Re: Re: [JBoss-user] Glitch in JBoss-2.2.2_Tomcat-3.2.2 distribution

2001-06-07 Thread Scott M Stark
Claudio submitted a patch: http://sourceforge.net/tracker/index.php?func=detail&aid=430035&group_id=228 66&atid=376687 I'll look into why this issue has shown up in the 2.2.2 release and put out another tomcat bundle release next week. - Original Message - From: "Binoy" <[EMAIL PROTECTED

Re: [JBoss-user] EJB security

2001-06-07 Thread Scott M Stark
You can control this by installing your own authentication cache. By default a timed cache is used, but there aren't any methods exposed to flush this cache. I'll add this. - Original Message - From: "Martin Renner" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Thursday, June 07, 2001

Re: [JBoss-user] Help !! Dynamic User Authentication with JBoss

2001-06-07 Thread Scott M Stark
You can do this using custom security proxies. There are a couple of changes that need to be commited to main for this along with the usage docs. I'll get to it next week. - Original Message - From: "Binoy" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, June 06, 2001 8:48 PM

Re: [JBoss-user] JAAS cache question

2001-06-08 Thread Scott M Stark
JAAS cache question Yes, authentication info is cached in a timed cache by default is no cache policy was specified in the setup of the JaasSecurityManagerService. - Original Message - From: Ivan Bolcina To: '[EMAIL PROTECTED]' Sent: Friday, June 08, 2001 5:21 AM Subject: [JBoss-user] JAA

Re: [JBoss-user] Secure access to set methods but no security on get methods

2001-06-08 Thread Scott M Stark
You have to include a login module that maps null to an anonymous user. I think I would have to update the security interceptor to allow for null principals as well. I'll look into this next week while I'm making some other security related changes. - Original Message - From: Paul Austin

Re: Re: [JBoss-user] Help !! Dynamic User Authentication with JBoss

2001-06-08 Thread Scott M Stark
The initial docs are the JBossSX chapter. It does not go into much detail on the custom security proxy mechanism currently. - Original Message - From: "Binoy" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Thursday, June 07, 2001 8:48 PM Subject: Re: Re: [JBoss-user] Help !! Dynamic Us

Re: [JBoss-user] It is compulsory that jboss start on server JVM?

2001-06-08 Thread Scott M Stark
-server is a Sun JVM option that starts the server version of HotSpot. The run.sh in main now checks to see if a Sun VM is being used and only uses -server if that is the case. - Original Message - From: "Hunter Hillegas" <[EMAIL PROTECTED]> To: "JBoss 2" <[EMAIL PROTECTED]> Sent: Friday

Re: [JBoss-user] Authentication problems in JBoss-2.2.2/Tomcat-3.2.2 (env not bound)

2001-06-08 Thread Scott M Stark
The 2.2.2 bundle uses the JBoss security manager. You have to define the security-domain in a jboss-web.xml descriptor. See the JAAS tutorial: http://www.jboss.org/documentation/HTML/ch11s83.html - Original Message - From: "Greg Merrill" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent:

Re: [JBoss-user] Authentication problems in JBoss-2.2.2/Tomcat-3.2.2 (env not bound)

2001-06-09 Thread Scott M Stark
gt; Given the URL below, what method of authentication are we to use? > > JDBC Authentication with Tomcat, or DatabaseServerLoginModule > authentication? > > I'm a little confused...do the two cooperate or are they unrelated? > > Mike > > - Original Message - >

[JBoss-user] JBoss-Tomcat 2.2.2 beta2 Released

2001-06-09 Thread Scott M Stark
Since users were reporting problems with dtd resolution I am releasing the fixed JBoss/Tomcat bundle as a beta2 release to allow for further testing before calling this a final release. There were no changes to the JBoss portion of the release. The tomcat-service.jar has been updated to include lo

Re: [JBoss-user] EmbeddedTomcat, JNDI and Classloader

2001-06-10 Thread Scott M Stark
It does not work because the java:comp/env context is unique to a j2ee component. The mechanism used to create a unique namespace between j2ee components is the ClassLoader that was used to deploy the component. When the Cocoon servlet creates its own ClassLoader it effectively changes its java:co

Re: [JBoss-user] ClassLoader exception

2001-06-11 Thread Scott M Stark
You need to use the JAXP api for obtaining an xml parser. - Original Message - From: "Schouten, Andreas" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Monday, June 11, 2001 8:31 AM Subject: [JBoss-user] ClassLoader exception > Hello, > > I try parsing a XML document in the same wa

