1 Reply Latest reply on May 19, 2011 6:52 AM by Erik Úlfhéðinn

    JBoss 5.1.0.GA and org.jboss.security.auth.spi.RFC2617Digest

    jobtg Newbie

      I'am migrating in application from JBoss 4.2.3.GA to JBoss 5.1.0.GA
      I have added a security-jboss-bean.xml to my application ear: (this used to be in the login-config.xml)

      <?xml version="1.0" encoding="UTF-8"?>
      <deployment xmlns="urn:jboss:bean-deployer:2.0">
       <application-policy xmlns="urn:jboss:security-beans:1.0"
       name="newsgateway-web">
       <authentication>
       <login-module code="org.jboss.security.auth.spi.DatabaseServerLoginModule"
       flag="required">
       <module-option name="dsJndiName">java:/DefaultDS</module-option>
       <module-option name="principalsQuery">SELECT passwd FROM USERS WHERE
       username=?</module-option>
       <module-option name="rolesQuery">SELECT userRoles, 'Roles' FROM
       ROLES where username=?</module-option>
      
       <module-option name="hashAlgorithm">MD5</module-option>
       <module-option name="hashEncoding">rfc2617</module-option>
       <module-option name="hashUserPassword">false</module-option>
       <module-option name="hashStorePassword">true</module-option>
       <module-option name="passwordIsA1Hash">true</module-option>
       <module-option name="storeDigestCallback">org.jboss.security.auth.spi.RFC2617Digest
       </module-option>
       </login-module>
       </authentication>
       </application-policy>
      </deployment>
      


      It is deployed well, the log statements show the DatabaseServerLoginModule is loaded well - it caches the added users & roles. And the bean shows up in the jmx-console
      There is a war file in the ear that contains the security-constraint, using the newsgateway-web

      But when I try to login I get the following exception:
      2009-10-15 12:56:59,867 TRACE [org.jboss.security.auth.spi.DatabaseServerLoginModule] (http-localhost%2F127.0.0.1-8080-1) Failed to load DigestCallback
      java.lang.ClassNotFoundException: org.jboss.security.auth.spi.RFC2617Digest
      



      In JBoss 4.2.3.GA the RFC2617Digest class was contained JBossSX.jar but it is moved to jbosssx-server.jar and still in the classpath (at least that shows the boot.log

      What am I doing wrong?