8 Replies Latest reply on Jan 7, 2010 10:46 AM by Michał Borowiecki

    IllegalStateException: Authorization Manager is null with jb

    al val Newbie

      Hi,
      Here's my problem :
      when I start JBoss AS 5.1 hosting a (very) simple Web application with basic authentication (as described there : http://www.jboss.org/community/wiki/SecureAWebApplicationInJBoss), an exception is thrown at :

      00:42:04,935 ERROR [CoyoteAdapter] Une exception ou une erreur s'est produite dans le conteneur durant le traitement de la requ�te
      java.lang.IllegalStateException: Authorization Manager is null
       at org.jboss.security.plugins.javaee.WebAuthorizationHelper.hasUserDataPermission(WebAuthorizationHelper.java:185)
       at org.jboss.web.tomcat.security.JBossWebRealm.hasUserDataPermission(JBossWebRealm.java:643)
       at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:461)
       at org.jboss.web.tomcat.security.JaccContextValve.invoke(JaccContextValve.java:92)
       at org.jboss.web.tomcat.security.SecurityContextEstablishmentValve.process(SecurityContextEstablishmentValve.java:126)
       at org.jboss.web.tomcat.security.SecurityContextEstablishmentValve.invoke(SecurityContextEstablishmentValve.java:70)
       at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127)
       at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
       at org.jboss.web.tomcat.service.jca.CachedConnectionValve.invoke(CachedConnectionValve.java:158)
       at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
       at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:330)
       at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:829)
       at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:598)
       at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:447)
       at java.lang.Thread.run(Thread.java:619)
      

      Have been looking for this exception on the web for hours and got nothing...

      Thank very much for any help.
      Dego64

        • 1. Re: IllegalStateException: Authorization Manager is null wit
          Wolfgang Knauf Master

          Hi,

          please provide more details on your configuration (snippets of web.xml, jboss-web.xml, login-config.xml).
          The wiki lacks the most important part: JBoss specific configuration of the security domain through "login-config.xml". I don't have a "perfect" link for this, but google might help. For JBoss 5.x, you can also use a file "xxx-jboss-beans.xml": http://server.dzone.com/articles/security-features-jboss-510.

          Hope this helps

          Wolfgang

          • 2. Re: IllegalStateException: Authorization Manager is null wit
            al val Newbie

            Hi, thanks for your answer.

            Actually the server is starting ok :

