1 Reply Latest reply on May 12, 2010 2:54 AM by jaikiran

    Security scan on Jboss Admin Console.

      We ran security scan on our jboss server 5.1 and i was trying to secure following link and I am getting below error. Can some one suggest is there a way I can secure this page or redirect the error page to customize error page.

       

      http://localhost:8080/admin-console/a4j/s/3_3_0.GAorg/richfaces/renderkit/html/css/basic_classes

       

       

      HTTP Status 500 -


      type Exception report

      message

      description The server encountered an internal error () that prevented it from fulfilling this request.

      exception

      javax.servlet.ServletException: org.ajax4jsf.resource.ResourceNotFoundException: Resource not registered : org/richfaces/renderkit/html/css/basic_classes
           org.ajax4jsf.resource.InternetResourceService.serviceResource(InternetResourceService.java:154)
           org.ajax4jsf.resource.InternetResourceService.serviceResource(InternetResourceService.java:141)
           org.ajax4jsf.webapp.BaseFilter.doFilter(BaseFilter.java:510)
           org.jboss.seam.web.Ajax4jsfFilter.doFilter(Ajax4jsfFilter.java:56)
           org.jboss.seam.servlet.SeamFilter$FilterChainImpl.doFilter(SeamFilter.java:69)
           org.jboss.seam.web.LoggingFilter.doFilter(LoggingFilter.java:58)
           org.jboss.seam.servlet.SeamFilter$FilterChainImpl.doFilter(SeamFilter.java:69)
           org.jboss.seam.servlet.SeamFilter.doFilter(SeamFilter.java:158)
           org.jboss.on.embedded.LazyStartupFilter.doFilter(LazyStartupFilter.java:87)
           org.jboss.web.tomcat.filters.ReplyHeaderFilter.doFilter(ReplyHeaderFilter.java:96)
      

       

      root cause

      org.ajax4jsf.resource.ResourceNotFoundException: Resource not registered : org/richfaces/renderkit/html/css/basic_classes
           org.ajax4jsf.resource.ResourceBuilderImpl.getResource(ResourceBuilderImpl.java:397)
           org.ajax4jsf.resource.ResourceBuilderImpl.getResourceForKey(ResourceBuilderImpl.java:341)
           org.ajax4jsf.resource.InternetResourceService.serviceResource(InternetResourceService.java:152)
           org.ajax4jsf.resource.InternetResourceService.serviceResource(InternetResourceService.java:141)
           org.ajax4jsf.webapp.BaseFilter.doFilter(BaseFilter.java:510)
           org.jboss.seam.web.Ajax4jsfFilter.doFilter(Ajax4jsfFilter.java:56)
           org.jboss.seam.servlet.SeamFilter$FilterChainImpl.doFilter(SeamFilter.java:69)
           org.jboss.seam.web.LoggingFilter.doFilter(LoggingFilter.java:58)
           org.jboss.seam.servlet.SeamFilter$FilterChainImpl.doFilter(SeamFilter.java:69)
           org.jboss.seam.servlet.SeamFilter.doFilter(SeamFilter.java:158)
           org.jboss.on.embedded.LazyStartupFilter.doFilter(LazyStartupFilter.java:87)
           org.jboss.web.tomcat.filters.ReplyHeaderFilter.doFilter(ReplyHeaderFilter.java:96)
      

       

      note The full stack trace of the root cause is available in the JBoss Web/2.1.3.GA logs.


      JBoss Web/2.1.3.GA

        • 1. Re: Security scan on Jboss Admin Console.
          jaikiran

          Vijay N wrote:

           

          We ran security scan on our jboss server 5.1 and i was trying to secure following link and I am getting below error. Can some one suggest is there a way I can secure this page or redirect the error page to customize error page.

           

          From what I understand, you are asking multiple things in that single question.

           

           

          Can some one suggest is there a way I can secure this page

           

          Just that page? How did you end up with that URL?

           

          or redirect the error page to customize error page.

          So you want a custom error page when an error occurs in admin-console instead of that stacktrace being printed? I would have thought admin-console would have its own error page for such errors. If it isn't there, then maybe it's a good feature request for admin-console. In the meantime, you can configure the custom error pages at global level by following this http://community.jboss.org/message/251773#251773