Glassfish @Runas exception

[Josip Juric]

Hi,

I'm getting an exception trying to run my code with @runAs. I"ve got a remote client which calls RunAsSecurityBeanImpl bean. In RunAsSecurityBeanImpl bean i've injected PrintRoleBean with @EJB just to see which princple is used. My glassfish contains the roles needed which is manager.I've googled the exception but I haven't found an answer to why an exception is raised. Running my remote client I get the following exception:

EVERE: SECEJB9000: Exception while running pre-invoke
java.lang.NullPointerException
	at java.util.Arrays$ArrayList.<init>(Arrays.java:3357)
	at java.util.Arrays.asList(Arrays.java:3343)
	at com.sun.enterprise.security.auth.realm.file.FileRealm.getGroupNames(FileRealm.java:291)
	at com.sun.enterprise.security.auth.login.LoginContextDriver.loginPrincipal(LoginContextDriver.java:294)
	at org.glassfish.ejb.security.application.EJBSecurityManager$2.run(EJBSecurityManager.java:825)
	at com.sun.enterprise.security.common.AppservAccessController.doPrivileged(AppservAccessController.java:61)
	at org.glassfish.ejb.security.application.EJBSecurityManager.loginForRunAs(EJBSecurityManager.java:823)
	at org.glassfish.ejb.security.application.EJBSecurityManager.preInvoke(EJBSecurityManager.java:791)
	at org.glassfish.ejb.security.application.EjbSecurityComponentInvocationHandler$1.beforePreInvoke(EjbSecurityComponentInvocationHandler.java:84)
	at org.glassfish.api.invocation.InvocationManagerImpl.preInvoke(InvocationManagerImpl.java:156)
	at com.sun.ejb.containers.StatelessSessionContainer.createStatelessEJB(StatelessSessionContainer.java:481)
	at com.sun.ejb.containers.StatelessSessionContainer.access$000(StatelessSessionContainer.java:95)
	at com.sun.ejb.containers.StatelessSessionContainer$SessionContextFactory.create(StatelessSessionContainer.java:724)
	at com.sun.ejb.containers.util.pool.NonBlockingPool.getObject(NonBlockingPool.java:247)
	at com.sun.ejb.containers.StatelessSessionContainer._getContext(StatelessSessionContainer.java:449)
	at com.sun.ejb.containers.BaseContainer.getContext(BaseContainer.java:2547)
	at com.sun.ejb.containers.BaseContainer.preInvoke(BaseContainer.java:1899)
	at com.sun.ejb.containers.EJBObjectInvocationHandler.invoke(EJBObjectInvocationHandler.java:205)
	at com.sun.ejb.containers.EJBObjectInvocationHandlerDelegate.invoke(EJBObjectInvocationHandlerDelegate.java:79)
	at $Proxy573.printResult(Unknown Source)
	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
	at java.lang.reflect.Method.invoke(Method.java:597)
	at com.sun.corba.ee.impl.presentation.rmi.ReflectiveTie.dispatchToMethod(ReflectiveTie.java:144)
	at com.sun.corba.ee.impl.presentation.rmi.ReflectiveTie._invoke(ReflectiveTie.java:174)
	at com.sun.corba.ee.impl.protocol.CorbaServerRequestDispatcherImpl.dispatchToServant(CorbaServerRequestDispatcherImpl.java:528)
	at com.sun.corba.ee.impl.protocol.CorbaServerRequestDispatcherImpl.dispatch(CorbaServerRequestDispatcherImpl.java:199)
	at com.sun.corba.ee.impl.protocol.CorbaMessageMediatorImpl.handleRequestRequest(CorbaMessageMediatorImpl.java:1624)
	at com.sun.corba.ee.impl.protocol.CorbaMessageMediatorImpl.handleRequest(CorbaMessageMediatorImpl.java:1486)
	at com.sun.corba.ee.impl.protocol.CorbaMessageMediatorImpl.handleInput(CorbaMessageMediatorImpl.java:990)
	at com.sun.corba.ee.impl.protocol.giopmsgheaders.RequestMessage_1_2.callback(RequestMessage_1_2.java:214)
	at com.sun.corba.ee.impl.protocol.CorbaMessageMediatorImpl.handleRequest(CorbaMessageMediatorImpl.java:742)
	at com.sun.corba.ee.impl.protocol.CorbaMessageMediatorImpl.dispatch(CorbaMessageMediatorImpl.java:539)
	at com.sun.corba.ee.impl.protocol.CorbaMessageMediatorImpl.doWork(CorbaMessageMediatorImpl.java:2324)
	at com.sun.corba.ee.impl.orbutil.threadpool.ThreadPoolImpl$WorkerThread.performWork(ThreadPoolImpl.java:497)
	at com.sun.corba.ee.impl.orbutil.threadpool.ThreadPoolImpl$WorkerThread.run(ThreadPoolImpl.java:540)

