role problem with DBServerLogin

[jrietema]

I have a problem occurring with the principals roleset while using the DatabaseServerLoginModule. I've deployed a test session bean with security and method-permission configuration and used it with the UserRolesServerLoginModule successfully (users got the correct rolesets and the method-permissions were applied as expected).

Now I switched the whole thing to the DatabaseServerLoginModule. From the log output I patched into the module I can see that it reads the groups/roles correctly from my DB. Yet I can't access the test bean. Here's the server output:

[Default] Role no. 1 is admin
[Default] Role no. 2 is user

(this is output I patched into the LoginModule to check that DB access is okay. It's just an output of roleSets.toString() before the return statement of the getRoleSets method.)

[Test] Insufficient method permissions, principal=jrietema, method=create, requiredRoles=[user]

So what's going on? Obviously getRoleSets is returning the right roles. Why doesn't the container recognise them?

Anyone who can point me to what the problem is (or even better, a solution)?

jrietema

[claude]

Hi Jrietema

Have you solved this authentication problem yet?

I'm having exactly the same problem and I would be very interested in your solution :-))

Claude

[starksm64]

The JavaWorld article has an example that uses the DatabaseServerLoginModule. Get the article code from:

http://www.javaworld.com/javaworld/jw-08-2001/jw-0831-jaas.html

and run the buildDB target to populate the security database and then investigate the second example using
the example2-test0 target. Try changing that example to duplicate your security settings.