. I accidentally browsed the code carefully from the org.jnp
> naming tree. The jnp documentation explained that a single JNP server is
> enough for a network. Yes, and it seems to very willfully give a
> Marshalled reference to itself with having nice interface on all basic
> low level naming functionality.
> 
> I would like to run production server on JBoss on Internet without
> firewall, but I would not like anyone to unbind or rebind everything
> from my RMI / JNDI registry. As I read the code a bit I found very little
> indications in the code why this would not be possible.
> 
> As I said don't like the firewall option overall. In past projects I've
> been securing RMI by using custom socket factories and doing check in
> accept(), but for JNP this option was not an enabled possibility unless
> defining own RMISocketFactory as default so the MarshallObject
> would use it.
> 
> Is there a way to secure the JBoss somehow?
> 
> Thanks,
>  Sampsa Ranta
>  Network Administrator
> 
> 
> ___
> JBoss-user mailing list
> [EMAIL PROTECTED]
> http://lists.sourceforge.net/lists/listinfo/jboss-user
> 


___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] Problems implementing security (ServiceUnavailableException)

2001-05-29 Thread Scott M Stark

How is the jndi.properties file provided to the client? The exception your
getting appears to be a simple failure to connect to the JNDI provider.

- Original Message - 
From: "Pelle Poluha" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, May 28, 2001 12:47 AM
Subject: [JBoss-user] Problems implementing security (ServiceUnavailableException)


> Hello!
> 
> I'm trying to implement JAAS based security in accordans with the document
> "JAAS Based Security in JBoss" at the JBoss site and I've followed and
> implemented every step of the tutorial. But although the login doesn't
> signal failure, my beans are no longer accessible. When I'm trying to access
> an ordinary session bean, I get the following exception:
> 
> "...
> User is logged in.
> ...
> javax.naming.ServiceUnavailableException: Operation timed out: connect.
> Root exception is java.net.ConnectException: Operation timed out: connect"
> 



___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] Problem with assumeJavaPrefix

2001-05-29 Thread Scott M Stark

Set the "org.jboss.metadata.ApplicationMetaData.assumeJavaPrefix" system property
to false.

- Original Message - 
From: "Robert Watkins" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, May 29, 2001 6:50 PM
Subject: [JBoss-user] Problem with assumeJavaPrefix


> How do I disable assumeJavaPrefix?
> 



___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] Losing principal from tomcat servlet, and yet authenticated

2001-05-30 Thread Scott M Stark

> I comment out the line 'setServer()' in the main class...
> 
> NOT recommended, but it forces my user to keep the principal!
> 
> I do not know what the real effect of doing this is, maybe Scott could give 
> us a hand??
> 
This puts the server in single client mode and all method invocations will
see the credentials of the last user to authenticate. This will not work in
a multi-user environment.

A new 2.2.2 release will be out this week that allows a servlet request to
spawn threads and keep the request principal info associated with the
child threads.



___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] Losing principal from tomcat servlet, and yet authenticated

2001-05-30 Thread Scott M Stark

Look at jbosstest/src/main/org/jboss/test/web/servlets/ClientLoginServlet.java
for an example of a servlet doing a JAAS login in order to access a secure EJB.
For the auth.conf you have below the servlet would create a LoginContext as
CallbackHandler handler = ...
LoginContext lc = new LoginContext("HouseOfHarlots", handler);
lc.login();

That fact that default/auth.conf is read rather than tomcat/auth.conf is a bundling
problem that will be fixed in the next release.

- Original Message - 
From: "Grim Shieldsson" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, May 30, 2001 5:27 PM
Subject: Re: [JBoss-user] Losing principal from tomcat servlet, and yet authenticated


> Okay.. went back and looked at the documentation again.  You're right,
> that's the way it should be.  However, if I'm interepreting what should
> be where correctly then jboss/conf/default/auth.conf should read as:
> House{
> org.jboss.security.plugins.samples.DatabaseServerLoginModule
> required
> dsJndiName="java:/UserDatabasePool"
> principalsQuery="select password from UserData where
> username=?"
> rolesQuery="select Role, RoleGroup from Roles where
> username=?";
> };
> and jboss/client/auth.conf should read as:
> HouseOfHarlots {
> org.jboss.security.ClientLoginModule  required;
> };
> This still shows the same problem.
> This is with the JBoss-2.2.1_Tomcat-3.2.1 combination.  What was really



___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] JNDI name bindings are not working properly on deployment

2001-05-31 Thread Scott M Stark

Show your ejb-jar.xml and jboss.xml deployment descriptors.
- Original Message - 
From: "Selvarajah Vahees" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, May 31, 2001 1:27 AM
Subject: [JBoss-user] JNDI name bindings are not working properly on deployment


> 
> 
> Hello folks,
> 
> I have a few EJBs and I am trying to deploy it on a JBoss2.2 with embedded
> tomcat3.2.1.
> My deployment goes fine. But my JNDI name bindings are not getting place. It
> always puts one of my OLD  bean JNDI on the Namespace. And also all my beans
> are getting that beans Namespace,which I feel that each individual beans
> should get their own. As a result only that OLD JNDI name under the
> "+--invokers" list.
> 
> Basically JNDI name bindings are not working properly on deployment. So I am
> getting a
> NameNotfound Exception ---MyEJB(Not Bound)
> 
> I tried the following
> 1..removing tmp/deploy dir itself
> 2.restarting the Mbean service for JNDI
> 3.restarting and deployments serveral time of the Server
> and last restarting the machine even. :-)
> 
> Any idea what is really wrong?
> 
> Thanks in advance
> 
> R
> Vahees
> 
> 
> 
> 
> 
> ___
> JBoss-user mailing list
> [EMAIL PROTECTED]
> http://lists.sourceforge.net/lists/listinfo/jboss-user
> 


___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] JBoss-2.2.1 + Tomcat-3.2.1 Embedded

2001-05-31 Thread Scott M Stark

No changes to the configuration are required for the bundled version. Just
use the run_with_tomcat.bat script to start with the correct configuration.