            14:08:52,593 INFO [ServerImpl] Starting JBoss (Microcontainer)...
            14:08:52,593 INFO [ServerImpl] Release ID: JBoss [The Oracle] 5.1.0.GA (build: SVNTag=JBoss_5_1_0_GA date=200905221053)
            14:08:52,593 INFO [ServerImpl] Bootstrap URL: null
            14:08:52,593 INFO [ServerImpl] Home Dir: C:\Program Files\jboss\jboss-5.1.0.GA
            14:08:52,593 INFO [ServerImpl] Home URL: file:/C:/Program%20Files/jboss/jboss-5.1.0.GA/
            14:08:52,593 INFO [ServerImpl] Library URL: file:/C:/Program%20Files/jboss/jboss-5.1.0.GA/lib/
            14:08:52,625 INFO [ServerImpl] Patch URL: null
            14:08:52,625 INFO [ServerImpl] Common Base URL: file:/C:/Program%20Files/jboss/jboss-5.1.0.GA/common/
            14:08:52,625 INFO [ServerImpl] Common Library URL: file:/C:/Program%20Files/jboss/jboss-5.1.0.GA/common/lib/
            14:08:52,625 INFO [ServerImpl] Server Name: default
            14:08:52,625 INFO [ServerImpl] Server Base Dir: C:\Program Files\jboss\jboss-5.1.0.GA\server
            14:08:52,625 INFO [ServerImpl] Server Base URL: file:/C:/Program%20Files/jboss/jboss-5.1.0.GA/server/
            14:08:52,625 INFO [ServerImpl] Server Config URL: file:/C:/Program%20Files/jboss/jboss-5.1.0.GA/server/default/conf/
            14:08:52,625 INFO [ServerImpl] Server Home Dir: C:\Program Files\jboss\jboss-5.1.0.GA\server\default
            14:08:52,640 INFO [ServerImpl] Server Home URL: file:/C:/Program%20Files/jboss/jboss-5.1.0.GA/server/default/
            14:08:52,640 INFO [ServerImpl] Server Data Dir: C:\Program Files\jboss\jboss-5.1.0.GA\server\default\data
            14:08:52,640 INFO [ServerImpl] Server Library URL: file:/C:/Program%20Files/jboss/jboss-5.1.0.GA/server/default/lib/
            14:08:52,640 INFO [ServerImpl] Server Log Dir: C:\Program Files\jboss\jboss-5.1.0.GA\server\default\log
            14:08:52,640 INFO [ServerImpl] Server Native Dir: C:\Program Files\jboss\jboss-5.1.0.GA\server\default\tmp\native
            14:08:52,640 INFO [ServerImpl] Server Temp Dir: C:\Program Files\jboss\jboss-5.1.0.GA\server\default\tmp
            14:08:52,640 INFO [ServerImpl] Server Temp Deploy Dir: C:\Program Files\jboss\jboss-5.1.0.GA\server\default\tmp\deploy
            14:08:55,078 INFO [ServerImpl] Starting Microcontainer, bootstrapURL=file:/C:/Program%20Files/jboss/jboss-5.1.0.GA/server/default/conf/bootstrap.xml
            14:08:56,359 INFO [VFSCacheFactory] Initializing VFSCache [org.jboss.virtual.plugins.cache.CombinedVFSCache]
            14:08:56,375 INFO [VFSCacheFactory] Using VFSCache [CombinedVFSCache[real-cache: null]]
            14:08:56,843 INFO [CopyMechanism] VFS temp dir: C:\Program Files\jboss\jboss-5.1.0.GA\server\default\tmp
            14:08:56,953 INFO [ZipEntryContext] VFS force nested jars copy-mode is enabled.
            14:08:58,578 INFO [ServerInfo] Java version: 1.6.0_11,Sun Microsystems Inc.
            14:08:58,578 INFO [ServerInfo] Java Runtime: Java(TM) SE Runtime Environment (build 1.6.0_11-b03)
            14:08:58,578 INFO [ServerInfo] Java VM: Java HotSpot(TM) Client VM 11.0-b16,Sun Microsystems Inc.
            14:08:58,593 INFO [ServerInfo] OS-System: Windows XP 5.1,x86
            14:08:58,609 INFO [ServerInfo] VM arguments: -Dprogram.name=JBossTools JBoss 5.1 Runtime -Xms256m -Xmx512m -XX:MaxPermSize=256m -Dsun.rmi.dgc.client.gcInterval=3600000 -Dsun.rmi.dgc.server.gcInterval=3600000 -Djava.endorsed.dirs=C:/Program Files/jboss/jboss-5.1.0.GA/lib/endorsed -Dfile.encoding=Cp1252
            14:08:58,687 INFO [JMXKernel] Legacy JMX core initialized
            14:09:01,203 INFO [ProfileServiceBootstrap] Loading profile: ProfileKey@104a4b6[domain=default, server=default, name=default]
            14:09:04,265 INFO [WebService] Using RMI server codebase: http://localhost:8083/