Re: [JBoss-user] JBoss-Tomcat not working for wireless devices

2001-06-11 Thread Scott M Stark
This is a tomcat config issue. Look at the following element in the tomcat/conf/server.xml file: - Original Message - From: "Ulli Hoffmann" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Monday, June 11, 2001 3:32 AM Subject: [JBoss-user] JBoss-Tomcat not working f

Re: [JBoss-user] ClassLoader exception

2001-06-11 Thread Scott M Stark
See the JAXP howto here: Configuring and Using JAXP 1.1 In JBoss http://www.jboss.org/documentation/HTML/ch11s178.html JAXP is the standard interface for obtaining xml parsers. It externalizes the xml parser implementation to avoid specific implementation class names like that used below so that

Re: [JBoss-user] javax.naming.NameNotFoundException: jdbc not bound

2001-06-11 Thread Scott M Stark
For your resource ref you would have to use a lookup like: new InitialContext.lookup("java:comp/env/jdbc.atalk") but your probably doing: new InitialContext.lookup("java:comp/env/jdbc/atalk") The JBoss jnp JNDI provider uses '/' as name component seperators. Your probably used to the weblogic

Re: [JBoss-user] manual

2001-06-11 Thread Scott M Stark
So I see three options here. 1. Take the 10k your saving and write 10k worth of docs. 2. Send 10k to JBoss and we'll write 10k worth of docs. 3. Read the ultimate docs(the source) and save 10k less the hours it takes you. - Original Message - From: "Ivan Bolcina" <[EMAIL PROTECTED]> To:

Re: [JBoss-user] jBoss cannot handle char primitive type

2001-06-12 Thread Scott M Stark
This bug was fixed in the 1.3.1 release. - Original Message - From: "Marko Strukelj" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, June 12, 2001 1:57 AM Subject: RE: [JBoss-user] jBoss cannot handle char primitive type > This issue has come up several times already on this

Re: [JBoss-user] Integrated tomcatSX

2001-06-12 Thread Scott M Stark
There is always a security interceptor and tomcat decides when it should be called. I'll look into what is going on with this particular usage. - Original Message - From: "Ferguson, Doug" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, June 12, 2001 7:49 AM Subject: [JBoss-use

Re: [JBoss-user] Problems using DatabaseServerLoginModule

2001-06-12 Thread Scott M Stark
That is correct. It expects a query that maps any existing schema onto the idealized Principal and Roles tables as described in the JBossSX docs and the DatabaseServerLoginModule javadoc. See http://www.jboss.org/documentation/HTML/ch09s17.html - Original Message - From: "Grim Shieldss

Re: [JBoss-user] jboss-web.xml in JBoss2.2.2

2001-06-12 Thread Scott M Stark
Yes it is used and its purpose it to map the application jndi name references onto the actual deployment environment jndi name. In the 2.2.2 release the parsing the web descriptor jndi elements was cleaned up to better conform to the spec. The ejb-ref element in the web.xml descriptor: ContactS

Re: [JBoss-user] Deploying Multiple applications?

2001-06-12 Thread Scott M Stark
JBoss should not be using the classpath as of JBoss2.2.1 unless you have changed the start script. What version are you using? - Original Message - From: "Stephen Oakes" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, June 12, 2001 5:39 PM Subject: RE: [JBoss-user] Deploying M

Re: [JBoss-user] UnknownHostException when delopy tomcat-test

2001-06-12 Thread Scott M Stark
Update to the second 2.2.2 bundle release to get the dtd resolution fix. Your not able to connect to the url specified in the web.xml descriptor. - Original Message - From: "Peng Peng" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, June 12, 2001 5:57 PM Subject: [JBoss-user]

Re: [JBoss-user] WARNING: no match found for security role...

2001-06-13 Thread Scott M Stark
The msg means you have a security-role-ref with a role-name that does not include a role-link that points to the role admin Needs to be: admin admin EJB 1.1 Spec: 15.3.3 Linking security role references to security roles If the Application Assembler defines the security-role el

Re: Re: [JBoss-user] jboss-web.xml in JBoss2.2.2

2001-06-13 Thread Scott M Stark
The naming convention for ejb refs is to place them under java:comp/env/ejb which requires defining an ejb-ref as in the ejb 1.1 spec: ejb/EmplRecord Entity com.wombat.empl.EmployeeRecordHome com.wombat.empl.EmployeeRecord The ejb/EmplRecord value does not correspond to the default JNDI