- Original Message - 
From: "Dave, Pragnesh" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, May 31, 2001 8:49 AM
Subject: [JBoss-user] JBoss-2.2.1 + Tomcat-3.2.1 Embedded


> Greetings !
> 
> Gang, I downloaded the binary for JBoss-2.2.1 + Tomcat-3.2.1 Embedded.
> 
> My directory structure is as follows
> D:\JBoss-2.2.1_Tomcat-3.2.1 with jboss and tomcat as sub directories.
> 
> I have set JAVA_HOME, TOMCAT_HOME, and JBOSS_HOME on NT as system env vars.
> 
> I have changed/checked the config files as pointed out in "Tomcat and JBoss
> - A Full J2EE Stack"
> http://jboss.org/documentation/HTML/ch11.html#howtotomcat
> 
> Now, I should have a JBoss-2.2.1 + Tomcat-3.2.1 Embedded env.
> 
> I ran jboss, but got a bunch of errors; I have attached the stack to this
> mail.
> 
> Do I need to do anything else for JBoss-2.2.1 + Tomcat-3.2.1 Embedded env ?
> Am I missing something ?
> 
> Regards,
> Pragnesh Dave
> 
>  <> 
> 
> 


___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] JBoss 2.2.2 Release available

2001-05-31 Thread Scott M Stark


> 
> I have a working version with Embedded Tomcat using JDBCRealm with MySQL.
> 
> 1) Initialization not thread safe (I know this is a problem with JAAS, but
> did you include a workaround).
No, its simple to workaround this using an mbean.

> 2) With security added, must restart JBoss on redeploy of ear file (This one
> is more annoying than a real problem).
I don't see this in my security test cases so you'll have to describe why you
see that the restart is necessary.

> 3) Security module seems to lose DB login if no user logs in for extended
> period of time. This one is really a big deal for obvious reasons.  Really
> hoping someone has more info on this.
> 
The Tomcat JDBCRealm would not be used in the new version. Instead the
DatabaseServerLoginModule would be used and it just uses the configured
DataSources to access the database. The connection will be as reliable as the
database pool.




___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] JBoss 2.2.2 Release available

2001-05-31 Thread Scott M Stark

But JDBCRealm won't be in the picture with the current integration so these
msgs are no longer relevant. See the JAAS tutorial for example usage of
the DatabaseServerLoginModule.

- Original Message - 
From: "Alex Radka" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, May 31, 2001 12:59 PM
Subject: RE: [JBoss-user] JBoss 2.2.2 Release available


> >> 2) With security added, must restart JBoss on redeploy of ear file (This
> one
> >> is more annoying than a real problem).
> >I don't see this in my security test cases so you'll have to describe why
> you
> >see that the restart is necessary.
> 
> One message was:
> http://www.mail-archive.com/jboss-user%40lists.sourceforge.net/msg05502.html
> 
> There was a similar message with more detail from someone else (couple of
> weeks ago?), that I searched for but for the life of me can't find.
> 
> I can recreate pretty easily. I make my ear, deploy and I get the exact same
> behavior as described in the 1st message in the chain above.
> 
> http://www.mail-archive.com/jboss-user%40lists.sourceforge.net/msg05426.html
> 
> 
> I'll try the new stuff and let you know how it goes.
> 
> Alex
> 
> 
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On Behalf Of Scott M
> Stark
> Sent: Thursday, May 31, 2001 3:13 PM
> To: [EMAIL PROTECTED]
> Subject: Re: [JBoss-user] JBoss 2.2.2 Release available
> 
> 
> 
> >
> > I have a working version with Embedded Tomcat using JDBCRealm with MySQL.
> >
> > 1) Initialization not thread safe (I know this is a problem with JAAS, but
> > did you include a workaround).
> No, its simple to workaround this using an mbean.
> 
> > 2) With security added, must restart JBoss on redeploy of ear file (This
> one
> > is more annoying than a real problem).
> I don't see this in my security test cases so you'll have to describe why
> you
> see that the restart is necessary.
> 
> > 3) Security module seems to lose DB login if no user logs in for extended
> > period of time. This one is really a big deal for obvious reasons.  Really
> > hoping someone has more info on this.
> >
> The Tomcat JDBCRealm would not be used in the new version. Instead the
> DatabaseServerLoginModule would be used and it just uses the configured
> DataSources to access the database. The connection will be as reliable as
> the
> database pool.
> 
> 
> 
> 
> ___
> JBoss-user mailing list
> [EMAIL PROTECTED]
> http://lists.sourceforge.net/lists/listinfo/jboss-user
> 
> 
> ___
> JBoss-user mailing list
> [EMAIL PROTECTED]
> http://lists.sourceforge.net/lists/listinfo/jboss-user
> 