SEVERE: EJB5070: Exception creating stateless session bean : [RunAsSecurityBean]
WARNING: EJB5184:A system exception occurred during an invocation on EJB RunAsSecurityBean, method: public void com.eigentests.RunAsSecurityBeanImpl.printResult()
WARNING: javax.ejb.EJBException: org.glassfish.api.invocation.InvocationException
	at com.sun.ejb.containers.StatelessSessionContainer._getContext(StatelessSessionContainer.java:454)
	at com.sun.ejb.containers.BaseContainer.getContext(BaseContainer.java:2547)
	at com.sun.ejb.containers.BaseContainer.preInvoke(BaseContainer.java:1899)
	at com.sun.ejb.containers.EJBObjectInvocationHandler.invoke(EJBObjectInvocationHandler.java:205)
	at com.sun.ejb.containers.EJBObjectInvocationHandlerDelegate.invoke(EJBObjectInvocationHandlerDelegate.java:79)
	at $Proxy573.printResult(Unknown Source)
	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
	at java.lang.reflect.Method.invoke(Method.java:597)
	at com.sun.corba.ee.impl.presentation.rmi.ReflectiveTie.dispatchToMethod(ReflectiveTie.java:144)
	at com.sun.corba.ee.impl.presentation.rmi.ReflectiveTie._invoke(ReflectiveTie.java:174)
	at com.sun.corba.ee.impl.protocol.CorbaServerRequestDispatcherImpl.dispatchToServant(CorbaServerRequestDispatcherImpl.java:528)
	at com.sun.corba.ee.impl.protocol.CorbaServerRequestDispatcherImpl.dispatch(CorbaServerRequestDispatcherImpl.java:199)
	at com.sun.corba.ee.impl.protocol.CorbaMessageMediatorImpl.handleRequestRequest(CorbaMessageMediatorImpl.java:1624)
	at com.sun.corba.ee.impl.protocol.CorbaMessageMediatorImpl.handleRequest(CorbaMessageMediatorImpl.java:1486)
	at com.sun.corba.ee.impl.protocol.CorbaMessageMediatorImpl.handleInput(CorbaMessageMediatorImpl.java:990)
	at com.sun.corba.ee.impl.protocol.giopmsgheaders.RequestMessage_1_2.callback(RequestMessage_1_2.java:214)
	at com.sun.corba.ee.impl.protocol.CorbaMessageMediatorImpl.handleRequest(CorbaMessageMediatorImpl.java:742)
	at com.sun.corba.ee.impl.protocol.CorbaMessageMediatorImpl.dispatch(CorbaMessageMediatorImpl.java:539)
	at com.sun.corba.ee.impl.protocol.CorbaMessageMediatorImpl.doWork(CorbaMessageMediatorImpl.java:2324)
	at com.sun.corba.ee.impl.orbutil.threadpool.ThreadPoolImpl$WorkerThread.performWork(ThreadPoolImpl.java:497)
	at com.sun.corba.ee.impl.orbutil.threadpool.ThreadPoolImpl$WorkerThread.run(ThreadPoolImpl.java:540)
Caused by: org.glassfish.api.invocation.InvocationException
	at org.glassfish.api.invocation.InvocationManagerImpl.postInvoke(InvocationManagerImpl.java:190)
	at com.sun.ejb.containers.StatelessSessionContainer.createStatelessEJB(StatelessSessionContainer.java:539)
	at com.sun.ejb.containers.StatelessSessionContainer.access$000(StatelessSessionContainer.java:95)
	at com.sun.ejb.containers.StatelessSessionContainer$SessionContextFactory.create(StatelessSessionContainer.java:724)
	at com.sun.ejb.containers.util.pool.NonBlockingPool.getObject(NonBlockingPool.java:247)
	at com.sun.ejb.containers.StatelessSessionContainer._getContext(StatelessSessionContainer.java:449)
	... 22 more

This is the code for the remote client:

public class RunAsSecurityBeanClient {

    public static void main(String args[]) {

        try {
            Properties prop = new Properties();
            prop.put(Context.SECURITY_PRINCIPAL, "testmanager");
            prop.put(Context.SECURITY_CREDENTIALS, "testmanager123");
            Context initialContext =new InitialContext(prop);
            RunAsSecurityBeanInt bean = (RunAsSecurityBeanInt) initialContext.lookup("java:global/EJBEnterpriseApplication/EJBEnterpriseApplication-ejb/RunAsSecurityBean");
            bean.printResult();
        } catch (NamingException exp) {
            exp.printStackTrace();
        }
    }
}

The remote interface for RunAsSecurityBeanImpl:

@Remote
public interface RunAsSecurityBeanInt {
    
    public void printResult();
}

The implementation RunAsSecurityBeanImpl:
@RolesAllowed({"admin"})
@RunAs("manager")
@Stateless(name="RunAsSecurityBean")
public class RunAsSecurityBeanImpl implements RunAsSecurityBeanInt{

    @Resource
    private EJBContext sessionContext;
    
    @EJB
    private PrintRoleBean bean;
    
    @Override
    public void printResult() {
        System.out.println("Bean called with role: " + sessionContext.getCallerPrincipal().getName());
        System.out.println("Calling bean: ");
        bean.printPrincipleName();
    }
    
}

The injected bean in RunAsSecurityBeanImpl:

@Stateless(name="PrintRoleBean")
public class PrintRoleBean {
    
    @Resource
    private EJBContext ejbContext;
    
    
    public void printPrincipleName() {
        System.out.println("In class: " + this.getClass().getName());
        System.out.println("Called with principle: " + ejbContext.getCallerPrincipal().getName());
    }
}

I've added the roles in glassfish-web.xml:

  <security-role-mapping>
    <role-name>admin</role-name>
    <principal-name>administrator</principal-name>
    <group-name>admin</group-name>
  </security-role-mapping>
  <security-role-mapping>
      <role-name>manager</role-name>
      <principal-name>manager</principal-name>
      <group-name>manager</group-name>
  </security-role-mapping>

[Frits Walraven]

Hi Josip

The error doesn't really ring a bell to me other than that you are using a file realm to store your Principals and Principal Groups and it seems your appserver has a problem reading that file.

Did you try everything without security enabled? Did you try using a Servlet and a login-form?

Why did you add the Principal mapping in the glassfish-web.xml instead of sun-ejb-jar.xml in the META-INF directory of your EJB project?

Regards,
Frits