Re: [JBoss-user] Auth.conf question

2001-06-13 Thread Scott M Stark
You have to specify a security-domain in order to setup the use of the JBoss security manager. The other entry in the configuration module will apply if you either name your security-domain java:/jaas/other, or use another name for which there is no corresponding entry in auth.conf. See the JAAS t

Re: [JBoss-user] distributed security with JAAS

2001-06-13 Thread Scott M Stark
With the 1.1 security model you would have to assign a role like ReadOnly to those methods and you would have to assign the ReadOnly role to the anonymous users. An unauthenticated user ends up passing a null principal and credential and this is currently rejected before consulting the security m

Re: [JBoss-user] Integrated Tomcat throws a security exception

2001-06-13 Thread Scott M Stark
Meaning what? - Original Message - From: "marc fleury" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, June 13, 2001 3:42 PM Subject: RE: [JBoss-user] Integrated Tomcat throws a security exception > how do you guys feel about forking tomcat... > > marc > _

Re: [JBoss-user] manual

2001-06-13 Thread Scott M Stark
ut bad JBoss docs, I find them brief > and enhancable but covering most important things yet, but > > Scott M Stark said: > > 3. Read the ultimate docs(the source) ... > > I don't agree with this, the ultimate doc is the doc! The > importance of documentation was addresse

[JBoss-user] Updated JBoss/Jetty bundle

2001-06-13 Thread Scott M Stark
An updated JBoss-2.2.2_Jetty-3.1.RC5-3.tgz bundle has been posted to sourceforge. This version has the same level of integrated security as the tomcat bundle. This means that you can now go through the JAAS tutorial with the Jetty bundle. Here are the release notes from Julian Gosnell: JBoss-2.2

Re: [JBoss-user] :-) EJB2.0 RunAs

2001-06-14 Thread Scott M Stark
Its something I'm working on now. What is your interpretation of the runAs semantics? - Original Message - From: "Lewis Henderson" <[EMAIL PROTECTED]> To: "JBoss User (E-mail)" <[EMAIL PROTECTED]> Sent: Thursday, June 14, 2001 2:12 AM Subject: [JBoss-user] :-) EJB2.0 RunAs > Scott, > I

Re: [JBoss-user] JBossMQ exception on startup

2001-06-14 Thread Scott M Stark
You will only see this problem if your zip utility does not create empty directories that exist in the zip archive. I am able to run the 2.2.2 build on w2k by unziping the JBoss-2.2.2.zip with the java jar command. - Original Message - From: "Jay Scherer" <[EMAIL PROTECTED]> To: <[EMAIL

Re: [JBoss-user] Web Application?

2001-06-14 Thread Scott M Stark
Use the beta2 release of the JBoss 2.2.2 + Tomcat 3.2.2 bundle that contains an local entity resolver to avoid this problem. - Original Message - From: "Optima" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Thursday, June 14, 2001 8:32 AM Subject: [JBoss-user] Web Application? Greet

Re: [JBoss-user] Pass by reference between two SLSBs?

2001-06-14 Thread Scott M Stark
By default containers used optimized in vm call semantics to avoid RMI serialization costs. See the Optimized flag in the container-invoker-conf element discussion here: http://www.jboss.org/documentation/HTML/ch06s08.html - Original Message - From: "Jim Archer" <[EMAIL PROTECTED]> To: <

Re: [JBoss-user] :-) EJB2.0 RunAs

2001-06-15 Thread Scott M Stark
What I implemented is the EJB2.0 run-as feature. The servlet 2.3 run-as feature will be next, but I'm not sure it handles what your looking for. > I have WAR clients that need to access EJB's via the WAR app and not directly. This case is an unauthenticated client accessinga servlet that in turn

Re: [JBoss-user] Oracle install probs

2001-06-15 Thread Scott M Stark
It only hangs for 30 seconds and the problem only occurs if you have configured the Log4jService. - Original Message - From: "Guy Rouillier" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, June 15, 2001 10:01 AM Subject: Re: [JBoss-user] Oracle install probs Oracle install pro

Re: [JBoss-user] Updated JBoss/Jetty bundle

2001-06-15 Thread Scott M Stark
t; <[EMAIL PROTECTED]> To: "jBoss user" <[EMAIL PROTECTED]> Sent: Friday, June 15, 2001 11:51 AM Subject: Re: [JBoss-user] Updated JBoss/Jetty bundle > On Wed, 13 Jun 2001, Scott M Stark wrote: > > > An updated JBoss-2.2.2_Jetty-3.1.RC5-3.tgz bundle has been po