___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] JBoss 2.2.2 Release available

2001-05-31 Thread Scott M Stark

public interface ConfigLoaderMBean
{
}
import javax.management.MBeanRegistration;
import javax.management.MBeanServer;
import javax.management.ObjectName;
import javax.security.auth.login.LoginContext;

public class ConfigLoader implements ConfigLoaderMBean, MBeanRegistration
{
   // MBeanRegistration implementation --
public ObjectName preRegister(MBeanServer server, ObjectName name)
throws Exception
{
LoginContext = new LoginContext("other");
String OBJECT_NAME = ":service=ConfigLoader";
return name == null ? new ObjectName(OBJECT_NAME) : name;
}

public void postRegister(Boolean registrationDone)
{
}

public void preDeregister() throws Exception
{
}

public void postDeregister()
{
}
}

- Original Message - 
From: "Alex Radka" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, May 31, 2001 1:13 PM
Subject: RE: [JBoss-user] JBoss 2.2.2 Release available


> 
> >> 1) Initialization not thread safe (I know this is a problem with JAAS,
> but
> >> did you include a workaround).
> >No, its simple to workaround this using an mbean.
> 
> Any chance I could get an example.
> 
> Just to make sure we are talking about the same thing, the workaround you
> speak of will fix the problem you refer to in:
> http://www.mail-archive.com/jboss-user%40lists.sourceforge.net/msg04879.html
> 
> Thanks,
> Alex



___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] getting source code

2001-05-31 Thread Scott M Stark

There is no release 3.2.1. There is a 2.2.1 release that has a cvs tag of
JBoss_2_2_1 and this can be viewed online from sourceforge.

- Original Message - 
From: "Jesper Andersen" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, May 31, 2001 2:48 PM
Subject: [JBoss-user] getting source code


> I've been trying to solve a problem in jboss for a few days now, and I've
> concluded that the only way I can solve my problem reasonably is to modify
> the source code to log more code.  My problem is that I can't seem to locate
> a snapshot of the source code that matches my release (v 3.2.1)  so I can't
> simply modify a jar and replace the release jar (in my case jboss.jar).
> Does anyone know where I can find the release snap-shot, or at a minimum,
> does anyone know the cvs tag used for the 3.2.1 release?
> 
> 
> thank you very much for your help,
> 
> Jesper Andersen 
> ScreamingMedia 
> 



___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] Damned port 5555

2001-05-31 Thread Scott M Stark

Try upgrading to 2.2.1+ and then use the NamingService mbean port attribute
in the jboss.jcml to set it. See the 2.0 -> 2.2 migration docs on the web site.

  
1099
0
  

- Original Message - 
From: "Semir Patel" <[EMAIL PROTECTED]>
To: "Jboss-User@Lists. Sourceforge. Net" <[EMAIL PROTECTED]>
Sent: Thursday, May 31, 2001 5:19 PM
Subject: [JBoss-user] Damned port 


> Ok, so I need to run more than one instance of JBoss on a given machine and
> need to re-assign all the server socket ports created by JBoss + dependents.
> I haven't had any luck reassing port  in particular which is used by the
> naming service. I've already plowed through the Jboss (2.0), jndi, jnp, and
> etc source code and have come up empty. There were alot of questions on this
> topic in the archives but not a single answer. Anyone? Where does the 
> come from? With my luck it is probably uuencoded in hex with a little rot13
> action in the source code...ha!
> 
> Thanks,
> Semir
> 



___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] JBoss 2.2.2 Release available

2001-05-31 Thread Scott M Stark

Its been updated but the site only updates once a day.

- Original Message - 
From: "David Ward" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, May 31, 2001 9:40 PM
Subject: Re: [JBoss-user] JBoss 2.2.2 Release available


> Because I'm on the mailing list, I saw this and had no problem 
> downloading and installing.  However, for people who aren't on this list 
> but look at the web site, can the webmaster please update the binaries 
> page?  The http://www.jboss.org/business/binary.html page should 
> probably link to the new JBoss 2.2.2 and Tomcat 3.2.2 bundle.  Just a 
> suggestion.  I love JBoss and you guys are doing an awesome job for the 
> open source community!
> 
> Thanks,
> David
> 
> --
> 
> Scott M Stark wrote:
> 
> > A new 2.2.2 maintenance release is available at sourceforge from the Files section
> > of the jboss.org project: 
>http://sourceforge.net/project/showfiles.php?group_id=22866
> > along with the change notes.
> > 
> > It includes a few bug fixes and a few enhancements including a new 
>AbstractWebContainer
> > support mbean that allows for complete integration of web application JNDI ENC
> > as well as secured access using the same JBossSX security layer as used by the
> > EJB framework. A new JBoss-2.2.2_Tomcat-3.2.2 bundle is included in the release
> > to demonstrate the new integration. Jetty and other third party web containers will
> > be able to achieve the same level of integration by extending the 
>AbstractWebContainer.
> > 
> > See the updated JAAS tutorial for an example of a secured EAR. 
> > http://www.jboss.org/documentation/HTML/ch11s83.html
> > 
> > 
> > 
> > ___
> > JBoss-user mailing list
> > [EMAIL PROTECTED]
> > http://lists.sourceforge.net/lists/listinfo/jboss-user
> 
> 
> 
> ___
> JBoss-user mailing list
> [EMAIL PROTECTED]
> http://lists.sourceforge.net/lists/listinfo/jboss-user
> 


___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



[JBoss-user] JBoss 2.2.2 Release available

2001-05-31 Thread Scott M Stark

A new 2.2.2 maintenance release is available at sourceforge from the Files section
of the jboss.org project: http://sourceforge.net/project/showfiles.php?group_id=22866
along with the change notes.

