1 Reply Latest reply on Jun 29, 2006 6:03 AM by markus.schaefer

Run-as-identity of MDB assigned to other threads

markus.schaefer Jun 26, 2006 11:12 AM

JBoss Version: 4.0.3 SP1
JDK: 1.4.1_01
OS: WinXP Prof. SP2

I have experienced a very strange behaviour of the JBoss AS with MDB run-as-roles:

I have WebApplication (Struts-based) using stateless session beans in the business layer. I use a custom written JAAS-Login module (both client side and server side).

This seems to work perfektly!

Now I have added a MDB to perform background processing.
The MDB uses a run-as role:

<security-identity>
 <run-as>
 <role-name>MDB-Role</role-name>
 </run-as>
 </security-identity>

Now, while the background-processing controled by the MDB is running,
all user request also become associated with the run-as-role of the MDB and the contained security checks fail.
Once the background-processing has terminated, everything works fine again.

Does JBoss AS have a problem with the Thread-Assignment of the run-as-roles?
Or what else could be wrong?

1. Re: Run-as-identity of MDB assigned to other threads

markus.schaefer Jun 29, 2006 6:03 AM (in response to markus.schaefer)
I found a potential solution for that problem in a different context:
http://jira.jboss.com/jira/browse/JBAS-2357
describes a workaround for a IndexOutOfBoundException in Tomcat on high request rates.
(We encountered the problem running stress-tests on our system.)

The solution is to set the following JVM-property when starting JBoss:
-Dorg.jboss.security.SecurityAssociation.ThreadLocal=true

This seems to solve the run-as-role problem described above as well!
Actions