This week's book giveaway is in the JDBC forum.
We're giving away four copies of Make it so: Java DB Connections & Transactions and have Marcho Behler on-line!
See this thread for details.
The moose likes JBoss/WildFly and the fly likes How to servlet invoked secured EJB in JBOSS Big Moose Saloon
  Search | Java FAQ | Recent Topics | Flagged Topics | Hot Topics | Zero Replies
Register / Login

Win a copy of Make it so: Java DB Connections & Transactions this week in the JDBC forum!
JavaRanch » Java Forums » Products » JBoss/WildFly
Reply locked New topic

How to servlet invoked secured EJB in JBOSS

Rashmi Umre

Joined: Jul 20, 2006
Posts: 17
I have Session EJBs and makes secure and provide the permission to each method. I am using UsersRoleLoginModule which jboss uses default. I included security domain in jboss.xml file.


I am using standalone client which calls this ejb by passing username and password. For that I have done some changes in code with respect to JBOSS. Previously it was login in the Websphere. Below is the code for JBOSS´┐Ż

String securityDomain = "other";

//Customize the callback handler to set username and password for login.

CallbackHandler callbackHandler = new CustomCallbackHandler(username, password);

//Lookup the security domain and retrieve the LoginContect reference

LoginContext lc = new LoginContext( securityDomain, callbackHandler );

//Login to domain.


I checked my client it is working fine with this code and able to authenticate and Authorize my process.

After I made EJB secure in JBOSS then my web client is not able to communicate with EJB. I am trying to authenticate and authorize from WEB so the servlet is not able to invoke my secure EJB. I am getting below exception.
java.rmi.AccessException: SecurityException; nested exception is: Password Incorrect/Password Required
at org.jboss.ejb.plugins.LogInterceptor.handleException(

I would be grateful for any suggestions.
Mark Spritzler

Joined: Feb 05, 2001
Posts: 17276

Please refrain from duplicate posting. You can always delete your own threads by clicking in the Edit button, then check the Delete checkbox.

I am closing this duplicate.


Perfect World Programming, LLC - iOS Apps
How to Ask Questions the Smart Way FAQ
I agree. Here's the link:
subject: How to servlet invoked secured EJB in JBOSS
It's not a secret anymore!