It includes a few bug fixes and a few enhancements including a new AbstractWebContainer
support mbean that allows for complete integration of web application JNDI ENC
as well as secured access using the same JBossSX security layer as used by the
EJB framework. A new JBoss-2.2.2_Tomcat-3.2.2 bundle is included in the release
to demonstrate the new integration. Jetty and other third party web containers will
be able to achieve the same level of integration by extending the AbstractWebContainer.

See the updated JAAS tutorial for an example of a secured EAR. 
http://www.jboss.org/documentation/HTML/ch11s83.html



___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] :-| Security Roles

2001-06-01 Thread Scott M Stark

You cannot as part of the standard EJB api. You can only ask if a user
has a role.

You can see the roles the current user has if you access the JaasSecurityManager
from JNDI and get the active Subject. This is a JBoss specfic mechanism.

- Original Message - 
From: "Lewis Henderson" <[EMAIL PROTECTED]>
To: "JBoss User (E-mail)" <[EMAIL PROTECTED]>
Sent: Friday, June 01, 2001 7:20 AM
Subject: [JBoss-user] :-| Security Roles


> Is it possible to retrieve the Roles that someone is a member of from JAAS?
> 
> Mainly this will be an EJB finding out what Roles the current Principal
> has...
> 
> 
> Regards
> 
> Lewis
> 
> 
> ___
> JBoss-user mailing list
> [EMAIL PROTECTED]
> http://lists.sourceforge.net/lists/listinfo/jboss-user
> 


___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] :-| Security Roles

2001-06-01 Thread Scott M Stark

The JBossSX chapter describes the security manager details. There
are no security restrictions to accessing JNDI currently. If you are running
with a security manager then there are permissions required to
access the Subject information. A sample for iterating the roles
assigned to the current user for an EJB secured under the a security-domain
element value of java:/jaas/mySecureDomain is:

import java.security.acl.Group;
import javax.security.auth.Subject;
import org.jboss.security.SubjectSecurityManager;

InitialContext ctx = new IntialContext();
SubjectSecurityManager secMgr = (SubjectSecurityManager) 
ctx.lookup("java:/jaas/mySecureDomain");
Subject subject = secMgr.getActiveSubject();
Set subjectGroups = subject.getPrincipals(Group.class);
Iterator iter = subjectGroups.iterator();
Enumeration userRoles = null;
while( iter.hasNext() )
{
Group grp = (Group) iter.next();
String name = grp.getName();
if( name.equals("Roles") )
   {
userRoles = grp.members();
break;
}
}


- Original Message - 
From: "Lewis Henderson" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, June 01, 2001 8:07 AM
Subject: RE: [JBoss-user] :-| Security Roles


> This method is great for me...Security is one of the non-standard areas of
> J2EE app servers that I have to resort to a 'server-specific' module...
> 
> Can you give me any pointers as to where I should start looking to do
> this...or do you have a sample?
> 
> As this is accessed via a JNDI lookup, are there any security issues as to
> who can see what that I should know about?
> 
> 
> Lewis
> 



___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] jboss-jaas.jar LdapLoginModule enhancements?

2001-06-01 Thread Scott M Stark

Submit a patch to sourceforge and I'll review it.

- Original Message - 
From: "Steve Swing" <[EMAIL PROTECTED]>
To: "jboss-user" <[EMAIL PROTECTED]>
Sent: Friday, June 01, 2001 8:45 AM
Subject: [JBoss-user] jboss-jaas.jar LdapLoginModule enhancements?


> I've modified LdapLoginModule to use a different ctx.search() method because
> of how user roles are defined in my directory--based on group membership
> instead of role attributes on each user. I tried to keep my modifications so
> the auth.conf is compatible with either search method. I need advice on what
> to do with my changes. I don't want to have to update this one class in
> jboss-jaas.jar with every new release; OK for quick testing but not for long
> term. I could remove my changes and extend the original class but since
> almost all the "important" work is done in the createLdapInitContext()
> method overriding it seems like too much duplicated code.
> 
> Can I submit the source for review and potentially have my changes merged
> into the source tree? Recommendations?
> 
> Steve Swing
> 
> 
> 
> ___
> JBoss-user mailing list
> [EMAIL PROTECTED]
> http://lists.sourceforge.net/lists/listinfo/jboss-user
> 


___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] (no subject)

2001-06-01 Thread Scott M Stark

The deployment tool should be ok for the basic j2ee stuff but you won't
be able to setup your JNDI ENC bindings without using the jboss specific
descriptors. The problem your describing is one of servlet uri mapping
that should be handled by the application.xml context name and web-app
servlet-mapping elements. If you haven't fully specified these your running
with some default that isn't likely to be the default seen in the j2ee-ri

- Original Message - 
From: "Java End-to-End" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, June 01, 2001 6:14 AM
Subject: [JBoss-user] (no subject)


