aspose file tools*
The moose likes JBoss/WildFly and the fly likes How to servlet invoked secured EJB in JBOSS Big Moose Saloon
  Search | Java FAQ | Recent Topics | Flagged Topics | Hot Topics | Zero Replies
Register / Login


Win a copy of Soft Skills this week in the Jobs Discussion forum!
JavaRanch » Java Forums » Products » JBoss/WildFly
Reply locked New topic
Author

How to servlet invoked secured EJB in JBOSS

Rashmi Umre
Greenhorn

Joined: Jul 20, 2006
Posts: 17
I have Session EJBs and makes secure and provide the permission to each method. I am using UsersRoleLoginModule which jboss uses default. I included security domain in jboss.xml file.

<security-domain>java:/jaas/other</security-domain>



I am using standalone client which calls this ejb by passing username and password. For that I have done some changes in code with respect to JBOSS. Previously it was login in the Websphere. Below is the code for JBOSS´┐Ż



String securityDomain = "other";

//Customize the callback handler to set username and password for login.

CallbackHandler callbackHandler = new CustomCallbackHandler(username, password);



//Lookup the security domain and retrieve the LoginContect reference

LoginContext lc = new LoginContext( securityDomain, callbackHandler );

//Login to domain.

lc.login();



I checked my client it is working fine with this code and able to authenticate and Authorize my process.



After I made EJB secure in JBOSS then my web client is not able to communicate with EJB. I am trying to authenticate and authorize from WEB so the servlet is not able to invoke my secure EJB. I am getting below exception.
java.rmi.AccessException: SecurityException; nested exception is:
javax.security.auth.login.FailedLoginException: Password Incorrect/Password Required
at org.jboss.ejb.plugins.LogInterceptor.handleException(LogInterceptor.java:370)


I would be grateful for any suggestions.
Mark Spritzler
ranger
Sheriff

Joined: Feb 05, 2001
Posts: 17260
    
    6

Please refrain from duplicate posting. You can always delete your own threads by clicking in the Edit button, then check the Delete checkbox.

I am closing this duplicate.

Mark


Perfect World Programming, LLC - Two Laptop Bag - Tube Organizer
How to Ask Questions the Smart Way FAQ
 
I agree. Here's the link: http://aspose.com/file-tools
 
subject: How to servlet invoked secured EJB in JBOSS