6 Replies Latest reply on Oct 31, 2003 1:10 AM by mozheyko_d

dosn't work ?

mozheyko_d Oct 8, 2003 7:35 AM

My ejb-jar fragment:

<method-permission>

<ejb-name>MyBean</ejb-name>
<method-name>findAll</method-name>

</method-permission>

And if i try to call it without authentication, i see:

17:16:02,999 ERROR [LogInterceptor] EJBException, causedBy:
java.lang.SecurityException: Authentication exception, principal=null
at org.jboss.ejb.plugins.SecurityInterceptor.checkSecurityAssociation(SecurityInterceptor.java:162)
at org.jboss.ejb.plugins.SecurityInterceptor.invokeHome(SecurityInterceptor.java:81)
at org.jboss.ejb.plugins.LogInterceptor.invokeHome(LogInterceptor.java:120)
at org.jboss.ejb.plugins.ProxyFactoryFinderInterceptor.invokeHome(ProxyFactoryFinderInterceptor.java:93)
at org.jboss.ejb.EntityContainer.internalInvokeHome(EntityContainer.java:477)
at org.jboss.ejb.Container.invoke(Container.java:694)
at org.jboss.ejb.plugins.local.BaseLocalProxyFactory.invokeHome(BaseLocalProxyFactory.java:272)
at org.jboss.ejb.plugins.local.LocalHomeProxy.invoke(LocalHomeProxy.java:110)
at $Proxy51.findAll(Unknown Source)
at com.MyServlet.doPost(Unknown Source)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:760)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
at org.mortbay.jetty.servlet.ServletHolder.handle(ServletHolder.java:360)
at org.mortbay.jetty.servlet.WebApplicationHandler.dispatch(WebApplicationHandler.java:294)
at org.mortbay.jetty.servlet.ServletHandler.handle(ServletHandler.java:558)
at org.mortbay.http.HttpContext.handle(HttpContext.java:1714)
at org.mortbay.jetty.servlet.WebApplicationContext.handle(WebApplicationContext.java:507)
at org.mortbay.http.HttpContext.handle(HttpContext.java:1664)
at org.mortbay.http.HttpServer.service(HttpServer.java:863)
at org.jboss.jetty.Jetty.service(Jetty.java:460)
at org.mortbay.http.HttpConnection.service(HttpConnection.java:775)
at org.mortbay.http.HttpConnection.handleNext(HttpConnection.java:939)
at org.mortbay.http.HttpConnection.handle(HttpConnection.java:792)
at org.mortbay.http.SocketListener.handleConnection(SocketListener.java:201)
at org.mortbay.util.ThreadedServer.handle(ThreadedServer.java:289)
at org.mortbay.util.ThreadPool$PoolThread.run(ThreadPool.java:455)

Anybody can help me ?

1. Re: <unchecked/> dosn't work ?

juha Oct 8, 2003 6:22 PM (in response to mozheyko_d)

You still need to be authenticated, just not authorized.

-- Juha
Actions
2. Re: <unchecked/> dosn't work ?

mozheyko_d Oct 9, 2003 3:36 AM (in response to mozheyko_d)

As to me it to make, that users of my servlet did not require authentication ?
Actions
3. Re: <unchecked/> dosn't work ?

juha Oct 9, 2003 5:40 AM (in response to mozheyko_d)

Add "unauthenticatedIdentity" to your login module configuration.

-- Juha
Actions
4. Re: <unchecked/> dosn't work ?

mozheyko_d Oct 14, 2003 9:01 AM (in response to mozheyko_d)

Please, write an example.
I don't found this tag in http://www.jboss.org/j2ee/dtd/security_config.dtd
Actions
5. Re: <unchecked/> dosn't work ?

perre Oct 28, 2003 7:34 AM (in response to mozheyko_d)


<application-policy name = "jbossmq">

<login-module code = "org.jboss.mq.sm.file.DynamicLoginModule"
flag = "required">
<module-option name = "unauthenticatedIdentity">guest</module-option>
<module-option name = "sm.objectname">jboss.mq:service=StateManager</module-option>
</login-module>

</application-policy>

/ Perre
Actions
6. Re: <unchecked/> dosn't work ?

mozheyko_d Oct 31, 2003 1:10 AM (in response to mozheyko_d)

Thank you, very much !
Actions

Go to original post