Re: [JBoss-user] inconsistent (but frequent) InitialContext.lookup() problems

2001-06-15 Thread Scott M Stark
That is a windows tcp error: WSAENOBUFS(10055): An operation on a socket could not be performed because the system lacked sufficient buffer space or because a queue was full. Your creating too many connections for your OS. Try keeping one InitialContext around instead of creating every time or

Re: [JBoss-user] jboss-tomcat

2001-06-15 Thread Scott M Stark
The most uptodate example is the JAAS security tutorial that shows deployment of a secure ear. It does not explain the whys of the steps, it just goes through the process and hides the details in the ant build script. http://www.jboss.org/documentation/HTML/ch11s83.html - Original Message --

Re: [JBoss-user] ClientLogin module can't load from tomcat context

2001-06-15 Thread Scott M Stark
This is a known issue with the JAAS 1.0.1 implementation. The org.jboss.security.auth.spi.ProxyLoginModule can be used to work around this issue: /** A proxy LoginModule that loads a delegate LoginModule using the current thread context class loader. The purpose of this module is to work around t

Re: [JBoss-user] Why the redundancy in DataSource mbean tag?

2001-06-18 Thread Scott M Stark
One is an attribute of the MBean ObjectName that can be used as a query key when searching for the MBean, the other is an attribute of the MBean. - Original Message - From: "Ferguson, Doug" <[EMAIL PROTECTED]> To: "JBoss User (E-mail)" <[EMAIL PROTECTED]> Sent: Saturday, June 16, 2001 3:

Re: [JBoss-user] XML and XSL hell

2001-06-18 Thread Scott M Stark
This hell is due to the packaging of the xml components by the various parsers, and xml based derivatives. Everyone tends to bundle the core xml classes in one jar and incompatabilities arise. No one bundles the core java.* packages in their code. The fact that the xml based products bundle the co

Re: [JBoss-user] :-) EJB2.0 RunAs

2001-06-18 Thread Scott M Stark
- Original Message - From: "Lewis Henderson" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Sunday, June 17, 2001 2:56 AM Subject: RE: [JBoss-user] :-) EJB2.0 RunAs > Scott, > > Why do you have anything to add to the jboss-web.xml? > > Surely the only entry that needs adding is th

Re: [JBoss-user] EJB and JBoss security

2001-06-18 Thread Scott M Stark
See the JAAS tutorial: http://www.jboss.org/documentation/HTML/ch11s83.html - Original Message - From: "Nick Taylor" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Monday, June 18, 2001 4:36 AM Subject: [JBoss-user] EJB and JBoss security > I am trying to get to grips with security

Re: [JBoss-user] is there a t3:// for JBoss

2001-06-18 Thread Scott M Stark
jnp://localhost:1099 - Original Message - From: "Scott Bermon" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Monday, June 18, 2001 12:17 PM Subject: [JBoss-user] is there a t3:// for JBoss > We are porting an application to JBoss from Weblogic. > > When we connect to the Weblogic

Re: [JBoss-user] Starting JBOSS+Tomcat

2001-06-19 Thread Scott M Stark
Use the JBoss/Tomcat bundle and the only instruction required is use the run_with_tomcat.[bat|sh] http://sourceforge.net/project/showfiles.php?group_id=22866 - Original Message - From: "Antony Bowesman" <[EMAIL PROTECTED]> To: "Jboss" <[EMAIL PROTECTED]> Sent: Tuesday, June 19, 2001 8:1

Re: [JBoss-user] hello

2001-06-19 Thread Scott M Stark
You should not have to modify the server.xml file. Look at the tomcat-test.ear shipped in the deploy directory of the JBoss/Tomcat bundle and how it defines a /jboss context to enable access to the web application files via http://localhost:8080/jboss dummy tomcat-test.war /jboss t

Re: [JBoss-user] JAAS login module classpath

2001-06-19 Thread Scott M Stark
This does not have a simple answer because of the need for JAAS to find the login module via the classpath and the fact that your EJB classes should not be on the classpath to avoid redeployment problems. Your going to have to create a class loader to handle these issues. - Original Message -

Re: [JBoss-user] Stateful bean passivation problem

2001-06-20 Thread Scott M Stark
The spec does not say that. It says that references to the java:comp/env JNDI context or any of its subcontexts are valid. 6.4.1 Instance passivation and conversational state The Bean Provider is required to ensure that the ejbPassivate method leaves the instance fields ready to be serialized b

Re: [JBoss-user] JAAS problem

2001-06-20 Thread Scott M Stark
Using what version of the JBoss/Tomcat bundle? What does the war web.xml and jboss-web.xml file look like? - Original Message - From: "Nick Taylor" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, June 20, 2001 4:48 AM Subject: [JBoss-user] JAAS problem > I am trying to sec

