Jaas, DatabaseServerLoginModule, Client, auth.conf

[Chris Kie]

Hi there

I'm using Jboss5.1 with Postgre DB my database works fine with jboss
and i'm prgramming a standaloneclient.

my problem is that i can't use the DatabaseServerLoginModule in my auth.conf

stpSecurity
		{
		org.jboss.security.ClientLoginModule required;
		org.jboss.security.auth.spi.DatabaseServerLoginModule required
		dsJndiName="java:/StpDS"
		principalsQuery="SELECT c_passwort FROM sta_benutzer WHERE c_benutzername=?"
		rolesQuery="SELECT c_rolle, 'Roles' FROM sta_benutzerrolle WHERE person_i_id IN (SELECT person_i_id FROM sta_benutzer WHERE c_benutzername=?)";
		};
 
client-login
{
		org.jboss.security.ClientLoginModule required;
};

when I'm using client-login there is no problem because sofar I know does ClientLoginModule always return true.
but When I'm using stpSecurity i get

javax.security.auth.login.LoginException: java.lang.IllegalStateException: Transaction Manager is null
	at org.jboss.security.auth.spi.DatabaseServerLoginModule.getUsersPassword(DatabaseServerLoginModule.java:158)

clientcode

	String username = "testTester";
	String password = "hallodu";
	SecurityClient client=null;

      try {
		client = SecurityClientFactory.getSecurityClient(JBossSecurityClient.class);
	      AppCallbackHandler acbh = new AppCallbackHandler(username,password.toCharArray()); 
		//client.setSimple(username, password);
		client.setJAAS("stpSecurity", acbh);
//I want My client to get an Exception here[client.login()] if username and password doesn't match!!!!
		client.login();
		Context ctx = new InitialContext();
			Object ref = ctx.lookup("SPServer/BenutzerBean/remote");
			BenutzerBeanRemote bbr = (BenutzerBeanRemote) PortableRemoteObject.narrow(ref, BenutzerBeanRemote.class);
//I get the Exception here  that User is invalid
			bbr.testBenutzeranmeldung();

hope you can help me ...
here is more detailed information

login-config.xml

 //stundenplanSecurity
  <application-policy name="stundenplanSecurity">
		<authentication>
	<!-- 		<login-module code="org.jboss.security.ClientLoginModule"
				flag="required">
			</login-module> -->
			<login-module code="org.jboss.security.auth.spi.DatabaseServerLoginModule"
				flag="required">
				<module-option name="dsJndiName">java:/StpDS</module-option>
				<module-option name="principalsQuery">
					SELECT c_passwort FROM
					sta_benutzer
					WHERE c_benutzername=?
					</module-option>
				<module-option name="rolesQuery">
					SELECT c_rolle, 'Roles' FROM
					sta_benutzerrolle WHERE person_i_id IN
					(SELECT person_i_id FROM
					sta_benutzer WHERE c_benutzername=?)
				</module-option>
			</login-module>
		</authentication>
	</application-policy>

HOPE anyone can help me ;)

[Bhavesh Dak]

Am also facing the same exception with the similar configuration of security as Chris has done

javax.security.auth.login.LoginException: java.lang.IllegalStateException: Transaction Manager is null
	at org.jboss.security.auth.spi.DatabaseServerLoginModule.getUsersPassword(DatabaseServerLoginModule.java:158)
	at org.jboss.security.auth.spi.UsernamePasswordLoginModule.login(UsernamePasswordLoginModule.java:245)
	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
	at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
	at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
	at java.lang.reflect.Method.invoke(Unknown Source)
	at javax.security.auth.login.LoginContext.invoke(Unknown Source)
	at javax.security.auth.login.LoginContext.access$000(Unknown Source)
	at javax.security.auth.login.LoginContext$4.run(Unknown Source)
	at java.security.AccessController.doPrivileged(Native Method)
	at javax.security.auth.login.LoginContext.invokePriv(Unknown Source)
	at javax.security.auth.login.LoginContext.login(Unknown Source)
	at com.sample.ejb.security.TestEJBWithSecurity.main(TestEJBWithSecurity.java:30)

	at javax.security.auth.login.LoginContext.invoke(Unknown Source)
	at javax.security.auth.login.LoginContext.access$000(Unknown Source)
	at javax.security.auth.login.LoginContext$4.run(Unknown Source)
	at java.security.AccessController.doPrivileged(Native Method)
	at javax.security.auth.login.LoginContext.invokePriv(Unknown Source)
	at javax.security.auth.login.LoginContext.login(Unknown Source)
	at com.sample.ejb.security.TestEJBWithSecurity.main(TestEJBWithSecurity.java:30)

Has anybody resolved or came across this exception?

Regards,
Bhavesh