            14:09:13,046 INFO [NativeServerConfig] JBoss Web Services - Stack Native Core
            14:09:13,046 INFO [NativeServerConfig] 3.1.2.GA
            14:09:13,968 INFO [AttributeCallbackItem] Owner callback not implemented.
            14:09:16,046 INFO [LogNotificationListener] Adding notification listener for logging mbean "jboss.system:service=Logging,type=Log4jService" to server org.jboss.mx.server.MBeanServerImpl@7ab40c[ defaultDomain='jboss' ]
            14:09:38,546 INFO [Ejb3DependenciesDeployer] Encountered deployment AbstractVFSDeploymentContext@31389825{vfsfile:/C:/Program%20Files/jboss/jboss-5.1.0.GA/server/default/deploy/profileservice-secured.jar/}
            14:09:38,546 INFO [Ejb3DependenciesDeployer] Encountered deployment AbstractVFSDeploymentContext@31389825{vfsfile:/C:/Program%20Files/jboss/jboss-5.1.0.GA/server/default/deploy/profileservice-secured.jar/}
            14:09:38,546 INFO [Ejb3DependenciesDeployer] Encountered deployment AbstractVFSDeploymentContext@31389825{vfsfile:/C:/Program%20Files/jboss/jboss-5.1.0.GA/server/default/deploy/profileservice-secured.jar/}
            14:09:38,546 INFO [Ejb3DependenciesDeployer] Encountered deployment AbstractVFSDeploymentContext@31389825{vfsfile:/C:/Program%20Files/jboss/jboss-5.1.0.GA/server/default/deploy/profileservice-secured.jar/}
            14:09:42,312 INFO [JMXConnectorServerService] JMX Connector server: service:jmx:rmi://localhost/jndi/rmi://localhost:1090/jmxconnector
            14:09:42,531 INFO [MailService] Mail Service bound to java:/Mail
            14:09:46,218 WARN [JBossASSecurityMetadataStore] WARNING! POTENTIAL SECURITY RISK. It has been detected that the MessageSucker component which sucks messages from one node to another has not had its password changed from the installation default. Please see the JBoss Messaging user guide for instructions on how to do this.
            14:09:46,250 WARN [AnnotationCreator] No ClassLoader provided, using TCCL: org.jboss.managed.api.annotation.ManagementComponent
            14:09:46,375 WARN [AnnotationCreator] No ClassLoader provided, using TCCL: org.jboss.managed.api.annotation.ManagementComponent
            14:09:46,453 INFO [TransactionManagerService] JBossTS Transaction Service (JTA version - tag:JBOSSTS_4_6_1_GA) - JBoss Inc.
            14:09:46,453 INFO [TransactionManagerService] Setting up property manager MBean and JMX layer
            14:09:46,937 INFO [TransactionManagerService] Initializing recovery manager
            14:09:47,250 INFO [TransactionManagerService] Recovery manager configured
            14:09:47,265 INFO [TransactionManagerService] Binding TransactionManager JNDI Reference
            14:09:47,296 INFO [TransactionManagerService] Starting transaction recovery manager
            14:09:48,046 INFO [AprLifecycleListener] The Apache Tomcat Native library which allows optimal performance in production environments was not found on the java.library.path: C:\Program Files\Java\jdk1.6.0_11\bin;.;C:\WINDOWS\Sun\Java\bin;C:\WINDOWS\system32;C:\WINDOWS;native
            14:09:48,156 INFO [Http11Protocol] Initialisation de Coyote HTTP/1.1 sur http-localhost%2F127.0.0.1-8080
            14:09:48,171 INFO [AjpProtocol] Initializing Coyote AJP/1.3 on ajp-localhost%2F127.0.0.1-8009
            14:09:48,203 INFO [StandardService] D�marrage du service jboss.web
            14:09:48,203 INFO [StandardEngine] Starting Servlet Engine: JBoss Web/2.1.3.GA
            14:09:48,281 INFO [Catalina] Server startup in 103 ms
            14:09:48,312 INFO [TomcatDeployment] deploy, ctxPath=/web-console
            14:09:50,328 INFO [TomcatDeployment] deploy, ctxPath=/jbossws
            14:09:50,375 INFO [TomcatDeployment] deploy, ctxPath=/invoker
            14:09:50,640 INFO [RARDeployment] Required license terms exist, view vfszip:/C:/Program Files/jboss/jboss-5.1.0.GA/server/default/deploy/jboss-local-jdbc.rar/META-INF/ra.xml