Re: [JBoss-user] Classloader problem in ear

2001-06-20 Thread Scott M Stark
This is the expected behavior given the current ear deployer. EJB classes are made available to wars and if you put you servlets in the ejb-jar archive it will be seen there first as this is ahead of the war classes. If you don't want this behavior only include the servlet in the war. - Origi

Re: [JBoss-user] JAAS problem

2001-06-20 Thread Scott M Stark
EJBs go in ejb-jars, web components including servlets go in a war. I don't understand how the soap servlet is even being deployed given what your saying. Show a jar -tf listing of the bean jar that you are dropping in the deploy directory. - Original Message - From: "Nick Taylor" <[EMAI

Re: [JBoss-user] Dynamic classloading

2001-06-20 Thread Scott M Stark
You need the all of the xxx-client.jar file located in the client directory of the jboss dist to run. This includes the jnp-client.jar that has the file org.jnp.interfaces.NamingContextFactory your missing. This cannot be downloaded dynamically from the server. - Original Message - From:

Re: [JBoss-user] Dynamic classloading

2001-06-20 Thread Scott M Stark
Yes. - Original Message - From: <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, June 20, 2001 10:35 AM Subject: Re: [JBoss-user] Dynamic classloading > Thanks for the info. So am I right in assuming that dynamic classloading > is only available for the class I place in m

Re: [JBoss-user] Log4j & JBoss - HowTo?

2001-06-20 Thread Scott M Stark
- Original Message - From: <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, June 20, 2001 1:14 PM Subject: [JBoss-user] Log4j & JBoss - HowTo? > I'm running JBoss 2.2.1 & Jetty 3.1 RC4. > > Right now we use our own object (called ServerLog), which implements > log4j, to

Re: [JBoss-user] Dynamic classloading

2001-06-20 Thread Scott M Stark
Yes. What your doing is not dynamic class loading ala RMI annotated codebases. Your using the WebServer as the application class loader. I fixed a problem with the RMI dynamic class loading as well as a problem where class identity was not associated with the server side jar from which the class w

Re: [JBoss-user] jboss-jetty problem

2001-06-20 Thread Scott M Stark
There has not been any change to the service life-cycle management since the last change. The only mbeans that are managed as JBoss services are those that are explicitly added to the jboss.jcml file. I don't see from David's decription that its JBoss that is starting the WebApplicationContext. Ca

Re: [JBoss-user] jboss-jetty problem - stack traces

2001-06-20 Thread Scott M Stark
Neither trace 3 or 4 are correct as they originate from the org.jboss.util.ServiceControl class. Looking at the 2.2 branch I see the change in service life-cycle management I mentioned was not incorporated into that release and this is the problem. If there is enough demand a 2.2.3 release could

Re: [JBoss-user] Memory Leak problem

2001-06-21 Thread Scott M Stark
Obtain a thread dump of the vm in this situation to see where the threads are via a Ctrl-\ or SIGQUIT. This gets dumped to stderr so you need to redirect this or have a huge console buffer or logging. - Original Message - From: "Nicolai P Guba" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]>

Re: [JBoss-user] JAAS problem

2001-06-21 Thread Scott M Stark
A standalone war should not be able to see ejbs deployed in a seperate jar so I still don't understand what is deployed where. 1. Show me the contents of your ejb jar file that you place into the deploy directory. 2. Show me the contents of your soap war and tell me how it is deployed. - Ori

Re: [JBoss-user] Memory Leak problem

2001-06-21 Thread Scott M Stark
tdout and > stderr to disk files, but this is a pretty awkward configuration and I > think it would require modifying the "run.sh" file. Is there any other > way to get dump information to go to a file instead of to the usually > non-existent stderr? This would be very

Re: [JBoss-user] Will JBoss work with a NULL Principal?

