Hello,

We have been using jboss AS 7 and picketbox 4.0.13 for a while, haven't experienced any issues, but lately we are experiencing issues for some users randomly while others can login successfully. When we restart the server all users can login without any issues.

We use DB for user authentication and authorization, they both are executed successfully for all users and we log the login attempts in db. The problem is not from the application code and the same code used probably for over million logins over the years.

Not sure what is causing the problem, any leads will be of great help. Please look at error message from the logs.

ERROR [org.jboss.as.web.security] (http-/0.0.0.0:80-2) JBAS018214: Error during login/password authenticate: java.lang.IllegalStateException: PBOX000048: Failed to obtain ApplicationPolicy for domain CLIENT_LOGIN_MODULE

  at org.jboss.security.plugins.mapping.JBossMappingManager.getMappingContext(JBossMappingManager.java:71) [picketbox-4.0.13.Final.jar:4.0.13.Final]

  at org.jboss.security.plugins.JBossAuthorizationManager.getCurrentRoles(JBossAuthorizationManager.java:366) [picketbox-4.0.13.Final.jar:4.0.13.Final]

  at org.jboss.security.plugins.JBossAuthorizationManager.getSubjectRoles(JBossAuthorizationManager.java:314) [picketbox-4.0.13.Final.jar:4.0.13.Final]

  at org.jboss.as.web.security.JBossWebRealm.authenticate(JBossWebRealm.java:230) [jboss-as-web-7.1.3.Final.jar:7.1.3.Final]

  at org.apache.catalina.authenticator.FormAuthenticator.authenticate(FormAuthenticator.java:280) [jbossweb-7.0.17.Final.jar:]

  at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:381) [jbossweb-7.0.17.Final.jar:]

  at org.jboss.as.jpa.interceptor.WebNonTxEmCloserValve.invoke(WebNonTxEmCloserValve.java:50) [jboss-as-jpa-7.1.3.Final.jar:7.1.3.Final]

  at org.jboss.as.web.security.SecurityContextAssociationValve.invoke(SecurityContextAssociationValve.java:165) [jboss-as-web-7.1.3.Final.jar:7.1.3.Final]

  at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:155) [jbossweb-7.0.17.Final.jar:]

  at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102) [jbossweb-7.0.17.Final.jar:]

  at org.apache.catalina.authenticator.SingleSignOn.invoke(SingleSignOn.java:397) [jbossweb-7.0.17.Final.jar:]

  at org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:567) [jbossweb-7.0.17.Final.jar:]

  at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109) [jbossweb-7.0.17.Final.jar:]

  at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:372) [jbossweb-7.0.17.Final.jar:]

  at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:877) [jbossweb-7.0.17.Final.jar:]

  at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:679) [jbossweb-7.0.17.Final.jar:]

  at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:931) [jbossweb-7.0.17.Final.jar:]

  at java.lang.Thread.run(Thread.java:744) [rt.jar:1.7.0_51]