> List Members:
> 
> I recently downloaded JBoss and find it an amazing development tool. Fast
> and easy to use (for the most part). I am currently running the integrated
> (with tomcat) version and have managed to get ejb's running fine. I am now
> trying to run a servlet client communicating with an ejb and am having
> trouble with the .ear, .war and .jar files and the deployment to JBoss.
> 
> I have been using the J2SDKEE1.2.2 deployment tool to produce my .ear file
> which also contains my .jar file for my ejb's and my .war file for my web
> client (servlet). The .ear, after placing in /deploy dir deploys ok as far
> as the JBoss is concerned. However, when I call the servlet in a browser, I
> keep getting the error:
> 
> 2001-06-01 09:10:41 - Ctx( /servlets ): 404 R( /servlets +
> /ThirdJBoss.JBossServ
> let1 + null) null
> 
> The browser simply says 404 file not fouund (as also show above).
> 
> Seems to be a context error but I'm not sure. Perhaps I should't be using
> the deploytool, which might be leaving something missing. If not, does
> anyone have some samples to send me or a good tool to use to create the
> bundles for deployment?
> 
> Would appreciate any help at all.
> 
> Thank you very much.
> 
>  Bernard Lavallee
> 
> 
> 
> 
> 
> 
> Bernard Lavallee
> Java End-to-End
> 166 Packard Road
> Jericho, VT 05465
> Tel: 802 899-3115Email: [EMAIL PROTECTED]
>Web:  www.javaendtoend.com
> 
> Specializing in designing, developing and  implementing
> Java enabled enterprise applications for your business.
> 
> 
> ___
> JBoss-user mailing list
> [EMAIL PROTECTED]
> http://lists.sourceforge.net/lists/listinfo/jboss-user
> 


___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] Security in JBoss Howto?

2001-06-01 Thread Scott M Stark

> However, the other team members are concentrating on the security aspects,
> and are frustrated that that they cannot find a definitive "howto" on
> security issues.
> 
> A couple of their questions are:
> 
> How do we ensure only authorised clients can access out SOAP servlet?
> (Apache SOAP 2.2)
> 
This is a basic how to I secure a servlet question and can be handled with the
2.2 Servlet spec declarative security model.

> How do we ensure that no-one can call our EJB's directly via RMI?
> (I know a firewall helps here, but is there a built-in mechanism?)
> 
In JBoss anyone can lookup the EJB home interface. Invocation of any
method on the home or remote interface can be secured using the EJB 1.1
spec declarative security model.

Both of these are described in the online JAAS howto which can be found
here: http://www.jboss.org/documentation/HTML/ch11s83.html



___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] Access to EJB from APPLET

2001-06-01 Thread Scott M Stark

I've been looking into this issue today with a simple rmi client/server example and
this does not appear to be a bug in the JBoss code. Rather, it appears to be a
limitiation or design feature of dynamic class loading in the Sun jrmp implementation.
See the dev list for the details.

- Original Message - 
From: "Sacha Labourey" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, June 01, 2001 1:34 AM
Subject: RE: [JBoss-user] Access to EJB from APPLET


> Hello,
> 
> Nevertheless, after you you'll have solved all you problems, you'll not be
> able to make applet access EJB in the current code status. Due to a bug, the
> dynamic classloading does not work (if apps are not on the same host than
> the server). The RMI subsystem, when unmarshalling your stub, will get a
> file URL codebase (file://c:/jboss/...) relative to your JBoss server. Any
> app will try to download class from it, fail (if distant) and try the local.
> Applets will try and raise a security exception.
> 
> Vladimir Blagojevic and I have been discussed this issue and haven't found a
> true clean solution. We have tried to get some support/hints from Rickard
> but he seems to have left the JBoss planet for some time. ;)
> 
> You may also try to simply sign your applet (what I did).
> 
> Cheers,
> 
> 
> 
> Sacha
> 
> 


___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] EmbeddedTomcatServiceSX problem when using ConfigFile attribute

2001-06-01 Thread Scott M Stark


Yes, the first arg should be -config in the presence of a configFile attribute.


- Original Message - 
From: "Tim Taylor" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, June 01, 2001 2:46 PM
Subject: [JBoss-user] EmbeddedTomcatServiceSX problem when using ConfigFile attribute


> If the distributed jboss.jcml is modified to use the new ConfigFile
> attribute, I get the attached stack trace.
> 
> I really would like to use that attribute.  Before now, I have maintained my
> own version of EmbeddedTomcatService with exactly that attribute.  I was
> hoping to convert to pure JBoss/Tomcat and EmbeddedTomcatServiceSX and get
> rid of my custom code.
> 
> My jboss.jcml entry looks like this:
> 
>   
>name="DefaultDomain:service=EmbeddedTomcat">
>  name="ConfigFile">/opt/JBoss-2.2.2_Tomcat-3.2.2/tomcat/conf/server.xml ibute>
>   
> 
> I just set the file path to point to the default server.xml file in the
> distribution.  Looking at the MBean for EmbeddedTomcatServiceSX in JMX,
> shows that the ConfigFile attribute setting did take place.
> 
> A quick look at the code of EmbeddedTomcatServiceSX.java...  Would it work
> if the empty "" was changed to "-config"?
> 
> if( configFile != null )
> {
> args = new String[]{"", configFile};
> }
> 
> Stack trace follows.
> 
> Thanks in advance,
> 
> Tim Taylor



___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] AJP13 in jboss2.2.1+tomcat3.2.2

2001-06-03 Thread Scott M Stark

The AJP13 only reason its not included in the config is because its not
in the config that ships with jakarta-tomcat-3.2.x releases. There should
not be any problem with configuring AJP13.

