Problem with JAAS(WebApp) and EJB3.0 and Jboss 5.1.0.GA

[Gaurav Ag Agarwal]

Hi All,

Please help me solve this problem.I'm trying to make a web application Using JAAS framework. Now the code for the user authentication is

 PasswordCallbackHandler handler = new PasswordCallbackHandler();
LoginContext loginContext = new LoginContext("PassAuth",handler);
         loginContext.login();
 
        Set<Principal> pricipalSet =
        loginContext.getSubject().getPrincipals();
        Set<Principal> pricipalSet =
        loginContext.getSubject().getPrincipals();
 
        Iterator iterator = pricipalSet.iterator();
        System.out.println("Principal = ");
 
        while(iterator.hasNext()) {
         Principal principal = (Principal) iterator.next();
         System.out.println(""+principal.getName());
        }//while()
       
            System.out.println("value of subject is "+loginContext.getSubject());
            Subject.doAs(loginContext.getSubject(), new PrivilegedAction() {
                     public Object run() {
                  System.out.println("in do As PrivilegedAction ................ ");
                  try {
                        Properties properties = new Properties();
                        properties.setProperty(Context.INITIAL_CONTEXT_FACTORY,"org.jnp.interfaces.NamingContextFactory");
                        properties.setProperty(Context.URL_PKG_PREFIXES,"org.jboss.naming.client");
                        properties.setProperty(Context.PROVIDER_URL,"jnp://localhost:1099");
 
                   Context  context = new InitialContext(properties);
                    Object object = context.lookup("java/AttributeBI/remote");
                    System.out.println("Object ============="+object);
                    AttributeBI attributeBI = (AttributeBI) object;
                    Attribute attribute = new Attribute();
                    attribute.setDataType("test");
                                    
                    System.out.println("SecurityAssociation.getSubject :: "+SecurityAssociation.getSubject());
                   
                    attributeBI.createAttribute(attribute);
                   
                  }catch(Exception exception) {
 
                   exception.printStackTrace();
                  }
                  
                  return true;
                 }
             });
 
          
            loginContext.logout();
   

now the the loginmodule is as follows

public void initialize(Subject subject,
                           CallbackHandler callbackHandler,
                           Map sharedState,
                           Map options) {
     
        System.out.println("----------Initialization In Login Module----------");
        this.subject=subject;
        this.callbackHandler=callbackHandler;
        this.sharedState=sharedState;
        this.option=options;
        vector_principal = new Vector();
        vector_credentials = new Vector();
 
        SecurityAssociation.setServer();
       
//      SecurityAssociationActions.setServer();
        if(option.containsKey("debug")) {
            debug = "true".equals(option.get("debug"));
        }//if
  }//Initialization
 
   
    public boolean login() throws LoginException {
 
        if( debug ) {
 
          Callback[] callbacks = new Callback[2];
          callbacks[0] = new NameCallback("UserName :");
          callbacks[1] = new PasswordCallback("Password :", true);
          try {
          callbackHandler.handle(callbacks);
          }catch(Exception ex){
              ex.printStackTrace();
          }
         NameCallback nameCallback = (NameCallback) callbacks[0];
         PasswordCallback passwordCallback = (PasswordCallback) callbacks[1];
 
            System.out.println("userName =========="+nameCallback.getName());
            System.out.println("pwd ======================"+passwordCallback.getPassword());
            
         /* set principle as user's username */
           user_principal=new UserPrincipal(nameCallback.getName());
            vector_principal.add(user_principal);
            boolean f = SecurityAssociation.isServer();
            System.out.println("flag ================="+f);        
        }//if
        return true;
    }//login()

and the desired output is like this

17:21:16,803 INFO  [TomcatDeployment] undeploy, ctxPath=/JaasWeb-war
17:21:19,311 INFO  [TomcatDeployment] deploy, ctxPath=/JaasWeb-war
17:22:20,445 INFO  [STDOUT] in do get ......................
17:22:20,466 INFO  [STDOUT] ----------Initialization In Login Module----------
17:22:20,479 INFO  [STDOUT] In handle() .........................
17:22:20,479 INFO  [STDOUT] *UserName :
17:22:20,479 INFO  [STDOUT] *Password :
17:22:20,479 INFO  [STDOUT] userName ==========user
17:22:20,479 INFO  [STDOUT] pwd ======================[C@13db262
17:22:20,480 INFO  [STDOUT] flag =================true
17:22:20,482 INFO  [STDOUT] In handle() .........................
17:22:20,482 INFO  [STDOUT] *User name: 
17:22:20,482 INFO  [STDOUT] *Password: 
17:22:20,483 INFO  [STDOUT] ------------Commit Event----------
17:22:20,488 INFO  [STDOUT] Principal = 
17:22:20,488 INFO  [STDOUT] user
17:22:20,488 INFO  [STDOUT] value of subject is Subject:
        Principal: com.mqa.iam.principle.UserPrincipal@15d1f22
17:22:20,489 INFO  [STDOUT] in do As PrivilegedAction ................ 
17:22:20,495 INFO  [STDOUT] Object =============Proxy to jboss.j2ee:jar=PROTOTYPE.jar,
          name=java/AttributeBI,service=EJB3 implementing [interface com.mqa.iam.bi.AttributeBI]
17:22:20,496 INFO  [STDOUT] SecurityAssociation.getSubject :: Subject:
        Principal: com.mqa.iam.principle.UserPrincipal@15d1f22
17:22:20,525 ERROR [STDERR] javax.ejb.EJBAccessException: Invalid User
17:22:20,526 ERROR [STDERR]         at org.jboss.ejb3.security.
                    Ejb3AuthenticationInterceptorv2.invoke(Ejb3AuthenticationIntercepto

Please tell where i m making mistake so that its not able to authorize although its getting authenticated.And the same subject is still not able to get it

[Jaikiran Pai]

Just answered it here