jdbcRealm - ClassCastException when trying to log in

[mendret]

hello, i'm currently migrating a webapp from tomcat 4.x to jboss 5.0.0.GA but if i try to login into the webapp i get the following error:

java.lang.ClassCastException: org.apache.catalina.realm.GenericPrincipal cannot be cast to org.jboss.web.tomcat.security.JBossGenericPrincipal
...

i'm using jdbcRealm for the authentication and the context.xml looks like this:

<Context path="/myApp"
 debug="0"
 privileged="true">
 <Realm className="org.apache.catalina.realm.JDBCRealm" debug="99"
 driverName="com.mysql.jdbc.Driver"
 connectionName="jdbc:mysql://localhost:3306/myapp?characterEncoding=utf-8&autoReconnect=true"
 connectionName="test"
 connectionPassword="***"
 userTable="LOGIN" userNameCol="LOGINNAME"
 userCredCol="PASSWORD"
 userRoleTable="ROLES" roleNameCol="PRINCIPAL"
 digest="MD5" />
</Context>

when i login with a wrong name/pw i get to my errorpage so the connection seems to be alright.

has anyone a suggestion what might cause this error?

[wolfgangknauf]

Hi,

you should not use Tomcat methods to handle security but JBoss methods.

To do this:
1) Add a file "WEB-INF\jboss-web.xml" to your web project with this content (a security domain is configured, which is something similar to your realm):

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE jboss-web PUBLIC
 "-//JBoss//DTD Web Application 5.0//EN"
 "http://www.jboss.org/j2ee/dtd/jboss-web_5_0.dtd">

<jboss-web>
 <security-domain>mysecuritydomain</security-domain>
 ...
</jboss-web>

2) Configure a login module for this security domain. As your user data seems to be defined in a database, use a "org.jboss.security.auth.spi.DatabaseServerLoginModule":
http://www.jboss.org/community/docs/DOC-9511

Hope this is enough to get started.

Wolfgang

[mendret]

thanks for the tip, will try that, but shouldn't it be posible to use tomcat security methods as well? as far as i know tomcat is a core component of jboss, or am i wrong there?

[wolfgangknauf]

Hi,

sorry, but the answer to this question is beyond my knowledge ;-).
I just wanted to provide you with a solution that works for me, and the ClassCastException sounds as if those two authentication methods don't work together.

Best regards

Wolfgang

[ericci]

Hello! I have the same problem. Any idea?

Regards