DatabaseServerLoginModule, strange problem!

[charlie]

hi,

i have a no security session bean, which has a method to invoke a security bean method.
i can see i success login but when i invoke the method
the exception is following :
javax.ejb.EJBException: checkSecurityAssociation; CausedByException is:
Insufficient method permissions, principal=null, method=create, interface=LOCALHOME, requiredRoles=[admin], principalRoles=[]

strange here is 'principal=null',any advice?


thanks
charlie

[charlie]

after two week pain ,i got it!!
1) the caller bean and securtiy bean must in a same
jar.
2) keep the caller bean 's method permisson
unchecked.
hope this helpful to jaas follower

[lost_in_mass]

Hi Charlie

I am trying to get the DatabaseServerLoginMoodule working so far with no success. Can you please send me the required files that needs to be changed to get this working.

Thanks,
LMS

[charlie]

1. at cliet side, you need login in some moudel ,
and a auth.conf.
2. at the server side ,the un-security bean (in a diff
jar) NEED nothing sepcial(the ejbcontext know how to
check wether you are valid which pass when you login
at client side).
3. looks so simple ,but it really bored me for two weeks,
i suggest you read the article which is so helpful.
"Integrate security infrastructures with JBossSX "
which locate in www.javaworld.com
hope above useful to you .

[charlie]

1. at client side, you need login in some moudle ,
and a auth.conf(i use org.jboss.security.ClientLoginModule).
2. at the server side ,the un-security bean (in a diff
jar) NEED nothing sepcial(the ejbcontext know who you
are which passed in when you login at client side).
3. looks so simple ,but it really bored me for two weeks,
i suggest you read the article which is so helpful.
"Integrate security infrastructures with JBossSX "
which locate in www.javaworld.com
hope above pain lessones are useful to you .