- Original Message - 
From: "Matt Hudson" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Sunday, June 03, 2001 6:10 AM
Subject: [JBoss-user] AJP13 in jboss2.2.1+tomcat3.2.2


> Hello,
> 
> Is there any reason why AJP13 is not included in the latest jboss+tomcat
> shared-stack release?  My production environment depends on AJP because I
> use mod_jk, so I'm hoping to either get a sample configuration that adds
> AJP13 to the latest embedded tomcat, or reasonable caution against doing so.
> Otherwise, I can use tomcat standalone without trouble.
> 
> Thanks for input/help/examples...
> 
> 
> -matt
> 



___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] newbie question about JAAS based security model

2001-06-06 Thread Scott M Stark


>From within an EJB you should be using EJBContext.getCallerPrincipal() to
access the
authenticated principal. What security have you setup for the bean?


- Original Message -
From: Wei Ma
To: [EMAIL PROTECTED]
Sent: Tuesday, June 05, 2001 9:06 AM
Subject: [JBoss-user] newbie question about JAAS based security model


Hi all,
  I am running JAAS based security model with JBoss.

 I use SecurityAssociation.getPrincipal() to get the principal object, it
works find until I re-deploy my project
The following is my code and error message
Code:
Principal principal = SecurityAssociation.getPrincipal();
String name = principal.getName();
Error message:

java.lang.NullPointerException: [Service]   at
com.bridgewatersystems.netprofile.middleware.OrganizationEntity.(Organ
izationEntity.java:56)
[Service]   at
comm.bridgewatersystems.netprofile.middleware.ServiceBean.getRootOrganizatio
n(ServiceBean.java:350)
[Service]   at java.lang.reflect.Method.invoke(Native Method)
[Service]   at
org.jboss.ejb.StatelessSessionContainer$ContainerInterceptor.invoke(Stateles
sSessionContainer.java:472)
[Service]   at
org.jboss.ejb.plugins.StatelessSessionInstanceInterceptor.invoke(StatelessSe
ssionInstanceInterceptor.java:87)
[Service]   at
org.jboss.ejb.plugins.TxInterceptorCMT.invokeNext(TxInterceptorCMT.java:133)
[Service]   at
org.jboss.ejb.plugins.TxInterceptorCMT.runWithTransactions(TxInterceptorCMT.
java:458)
[Service]   at
org.jboss.ejb.plugins.TxInterceptorCMT.invoke(TxInterceptorCMT.java:99)
[Service]   at
org.jboss.ejb.plugins.SecurityInterceptor.invoke(SecurityInterceptor.java:19
0)
[Service]   at
org.jboss.ejb.plugins.LogInterceptor.invoke(LogInterceptor.java:195)
[Service]   at
org.jboss.ejb.StatelessSessionContainer.invoke(StatelessSessionContainer.jav
a:271)
[Service]   at
org.jboss.ejb.plugins.jrmp.server.JRMPContainerInvoker.invoke(JRMPContainerI
nvoker.java:392)
[Service]   at java.lang.reflect.Method.invoke(Native Method)
[Service]   at
sun.rmi.server.UnicastServerRef.dispatch(UnicastServerRef.java:241)
[Service]   at sun.rmi.transport.Transport$1.run(Transport.java:142)
[Service]   at java.security.AccessController.doPrivileged(NativeMethod)
[Service]   at
sun.rmi.transport.Transport.serviceCall(Transport.java:139)
[Service]   at
sun.rmi.transport.tcp.TCPTransport.handleMessages(TCPTransport.java:443)
[Service]   at
sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run(TCPTransport.java:6
43)
[Service]   at java.lang.Thread.run(Thread.java:484)

Does this mean I have to restart Jboss server each time I deploy my project?
Thanks very much
Wei


___
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user



Re: [JBoss-user] Still can't deploy on jBoss 2.2.2_Tomcat-3.2.2, OK before w/jBoss-2.2.1

2001-06-06 Thread Scott M Stark

The web-app.xml in the comment is incorrect. Its really talking about the
web.xml
document web-app child elements. The war descriptor parsing did change in
2.2.2, but I thought it was compatible with previous versions. This is based
on the
units tests so your usage of the descriptors must not be convered by the
tests.
Post a bug to sourceforge that includes all of your deployment descriptors
and
I'll track down the problem.

- Original Message -
From: "Jim Archer" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, June 05, 2001 9:09 PM
Subject: [JBoss-user] Still can't deploy on jBoss 2.2.2_Tomcat-3.2.2, OK
before w/jBoss-2.2.1