            14:09:50,687 INFO [RARDeployment] Required license terms exist, view vfszip:/C:/Program Files/jboss/jboss-5.1.0.GA/server/default/deploy/jboss-xa-jdbc.rar/META-INF/ra.xml
            14:09:50,718 INFO [RARDeployment] Required license terms exist, view vfszip:/C:/Program Files/jboss/jboss-5.1.0.GA/server/default/deploy/jms-ra.rar/META-INF/ra.xml
            14:09:50,750 INFO [RARDeployment] Required license terms exist, view vfszip:/C:/Program Files/jboss/jboss-5.1.0.GA/server/default/deploy/mail-ra.rar/META-INF/ra.xml
            14:09:50,796 INFO [RARDeployment] Required license terms exist, view vfszip:/C:/Program Files/jboss/jboss-5.1.0.GA/server/default/deploy/quartz-ra.rar/META-INF/ra.xml
            14:09:51,000 INFO [SimpleThreadPool] Job execution threads will use class loader of thread: main
            14:09:51,062 INFO [QuartzScheduler] Quartz Scheduler v.1.5.2 created.
            14:09:51,062 INFO [RAMJobStore] RAMJobStore initialized.
            14:09:51,062 INFO [StdSchedulerFactory] Quartz scheduler 'DefaultQuartzScheduler' initialized from default resource file in Quartz package: 'quartz.properties'
            14:09:51,062 INFO [StdSchedulerFactory] Quartz scheduler version: 1.5.2
            14:09:51,062 INFO [QuartzScheduler] Scheduler DefaultQuartzScheduler_$_NON_CLUSTERED started.
            14:09:52,125 INFO [ConnectionFactoryBindingService] Bound ConnectionManager 'jboss.jca:service=DataSourceBinding,name=DefaultDS' to JNDI name 'java:DefaultDS'
            14:09:53,750 INFO [ServerPeer] JBoss Messaging 1.4.3.GA server [0] started
            14:09:53,921 INFO [ConnectionFactoryJNDIMapper] supportsFailover attribute is true on connection factory: jboss.messaging.connectionfactory:service=ClusteredConnectionFactory but post office is non clustered. So connection factory will *not* support failover
            14:09:53,921 INFO [ConnectionFactoryJNDIMapper] supportsLoadBalancing attribute is true on connection factory: jboss.messaging.connectionfactory:service=ClusteredConnectionFactory but post office is non clustered. So connection factory will *not* support load balancing
            14:09:54,031 INFO [ConnectionFactory] Connector bisocket://localhost:4457 has leasing enabled, lease period 10000 milliseconds
            14:09:54,031 INFO [ConnectionFactory] org.jboss.jms.server.connectionfactory.ConnectionFactory@a9b4a2 started
            14:09:54,031 INFO [ConnectionFactory] Connector bisocket://localhost:4457 has leasing enabled, lease period 10000 milliseconds
            14:09:54,031 INFO [ConnectionFactory] org.jboss.jms.server.connectionfactory.ConnectionFactory@178a1cb started
            14:09:54,046 INFO [QueueService] Queue[/queue/DLQ] started, fullSize=200000, pageSize=2000, downCacheSize=2000
            14:09:54,062 INFO [ConnectionFactory] Connector bisocket://localhost:4457 has leasing enabled, lease period 10000 milliseconds
            14:09:54,062 INFO [ConnectionFactory] org.jboss.jms.server.connectionfactory.ConnectionFactory@3cb5f2 started
            14:09:54,062 INFO [QueueService] Queue[/queue/ExpiryQueue] started, fullSize=200000, pageSize=2000, downCacheSize=2000
            14:09:54,218 INFO [ConnectionFactoryBindingService] Bound ConnectionManager 'jboss.jca:service=ConnectionFactoryBinding,name=JmsXA' to JNDI name 'java:JmsXA'
            14:09:54,875 INFO [JBossASKernel] Created KernelDeployment for: profileservice-secured.jar
            14:09:54,890 INFO [JBossASKernel] installing bean: jboss.j2ee:jar=profileservice-secured.jar,name=SecureProfileService,service=EJB3
            14:09:54,890 INFO [JBossASKernel] with dependencies:
            14:09:54,890 INFO [JBossASKernel] and demands:
            14:09:54,890 INFO [JBossASKernel] jndi:SecureManagementView/remote-org.jboss.deployers.spi.management.ManagementView