2001-06-21 Thread Scott M Stark
I believe Weblogic uses a default principal if one has not been passed in. JBoss does not. What is name of the principal returned by Weblogic when you invoke getCallerPrincipal() when there is no authenticated user? We need to add a similar notion that allows one to set a default principal to use

Re: [JBoss-user] search LDAP via federated JNDI

2001-06-22 Thread Scott M Stark
- Original Message - From: <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, June 22, 2001 6:30 AM Subject: [JBoss-user] search LDAP via federated JNDI > I followed the directions in the documentation for federating LDAP into > the JNDI context -- everything appears to have wo

Re: [JBoss-user] search LDAP via federated JNDI

2001-06-22 Thread Scott M Stark
But the stack trace is coming from Client.java:28 which is not inside of the JBoss server. The trace shows that your trying to return an com.sun.jndi.ldap.LdapCtx object through an RMI call and this is failing because a Serializable object is required. Where is the server side problem? - Orig

Re: [JBoss-user] Classpath Order

2001-06-22 Thread Scott M Stark
You can't and that is by design. If the class is in the server's classpath that's the one that has to be used. You have to have control of the server classpath to change the class. - Original Message - From: <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, June 22, 2001 1:01 PM

Re: [JBoss-user] Changes in jboss security integration for 2.4beta

2001-06-22 Thread Scott M Stark
Yes, a little flaw in the automated testing failed to find the problem. I'll do a new release with a fix tonight. - Original Message - From: "François Charoy" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, June 22, 2001 8:35 AM Subject: [JBoss-user] Changes in jboss security in

Re: [JBoss-user] Using remote ejb inside of a webapp w/Jetty

2001-06-22 Thread Scott M Stark
See the naming and web packages in the jbosstest module. Both have examples of servlets accessing EJBs, JMS queues, etc. - Original Message - From: "Jason Dillon" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, June 22, 2001 3:50 PM Subject: [JBoss-user] Using remote ejb inside

Re: [JBoss-user] Exceptions starting and stopping JBoss-2.2.2_Jetty-3.1.RC5

2001-06-23 Thread Scott M Stark
It may not be your build. It could be the tool the user is using to unarchive. If either drops empty directories this problem shows up. - Original Message - From: "Julian Gosnell" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Saturday, June 23, 2001 7:16 AM Subject: Re: [JBoss-user]

Re: [JBoss-user] jboss/db/jbossmq disappearing....

2001-06-23 Thread Scott M Stark
I have found WinZip very unreliable with .tgz files so I quit using it. It often fails to properly unarchive these archives and leaves missing files and directories. I use the Cygwin unix tools now. - Original Message - From: <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Saturday, Ju

Re: [JBoss-user] question

2001-06-23 Thread Scott M Stark
Where ejbs are bound under JNDI is explicitly undefined in the spec so this default treatment is JBoss specific. The spec says: - Original Message - From: "Crothers.Dean" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Saturday, June 23, 2001 2:18 PM Subject: [JBoss-user] ques

Re: [JBoss-user] EJB Security

2001-06-23 Thread Scott M Stark
> From what I've learned of security in EJB, if one EJB calls a method on > another EJB, the Principal of the original call is propagated to the > second one. > > This seems problematic to me. For example, lets say we have an entity bean > called EBean, and a session bean called SBean, and a user

Re: [JBoss-user] Tomcat/Jakarta Struts

2001-06-23 Thread Scott M Stark
There are tests of a JSP page accessing classes from WEB-INF/lib/jars and WEB-INF/classes in the jbosstest module and these work. What is the use case you have that does not work? Your workaround is not valid in my opinion. Many people have struts working correctly using JBoss/Tomcat so one usage

Re: [JBoss-user] tomcat and jboss and JAAS

2001-06-24 Thread Scott M Stark
To use JAAS the web app has to be bundled as a war with a security domain defined in a jboss-web.xml descriptor. See: http://www.jboss.org/documentation/HTML/ch11s83.html - Original Message - From: "Nick Heitz" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Sunday, June 24, 2001 3:37

Re: [JBoss-user] Tomcat/Jakarta Struts

2001-06-24 Thread Scott M Stark
Tomcat only appears to pass the standard WEB-INF/lib and WEB-INF/classes to jasper. Look into why that is on the tomcat side and post a bug report on the contrib/tomcat EmbededTomcatSX and related classes if you find one. - Original Message - From: "Lewis Henderson" <[EMAIL PROTECTED]> T

Re: [JBoss-user] Accessing EJBs from a custom service.

2001-06-24 Thread Scott M Stark
You have to place the ejb interfaces and associated classes into a jar and load it with a URLClassLoader created by your mbean to isolate the mbean's use of the ejb from the deployer so that redeployment works. - Original Message - From: "Victor M." <[EMAIL PROTECTED]> To: <[EMAIL PROTEC

Re: [JBoss-user] user identity to the database question

2001-06-24 Thread Scott M Stark
Not unless you require security so that a user has to be authenticated for access to use the Entity in which case the caller is available via the EJBContext.getCallerPrincipal(). - Original Message - From: "Glenn Harris" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Sunday, June 24,

Re: [JBoss-user] Ant

2001-06-24 Thread Scott M Stark
Look at the jbosstest cvs module ant build scripts. There are examples there. - Original Message - From: "Hunter Hillegas" <[EMAIL PROTECTED]> To: "JBoss 2" <[EMAIL PROTECTED]> Sent: Sunday, June 24, 2001 3:37 PM Subject: [JBoss-user] Ant > I've been using Ant with my JSP+Servlet proje

Re: [JBoss-user] Problem with classloader, servlets, and EARs.