> Hi All...
>
> I posted an earlier message saying that I could not deploy an EAR under
> jBoss-2.2.2_Tomcat-3.2.2, but it deploys and runs fine on
> jBoss-2.2.1_Tomcat-3.2.1. I received a reply pointing me to the docs, and
I
> reviewed them and my app carefully. Prehaps I'm at the point where I can't
> see the problem when it is clear, but things do look correct to me. Also,
> it still deploys and runs fine under the old distribution (jboss-2.2.1).
>
> I tried running the app, and I get a naming exception saying "env not
> bound." The app then goes into an endless loop, trying to do the lookup
> over and over. Strangly, my app has no loop. If the lookup fails, I catch
> thenaming exception and throw a new exception of my own, thats caught and
> returned to the client. So this looping behavior is a bit mysterious.
>
> I can see that the exception on deployment is being generated by the new
> webapp container code, so prehaps someone could tell me if this new code
> changed how descriptors are parsed? Is there a change to the requirements,
> or prehaps an old requirement is now enforced that was not before?
>
> I have pasted the earlier message below for reference. I would appreciate
> any assistance.
>
> Thanks very much!
>
> Jim
>
> * Earlier message *
>
> I just DLed and installed jBoss-2.2.2_Tomcat-3.2.2. I was able to start it
> OK, but when I deployed my EAR I got the exception I pasted below. This
EAR
> deploys and runs fine on jBoss-2.2.1_Tomcat-3.2.1.
>
> I'm using Sun JDK 1.3.1 on Windows 2000 SP2.
>
> The explanation of the problem is clearly stated in the exception. What
> confuses me is that I don't actually have a web-app.xml file anywhere, and
> never had (yet it worked). I do have a web.xml file thats required for the
> JNDI name binding.
>
> I saw in the change log that web-app.xml parsing had been changed to
> support ENC. I could not find a reference to this file in the jboss/tomcat
> howto or the J2EE PFD3 specification. I also checked the test EAR that
> ships with jBoss/TC and although it had a web.xml file it had no
> web-app.xml file.
>
> So I'm at a loss and would appreciate a some help.
>
> Thanks very much...
>
> Jim
>
>
>
> [J2EE Deployer Default] Starting module Regnet-ver001a-web.war
> [Auto deploy] deploy, ctxPath=/regnet,
> warUrl=file:/C:/JBoss-2.2.2_Tomcat-3.2.2/
> jboss/tmp/deploy/Default/Regnet-ver001a.ear/web1006/
> 2001-06-02 12:46:36 - ContextManager: Adding context Ctx( /regnet )
> [Auto deploy] AbstractWebContainer.parseWebAppDescriptors, Begin
> [Auto deploy] org.jboss.ejb.DeploymentException: ejb-ref ejb/AleEntity
> found in
> jboss-web.xml but not in web-app.xml
> [Auto deploy]   at
> org.jboss.metadata.WebMetaData.importJBossWebXml(WebMetaData.
> java:152)
> [Auto deploy]   at
> org.jboss.metadata.WebMetaData.importXml(WebMetaData.java:80)
>
> [Auto deploy]   at
> org.jboss.web.AbstractWebContainer.parseWebAppDescriptors(Abs
> tractWebContainer.java:274)
> [Auto deploy]   at
> org.jboss.web.AbstractWebContainer$DescriptorParser.parseWebA
> ppDescriptors(AbstractWebContainer.java:398)
> [Auto deploy]   at
> org.jboss.tomcat.naming.JbossWebXmlReader.contextInit(JbossWe
> bXmlReader.java:61)
> [Auto deploy]   at
> org.apache.tomcat.core.ContextManager.initContext(ContextMana
> ger.java:491)
> [Auto deploy]   at
> org.jboss.tomcat.TomcatEntry.initContext(TomcatEntry.java:144
> )
> [Auto deploy]   at
> org.jboss.tomcat.EmbeddedTomcatServiceSX.performDeploy(Embedd
> edTomcatServiceSX.java:117)
> [Auto deploy]   at
> org.jboss.web.AbstractWebContainer.deploy(AbstractWebContaine
> r.java:178)
> [Auto deploy]   at java.lang.reflect.Method.invoke(Native Method)
> [Auto deploy]   at
> com.sun.management.jmx.MBeanServerImpl.invoke(MBeanServerImpl
> .java:1628)
> [Auto deploy]   at
> com.sun.management.jmx.MBeanServerImpl.invoke(MBeanServerImpl
> .java:1523)
> [Auto deploy]   at
> org.jboss.deployment.J2eeDeployer.startApplication(J2eeDeploy
> er.java:431)
> [Auto deploy]   at
> org.jboss.deployment.J2eeDeployer.deploy(J2eeDeployer.java:17
> 8)
> [Auto deploy]   at java.lang.reflect.Method.invoke(Native Method)
> [Auto deploy]   at
> com.sun.management.jmx.MBeanServerImpl.invoke(MBeanServerImpl
> .java:1628)
> [Auto deploy]   at
> com.sun.management.jmx.MBeanServerImpl.invoke(MBeanServerImpl
> .java:1523)
> [Auto deploy]   at

Re: [JBoss-user] Glitch in JBoss-2.2.2_Tomcat-3.2.2 distribution

2001-06-06 Thread Scott M Stark

The same deploys without problems for me. Have you made any changes to the
JBoss
or tomcat config files?

[J2EE Deployer Default] Starting module tomcat-test.war
[Auto deploy] deploy, ctxPath=/jboss,
warUrl=file:/F:/Java/JBoss-2.2.2_Tomcat-3.2.2/jboss/tmp/deploy/Default/tomca
t-test.ear/web1001/
2001-06-06 08:28:44 - ContextManager: Adding context Ctx( /jboss )
[Auto deploy] AbstractWebContainer.parseWebAppDescriptors, Begin
[Auto deploy] addEnvEntries
[Auto deploy] linkResourceRefs
[Auto deploy] linkEjbRefs
[Auto deploy] linkSecurityDomain
[Auto deploy] Binding security/securityMgr to NullSecurityManager
[Auto deploy] AbstractWebContainer.parseWebAppDescriptors, End
[Auto deploy] Initialized: {WebApplication:
/F:/Java/JBoss-2.2.2_Tomcat-3.2.2/jboss/tmp/deploy/Default/tomcat-test.ear/w
eb1001/, URL: file:/F:/Java/JBoss-2.2.2_
Tomcat-3.2.2/jboss/tmp/deploy/Default/tomcat-test.ear/web1001/, classLoader:
AdaptiveClassLoader(  ):6800843}
[J2EE Deployer Default] J2EE application:
file:/F:/Java/JBoss-2.2.2_Tomcat-3.2.2/jboss/deploy/tomcat-test.ear is
deployed.