            14:09:54,890 INFO [JBossASKernel] jboss.ejb:service=EJBTimerService
            14:09:54,890 INFO [JBossASKernel] and supplies:
            14:09:54,890 INFO [JBossASKernel] Class:org.jboss.profileservice.spi.ProfileService
            14:09:54,890 INFO [JBossASKernel] jndi:SecureProfileService/remote
            14:09:54,890 INFO [JBossASKernel] jndi:SecureProfileService/remote-org.jboss.profileservice.spi.ProfileService
            14:09:54,890 INFO [JBossASKernel] Added bean(jboss.j2ee:jar=profileservice-secured.jar,name=SecureProfileService,service=EJB3) to KernelDeployment of: profileservice-secured.jar
            14:09:54,890 INFO [JBossASKernel] installing bean: jboss.j2ee:jar=profileservice-secured.jar,name=SecureDeploymentManager,service=EJB3
            14:09:54,890 INFO [JBossASKernel] with dependencies:
            14:09:54,890 INFO [JBossASKernel] and demands:
            14:09:54,890 INFO [JBossASKernel] jboss.ejb:service=EJBTimerService
            14:09:54,890 INFO [JBossASKernel] and supplies:
            14:09:54,890 INFO [JBossASKernel] jndi:SecureDeploymentManager/remote-org.jboss.deployers.spi.management.deploy.DeploymentManager
            14:09:54,890 INFO [JBossASKernel] Class:org.jboss.deployers.spi.management.deploy.DeploymentManager
            14:09:54,890 INFO [JBossASKernel] jndi:SecureDeploymentManager/remote
            14:09:54,890 INFO [JBossASKernel] Added bean(jboss.j2ee:jar=profileservice-secured.jar,name=SecureDeploymentManager,service=EJB3) to KernelDeployment of: profileservice-secured.jar
            14:09:54,921 INFO [JBossASKernel] installing bean: jboss.j2ee:jar=profileservice-secured.jar,name=SecureManagementView,service=EJB3
            14:09:54,921 INFO [JBossASKernel] with dependencies:
            14:09:54,921 INFO [JBossASKernel] and demands:
            14:09:54,921 INFO [JBossASKernel] jboss.ejb:service=EJBTimerService
            14:09:54,921 INFO [JBossASKernel] and supplies:
            14:09:54,921 INFO [JBossASKernel] jndi:SecureManagementView/remote-org.jboss.deployers.spi.management.ManagementView
            14:09:54,921 INFO [JBossASKernel] Class:org.jboss.deployers.spi.management.ManagementView
            14:09:54,921 INFO [JBossASKernel] jndi:SecureManagementView/remote
            14:09:54,921 INFO [JBossASKernel] Added bean(jboss.j2ee:jar=profileservice-secured.jar,name=SecureManagementView,service=EJB3) to KernelDeployment of: profileservice-secured.jar
            14:09:54,937 INFO [EJB3EndpointDeployer] Deploy AbstractBeanMetaData@14b106{name=jboss.j2ee:jar=profileservice-secured.jar,name=SecureProfileService,service=EJB3_endpoint bean=org.jboss.ejb3.endpoint.deployers.impl.EndpointImpl properties=[container] constructor=null autowireCandidate=true}
            14:09:54,937 INFO [EJB3EndpointDeployer] Deploy AbstractBeanMetaData@fadbb2{name=jboss.j2ee:jar=profileservice-secured.jar,name=SecureDeploymentManager,service=EJB3_endpoint bean=org.jboss.ejb3.endpoint.deployers.impl.EndpointImpl properties=[container] constructor=null autowireCandidate=true}
            14:09:54,937 INFO [EJB3EndpointDeployer] Deploy AbstractBeanMetaData@13a462c{name=jboss.j2ee:jar=profileservice-secured.jar,name=SecureManagementView,service=EJB3_endpoint bean=org.jboss.ejb3.endpoint.deployers.impl.EndpointImpl properties=[container] constructor=null autowireCandidate=true}
            14:09:55,109 INFO [SessionSpecContainer] Starting jboss.j2ee:jar=profileservice-secured.jar,name=SecureDeploymentManager,service=EJB3
            14:09:55,109 INFO [EJBContainer] STARTED EJB: org.jboss.profileservice.ejb.SecureDeploymentManager ejbName: SecureDeploymentManager
            14:09:55,203 INFO [JndiSessionRegistrarBase] Binding the following Entries in Global JNDI:
            
