1 Reply Latest reply on Jan 14, 2004 11:27 AM by lnorthrop

    java.lang.SecurityException: Authentication exception, princ

    anbenham

      Hi,

      I am using JAAS for security under JBoss 3.2.3.
      The login works fine and I get the right results calling request.getUserPrincipal or request.isUserInRole().

      But when I try to create a secure SessionBean using the create Methode of the home Interface, i get the following Exception

      java.lang.SecurityException: Authentication exception, principal=admin
      
      java.lang.SecurityException: Authentication exception, principal=abh
       at org.jboss.ejb.plugins.SecurityInterceptor.checkSecurityAssociation(SecurityInterceptor.java:164)
       at org.jboss.ejb.plugins.SecurityInterceptor.invokeHome(SecurityInterceptor.java:81)
       at org.jboss.resource.connectionmanager.CachedConnectionInterceptor.invokeHome(CachedConnectionInterceptor.java:214)
       at org.jboss.ejb.plugins.StatefulSessionInstanceInterceptor.invokeHome(StatefulSessionInstanceInterceptor.java:126)
       at org.jboss.ejb.plugins.AbstractTxInterceptor.invokeNext(AbstractTxInterceptor.java:88)
       at org.jboss.ejb.plugins.TxInterceptorCMT.runWithTransactions(TxInterceptorCMT.java:297)
       at org.jboss.ejb.plugins.TxInterceptorCMT.invokeHome(TxInterceptorCMT.java:98)
       at org.jboss.ejb.plugins.LogInterceptor.invokeHome(LogInterceptor.java:120)
       at org.jboss.ejb.plugins.ProxyFactoryFinderInterceptor.invokeHome(ProxyFactoryFinderInterceptor.java:93)
       at org.jboss.ejb.StatefulSessionContainer.internalInvokeHome(StatefulSessionContainer.java:404)
       at org.jboss.ejb.Container.invoke(Container.java:720)
       at org.jboss.ejb.plugins.local.BaseLocalProxyFactory.invokeHome(BaseLocalProxyFactory.java:293)
       at org.jboss.ejb.plugins.local.LocalHomeProxy.invoke(LocalHomeProxy.java:110)
       at $Proxy57.create(Unknown Source)
       at de.dzbw.bere.komm.BereSchnittstelle.<init>(BereSchnittstelle.java:71)
       at de.dzbw.bere.komm.BereSchnittstelle.getSchnittstelle(BereSchnittstelle.java:53)
      ....




      Any Idea?


        • 1. Re: java.lang.SecurityException: Authentication exception, p
          lnorthrop

          Have you added the correct method permissions on the create method for the session's home interface? e.g. in your case something like:

          <method-permission>
          <role-name>admin</role-name>
          <role-name>abh</role-name>

          <ejb-name>Your Session Bean Name</ejb-name>
          <method-name>create</method-name>
          <method-intf>Home</method-intf>

          </method-permission>

          Regards,

          Leanne