2001-06-24 Thread Scott M Stark
I would say it is a bug in the deployer that the servlet is loaded at all. Why should a servlet in a jar without a deployment descriptor be deployed? - Original Message - From: "Robert Watkins" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Sunday, June 24, 2001 6:39 PM Subject: [JBos

Re: [JBoss-user] Problem with classloader, servlets, and EARs.

2001-06-24 Thread Scott M Stark
says that the war is not valid and should not deploy. - Original Message - From: "Robert Watkins" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Sunday, June 24, 2001 10:06 PM Subject: RE: [JBoss-user] Problem with classloader, servlets, and EARs. > Scott M S

Re: [JBoss-user] Problem with classloader, servlets, and EARs.

2001-06-24 Thread Scott M Stark
> The Servlet spec requires that the class is in the class path. > > Accordingly, in the META-INF/manifest.mf file for myWeb.war, there is an > entry that reads thusly: > Class-Path: myLib.jar > There is nothing in the spec that says war files can specify dependencies using the manifest Class-P

Re: [JBoss-user] Classloader problem in ear

2001-06-25 Thread Scott M Stark
t;[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Sunday, June 24, 2001 11:59 PM Subject: Re: [JBoss-user] Classloader problem in ear > Scott M Stark wrote: > > > This is the expected behavior given the current ear deployer. EJB classes > > are made available to wars

Re: [JBoss-user] Problem with classloader, servlets, and EARs.

2001-06-25 Thread Scott M Stark
> Scott M Stark wrote: > > > > J2EE.8.1.1.2 Dependencies > > Wrong spec. See Servlet 2.3 (PFD 2), SRV.9.7.1 (Dependencies on Extensions). > It goes for a few paragraphs, but the relevant one is: > > It is recommended that Application developers provide a META-

Re: [JBoss-user] Stuck with Authentication.

2001-06-25 Thread Scott M Stark
Don't set a security-domain. Setting this requires secured access. > Then I activated container security. ( > java:/jaas/webesa > in > standartjboss.xml ) > ___ JBoss-user mailing list [EMAIL PROTECTED] http://lists.sourceforge.net/lists/listinfo/j

Re: [JBoss-user] datasource jndi mapping

2001-06-25 Thread Scott M Stark
You need an indirection layer similar to that which exists for J2EE components. You would have to create an indirection manager mbean that bound an object factory under the static namespace prefix you wanted to use with the configurations like the DatabaseLoginModule(e.g., admin/static) and then y

Re: [JBoss-user] can't find web.xml DTD today

2001-06-25 Thread Scott M Stark
That is not the correct public id as per the 2.2 servlet spec. Maybe that was an older revision naming convention and the url has been removed so it no longer is found. Using the correct public id will result in local resolution of the dtd. 13.1.1 Deployment Descriptor DOCTYPE All valid web a

Re: [JBoss-user] datasource jndi mapping

2001-06-25 Thread Scott M Stark
JBoss-user] datasource jndi mapping > Would it be ok to use jboss.xml ass the mapping file? > > > -Original Message- > From: Scott M Stark [mailto:[EMAIL PROTECTED]] > Sent: Monday, June 25, 2001 4:55 PM > To: [EMAIL PROTECTED] > Subject: Re: [JBoss-user] datasourc

Re: [JBoss-user] Duplicates in console log

2001-06-26 Thread Scott M Stark
Try removing the ConsoleLogging mbean as you probably did not comment it out correctly. jboss.conf is not an xml file. - Original Message - From: "Bill Kaufman" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, June 26, 2001 12:47 PM Subject: [JBoss-user] Duplicates in console l

Re: [JBoss-user] NullPointerException

2001-06-26 Thread Scott M Stark
This has been fixed in the 2.4 branch of cvs. You need to use the Branch_2_4 cvs tag to access the correct source. - Original Message - From: "David Green" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, June 26, 2001 5:08 PM Subject: [JBoss-user] NullPointerException > > M

Re: [JBoss-user] Authentication Problem...