             SecureDeploymentManager/remote - EJB3.x Default Remote Business Interface
             SecureDeploymentManager/remote-org.jboss.deployers.spi.management.deploy.DeploymentManager - EJB3.x Remote Business Interface
            
            14:09:55,328 INFO [SessionSpecContainer] Starting jboss.j2ee:jar=profileservice-secured.jar,name=SecureManagementView,service=EJB3
            14:09:55,328 INFO [EJBContainer] STARTED EJB: org.jboss.profileservice.ejb.SecureManagementView ejbName: SecureManagementView
            14:09:55,343 INFO [JndiSessionRegistrarBase] Binding the following Entries in Global JNDI:
            
             SecureManagementView/remote - EJB3.x Default Remote Business Interface
             SecureManagementView/remote-org.jboss.deployers.spi.management.ManagementView - EJB3.x Remote Business Interface
            
            14:09:55,406 INFO [SessionSpecContainer] Starting jboss.j2ee:jar=profileservice-secured.jar,name=SecureProfileService,service=EJB3
            14:09:55,421 INFO [EJBContainer] STARTED EJB: org.jboss.profileservice.ejb.SecureProfileServiceBean ejbName: SecureProfileService
            14:09:55,437 INFO [JndiSessionRegistrarBase] Binding the following Entries in Global JNDI:
            
             SecureProfileService/remote - EJB3.x Default Remote Business Interface
             SecureProfileService/remote-org.jboss.profileservice.spi.ProfileService - EJB3.x Remote Business Interface
            
            14:09:55,656 INFO [TomcatDeployment] deploy, ctxPath=/admin-console
            14:09:55,796 INFO [config] Initializing Mojarra (1.2_12-b01-FCS) for context '/admin-console'
            14:09:59,921 INFO [TomcatDeployment] deploy, ctxPath=/
            14:10:00,046 INFO [TomcatDeployment] deploy, ctxPath=/jmx-console
            14:10:00,187 INFO [Http11Protocol] D�marrage de Coyote HTTP/1.1 sur http-localhost%2F127.0.0.1-8080
            14:10:00,218 INFO [AjpProtocol] Starting Coyote AJP/1.3 on ajp-localhost%2F127.0.0.1-8009
            14:10:00,234 INFO [ServerImpl] JBoss (Microcontainer) [5.1.0.GA (build: SVNTag=JBoss_5_1_0_GA date=200905221053)] Started in 1m:7s:578ms
            14:10:05,218 INFO [TomcatDeployment] deploy, ctxPath=/DemoJaasJsf
            14:10:05,296 INFO [config] Initializing Mojarra (1.2_12-b01-FCS) for context '/DemoJaasJsf'


            the following error happens when asking the server for a "secured" page :
            14:13:36,421 ERROR [CoyoteAdapter] Une exception ou une erreur s'est produite dans le conteneur durant le traitement de la requ�te
            java.lang.IllegalStateException: Authorization Manager is null
             at org.jboss.security.plugins.javaee.WebAuthorizationHelper.hasUserDataPermission(WebAuthorizationHelper.java:185)
             at org.jboss.web.tomcat.security.JBossWebRealm.hasUserDataPermission(JBossWebRealm.java:643)
             at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:461)
             at org.jboss.web.tomcat.security.JaccContextValve.invoke(JaccContextValve.java:92)
             at org.jboss.web.tomcat.security.SecurityContextEstablishmentValve.process(SecurityContextEstablishmentValve.java:126)
             at org.jboss.web.tomcat.security.SecurityContextEstablishmentValve.invoke(SecurityContextEstablishmentValve.java:70)
             at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127)
             at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
             at org.jboss.web.tomcat.service.jca.CachedConnectionValve.invoke(CachedConnectionValve.java:158)
             at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
             at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:330)
             at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:829)
             at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:598)
             at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:447)
             at java.lang.Thread.run(Thread.java:619)
            

