This week's giveaway is in the Android forum.
We're giving away four copies of Android Security Essentials Live Lessons and have Godfrey Nolan on-line!
See this thread for details.
The moose likes JBoss/WildFly and the fly likes How to servlet invoked secured EJB in JBOSS Big Moose Saloon
  Search | Java FAQ | Recent Topics | Flagged Topics | Hot Topics | Zero Replies
Register / Login

Win a copy of Android Security Essentials Live Lessons this week in the Android forum!
JavaRanch » Java Forums » Products » JBoss/WildFly
Reply locked New topic

How to servlet invoked secured EJB in JBOSS

Rashmi Umre

Joined: Jul 20, 2006
Posts: 17
I have Session EJBs and makes secure and provide the permission to each method. I am using UsersRoleLoginModule which jboss uses default. I included security domain in jboss.xml file.


I am using standalone client which calls this ejb by passing username and password. For that I have done some changes in code with respect to JBOSS. Previously it was login in the Websphere. Below is the code for JBOSS´┐Ż

String securityDomain = "other";

//Customize the callback handler to set username and password for login.

CallbackHandler callbackHandler = new CustomCallbackHandler(username, password);

//Lookup the security domain and retrieve the LoginContect reference

LoginContext lc = new LoginContext( securityDomain, callbackHandler );

//Login to domain.


I checked my client it is working fine with this code and able to authenticate and Authorize my process.

After I made EJB secure in JBOSS then my web client is not able to communicate with EJB. I am trying to authenticate and authorize from WEB so the servlet is not able to invoke my secure EJB. I am getting below exception.
java.rmi.AccessException: SecurityException; nested exception is: Password Incorrect/Password Required
at org.jboss.ejb.plugins.LogInterceptor.handleException(

I would be grateful for any suggestions.
Mark Spritzler

Joined: Feb 05, 2001
Posts: 17249

Please refrain from duplicate posting. You can always delete your own threads by clicking in the Edit button, then check the Delete checkbox.

I am closing this duplicate.


Perfect World Programming, LLC - Two Laptop Bag - Tube Organizer
How to Ask Questions the Smart Way FAQ
I agree. Here's the link:
subject: How to servlet invoked secured EJB in JBOSS
Similar Threads
How to servlet invoked secured EJB in JBOSS
Invoking Secure EJBs from Client App
Problems with JAAS in JBoss
EJB Security: Not getting correct name in Principal
JAAS-MBean Authentication