2001-06-26 Thread Scott M Stark
You still have to specify a security-domain in jboss-web.xml. See the JAAS tutorial: http://www.jboss.org/documentation/HTML/ch11s83.html - Original Message - From: "David Green" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, June 26, 2001 7:42 PM Subject: [JBoss-user] Authen

Re: [JBoss-user] jndi performs unexpdectedly

2001-06-26 Thread Scott M Stark
Details are required. - Original Message - From: "Ferguson, Doug" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, June 26, 2001 7:02 PM Subject: [JBoss-user] jndi performs unexpdectedly > Hi, > > I have a jndiName segmentation/list and when I do a lookup on segmentation a >

Re: [JBoss-user] (no subject)

2001-06-27 Thread Scott M Stark
The java: namespace is local to the JBoss server. You cannot lookup items bound under it outside of the server VM. - Original Message - From: "Gabi Perets" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, June 26, 2001 11:26 PM Subject: [JBoss-user] (no subject) > Gang, > > I

Re: [JBoss-user] jndi performs unexpdectedly

2001-06-27 Thread Scott M Stark
>happens when I lookup merchandising. This does not happend when >I type in something random, only when it matches the prefix of a real > jndi name > > cheers, > d. > > -Original Message- > From: Scott M Stark [mailto:[EMAIL PROTECTED]] > Sent: Tuesd

Re: [JBoss-user] Authentication Problem...

2001-06-27 Thread Scott M Stark
I don't understand what you mean by propertyAdmin being changed to 'guest'. You have to change the web-app/seccurity-constraint/auth-constraint/role-name to guest to allow green/null and green/green. To allow only green/green the role-name would have to be user. Both scenarios work for me. Here is

Re: [JBoss-user] ClassNotFoundException

2001-06-27 Thread Scott M Stark
Is PersonSearchAction on the vm classpath or in the JBoss lib/ext directory? The class loader that is trying to load the home interface: > [EmbeddedTomcat] at javax.management.loading.MLet.findClass(MLet.java:800) is the JBoss server class loader. - Original Message - From: "Jim Downin

Re: [JBoss-user] JAAS problem

2001-06-27 Thread Scott M Stark
I didn't see anything obviously wrong with the ear structure you described so I've added an example of calling a secured EJB through a secured rpcrouter using the Apache 2.2 soap version to the jbosstest module. I see the authenticated web principal passed to the secured EJB. Here is sample output

Re: [JBoss-user] help with security

2001-06-27 Thread Scott M Stark
See the JAAS tutorial: http://www.jboss.org/documentation/HTML/ch11s83.html - Original Message - From: "Mike Thompson" <[EMAIL PROTECTED]> To: "jboss" <[EMAIL PROTECTED]> Sent: Wednesday, June 27, 2001 5:30 AM Subject: [JBoss-user] help with security Now, word on the street is that the

Re: [JBoss-user] Authentication Problem...

2001-06-27 Thread Scott M Stark
Ok, so your web.xml looked the same as the one I showed which works and yours doesn't? - Original Message - From: "David Green" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, June 27, 2001 6:34 AM Subject: Re: [JBoss-user] Authentication Problem... > > I posted my web.xm

Re: [JBoss-user] SwiftMQ and JBOSS

2001-06-27 Thread Scott M Stark
Plugging in a module still requires the module to have the correct capabilities. You can't plug a three prong electrical cord into a two slot outlet. - Original Message - From: "Rajkumar Seth" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, June 27, 2001 6:38 AM Subject: RE:

Re: [JBoss-user] Authentication Problem...

2001-06-27 Thread Scott M Stark
It works fine for me using the Rel_2_4_0_6 beta along with the latest tomcat-service.jar from cvs. The fix in cvs has not been released in the binary bnudle yet so are you building the bundle from cvs? Browsing http://localhost:8080/propertyeditor/index.jsp and specifying green/green produces: W

Re: [JBoss-user] help with security

2001-06-27 Thread Scott M Stark
Tomcat creates the contexts defined in the server.xml file on its own without going through the JBoss war deployer and so the jboss-web.xml is not parsed and integrated security is not enabled. I don't have plans to try to support the server.xml defined contexts at this time. - Original Messa

Re: [JBoss-user] Authentication Problem...

2001-06-27 Thread Scott M Stark
Your mixing defaults. The "other" entry is the default JAAS login config entry. There is no default security-domain setting and the security-domain setting does not have to point to a security manager implementation that has anything to do with JAAS. - Original Message - From: "David Gre

<    1   2   3   4   5   6   7   8   9   10   >