[prev in list] [next in list] [prev in thread] [next in thread] 

List:       jboss-user
Subject:    Re: [JBoss-user] REPOST:  JBossNet can't work w/ secured EJBs ???
From:       Fred Hartman <fred.hartman () webmethods ! com>
Date:       2003-10-31 21:11:31
[Download RAW message or body]

I haven't used JBossNet, but from your exception it looks to me that 
Auth info isn't getting sent by your client.

I would assume you are talking HTTP to JBoss, which means the HTTP login 
would setup the JAAS context. If there is no auth passed, then no principle.

1. Most clients (.NET, GLUE) have a specific flag or property to set 
which gets them to send the HTTP auth info.

2. Use a HTTP Snooper to see what HTTP headers are really getting sent.

3. Some Web Service clients just won't send auth info until there is a 
specific auth HTTP error state returned. The HTTP trace will tell you 
exactly what HTTP states are being returned before the EJBException is 
thrown.

HTH,
Fred

Bates, Alex wrote:

> I am having a strange problem trying to expose secured EJBs as web
> services
> in JbossNet (using Jboss 3.2.1).  Everything deploys fine.  But when I
> call
> one of the web service methods, I get this exception (intermittently):
> 
> javax.ejb.EJBException: checkSecurityAssociation; CausedByException is:
> Authentication exception, principal=null 
> 
> 
> Is anyone else on the planet trying to expose secured EJBs as web
> services?
> (or EJBs that must use secured EJBs)?  Or is this too cutting edge?
> 
> 
> *I thought the JSR Web Services for J2EE said it was excluding security,
> so
> don't know why JBossNet is trying to enforce security in the web service
> layer (no way for web service client to establish security context!)
> 
> -Alex
> 
> 
> -------------------------------------------------------
> This SF.net email is sponsored by: SF.net Giveback Program.
> Does SourceForge.net help you be more productive?  Does it
> help you create better code?   SHARE THE LOVE, and help us help
> YOU!  Click Here: http://sourceforge.net/donate/
> _______________________________________________
> JBoss-user mailing list
> JBoss-user@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/jboss-user
> 



-------------------------------------------------------
This SF.net email is sponsored by: SF.net Giveback Program.
Does SourceForge.net help you be more productive?  Does it
help you create better code?   SHARE THE LOVE, and help us help
YOU!  Click Here: http://sourceforge.net/donate/
_______________________________________________
JBoss-user mailing list
JBoss-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/jboss-user
[prev in list] [next in list] [prev in thread] [next in thread]