- Original Message -
From: "Binoy" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, June 06, 2001 3:53 AM
Subject: [JBoss-user] Glitch in JBoss-2.2.2_Tomcat-3.2.2 distribution


> Hi brethren,
> I recently DL'ed the new distribution of JBoss-2.2.2_Tomcat-3.2.2
> I have a problem with my new distribution of JBoss-2.2.2_Tomcat-3.2.2 
> the .ear file which deploys comfortably on JBoss-2.2.1_Tomcat-3.2.1 throws
> some kind of stack when deployed on the newer version
> Here is the stack Trace :
>
/***
> **/
> [J2EE Deployer Default] Starting module tomcat-test.war
> [Auto deploy] deploy, ctxPath=/jboss,
>
warUrl=file:/F:/JBoss-2.2.2_Tomcat-3.2.2/jboss/tmp/deploy/Default/tomcat-tes
> t.ear/web1001/
> [Auto deploy] java.lang.NullPointerException
> [Auto deploy]  at
> org.jboss.tomcat.TomcatEntry.addRawContext(TomcatEntry.java:107)
> [Auto deploy]  at
>
org.jboss.tomcat.EmbeddedTomcatServiceSX.performDeploy(EmbeddedTomcatService
> SX.java:106)
> [Auto deploy]  at
> org.jboss.web.AbstractWebContainer.deploy(AbstractWebContainer.java:178)
> [Auto deploy]  at java.lang.reflect.Method.invoke(Native Method)
> [Auto deploy]  at
> com.sun.management.jmx.MBeanServerImpl.invoke(MBeanServerImpl.java:1628)
> [Auto deploy]  at
> com.sun.management.jmx.MBeanServerImpl.invoke(MBeanServerImpl.java:1523)
> [Auto deploy]  at
> org.jboss.deployment.J2eeDeployer.startApplication(J2eeDeployer.java:431)
> [Auto deploy]  at
> org.jboss.deployment.J2eeDeployer.deploy(J2eeDeployer.java:178)
> [Auto deploy]  at java.lang.reflect.Method.invoke(Native Method)
> [Auto deploy]  at
> com.sun.management.jmx.MBeanServerImpl.invoke(MBeanServerImpl.java:1628)
> [Auto deploy]  at
> com.sun.management.jmx.MBeanServerImpl.invoke(MBeanServerImpl.java:1523)
> [Auto deploy]  at org.jboss.ejb.AutoDeployer.deploy(AutoDeployer.java:358)
> [Auto deploy]  at org.jboss.ejb.AutoDeployer.run(AutoDeployer.java:221)
> [Auto deploy]  at
> org.jboss.ejb.AutoDeployer.startService(AutoDeployer.java:332)
> [Auto deploy]  at
> org.jboss.util.ServiceMBeanSupport.start(ServiceMBeanSupport.java:93)
> [Auto deploy]  at java.lang.reflect.Method.invoke(Native Method)
> [Auto deploy]  at
> com.sun.management.jmx.MBeanServerImpl.invoke(MBeanServerImpl.java:1628)
> [Auto deploy]  at
> com.sun.management.jmx.MBeanServerImpl.invoke(MBeanServerImpl.java:1523)
> [Auto deploy]  at
> org.jboss.util.ServiceControl.start(ServiceControl.java:97)
> [Auto deploy]  at java.lang.reflect.Method.invoke(Native Method)
> [Auto deploy]  at
> com.sun.management.jmx.MBeanServerImpl.invoke(MBeanServerImpl.java:1628)
> [Auto deploy]  at
> com.sun.management.jmx.MBeanServerImpl.invoke(MBeanServerImpl.java:1523)
> [Auto deploy]  at org.jboss.Main.(Main.java:217)
> [Auto deploy]  at org.jboss.Main$1.run(Main.java:121)
> [Auto deploy]  at java.security.AccessController.doPrivileged(Native
Method)
> [Auto deploy]  at org.jboss.Main.main(Main.java:117)
> [Auto deploy] java.lang.NullPointerException
> [Auto deploy]  at
>
org.jboss.tomcat.EmbeddedTomcatServiceSX.performDeploy(EmbeddedTomcatService
> SX.java:107)
> [Auto deploy]  at
> org.jboss.web.AbstractWebContainer.deploy(AbstractWebContainer.java:178)
> [Auto deploy]  at java.lang.reflect.Method.invoke(Native Method)
> [Auto deploy]  at
> com.sun.management.jmx.MBeanServerImpl.invoke(MBeanServerImpl.java:1628)
> [Auto deploy]  at
> com.sun.management.jmx.MBeanServerImpl.invoke(MBeanServerImpl.java:1523)
> [Auto deploy]  at
> org.jboss.deployment.J2eeDeployer.startApplication(J2eeDeployer.java:431)
> [Auto deploy]  at
> org.jboss.deployment.J2eeDeployer.deploy(J2eeDeployer.java:178)
> [Auto deploy]  at java.lang.reflect.Method.invoke(Native Method)
> [Auto deploy]  at
> com.sun.management.jmx.MBeanServerImpl.invoke(MBeanServerImpl.java:1628)
> [Auto deploy]  at
> com.sun.mana

  1   2   3   4   5   6   7   8   9   10   >