            here's the web.xml
            <?xml version="1.0"?>
            <web-app version="2.5" xmlns="http://java.sun.com/xml/ns/javaee"
             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
             xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd">
             <description>Facelets StarterKit</description>
             <display-name>DemoJaasJsf</display-name>
             <context-param>
             <param-name>javax.faces.DEFAULT_SUFFIX</param-name>
             <param-value>.xhtml</param-value>
             </context-param>
             <context-param>
             <param-name>facelets.REFRESH_PERIOD</param-name>
             <param-value>2</param-value>
             </context-param>
             <context-param>
             <param-name>facelets.DEVELOPMENT</param-name>
             <param-value>true</param-value>
             </context-param>
             <context-param>
             <param-name>javax.faces.STATE_SAVING_METHOD</param-name>
             <param-value>server</param-value>
             </context-param>
             <context-param>
             <param-name>com.sun.faces.validateXml</param-name>
             <param-value>true</param-value>
             </context-param>
             <context-param>
             <param-name>com.sun.faces.verifyObjects</param-name>
             <param-value>false</param-value>
             </context-param>
             <servlet>
             <servlet-name>Faces Servlet</servlet-name>
             <servlet-class>javax.faces.webapp.FacesServlet</servlet-class>
             <load-on-startup>1</load-on-startup>
             </servlet>
             <servlet-mapping>
             <servlet-name>Faces Servlet</servlet-name>
             <url-pattern>*.jsf</url-pattern>
             </servlet-mapping>
             <security-constraint>
             <display-name>Test d'authentification tomcat</display-name>
             <web-resource-collection>
             <web-resource-name>Page sécurisée</web-resource-name>
             <url-pattern>/admin/*</url-pattern>
             </web-resource-collection>
             <auth-constraint>
             <role-name>manager</role-name>
             </auth-constraint>
             </security-constraint>
             <login-config>
             <auth-method>BASIC</auth-method>
             <realm-name>JaasJsfDemo Authentification</realm-name>
             <form-login-config>
             <form-login-page>/login.jsp</form-login-page>
             <form-error-page>/all.xhtml</form-error-page>
             </form-login-config>
             </login-config>
             <security-role>
             <description>Manager</description>
             <role-name>manager</role-name>
             </security-role>
            </web-app>
            


            and jboss-web.xml
            <?xml version="1.0"?>
            <jboss-web>
             <security-domain>java:jaas/demoJaasJsf</security-domain>
            </jboss-web>
            


            and the corresponding login-config.xml snippet :
            </application-policy>
             <application-policy name="demoJaasJsf">
             <authentication>
             <login-module code="org.jboss.security.auth.spi.UsersRolesLoginModule"
             flag="required">
             <module-option name="usersProperties">props/djj-users.properties</module-option>
             <module-option name="rolesProperties">props/djj-roles.properties</module-option>
             </login-module>
             </authentication>
             </application-policy>


            Thanks again for help

            Dego

            • 3. Re: IllegalStateException: Authorization Manager is null wit
              al val Newbie

              The previous login-cong.xml file is in the conf directory and the 2 referenced users and roles files are in the conf/props directory.

              Thanks again.

              • 4. Re: IllegalStateException: Authorization Manager is null wit
                al val Newbie

                Well, I'm possibly missing some obvious configuration. Or maybe do I use some incompatible jars (JDK 1.6 / JBoss AS 5.1 / facelets 1.1.15) ?

                • 5. Re: IllegalStateException: Authorization Manager is null wit
                  Wolfgang Knauf Master

                  Hi,

                  everything looks ok to me.

                  Did you activate logging of the security layer (see sticky post "FAQ" in this forum, question 4)? It should provide you with more information on whether the login module failed or not.

                  When is the exception thrown? When accessing your web app? After doing a login?

                  One thing I noticed: your xml config files (web.xml, jboss-web.xml) don't specify an encoding, but you use some "special chars" e.g. in the "web-resource-name". I would advice you to specify an encoding, e.g. UTF-8:

                  <?xml version="1.0" encoding="UTF-8"?>
                  

                  Maybe JBoss gets confused while parsing them...

                  Hope this helps

                  Wolfgang


                  • 6. Re: IllegalStateException: Authorization Manager is null wit
                    Anil Saldanha Master

                     

                    <?xml version="1.0"?>
                    <jboss-web>
                     <security-domain>demoJaasJsf</security-domain>
                    </jboss-web>
                    


                    • 7. Re: IllegalStateException: Authorization Manager is null wit
                      Micha&#322; Borowiecki Newbie

                      Removing the java:jaas/ prefix from the security-domain element solved this for us, why is it so?

                      I think this is countrary to the JBoss documentation.

                      Found a similar issue in JIRA but a every old one: https://jira.jboss.org/jira/browse/JBAS-4022

                      • 8. Re: IllegalStateException: Authorization Manager is null wit
                        Micha&#322; Borowiecki Newbie
                        Also I checked that the prefix does work for jmx-console, admin-console and web-console, I am all confused.