Problem with orion-Urgent Please Can any one help us

[JSB]

Hi friends..
we have one application from Java i am trying to access session bean .It is giving the following error ..

com.evermind.server.rmi.OrionRemoteException: guest is not allowed to call this EJB method,
check your security settings (method-permission in ejb-jar.xml and security-role-mapping in
orion-application.xml

Please can any one help us..
Thanks and Regards.
JSB

[Jandler Mayer]

Hello people,
I am receiving the following error when our application which is written in Java and deployed on Oracle Enterprise Manager v9.0.2
com.evermind.server.rmi.OrionRemoteException: guest is not allowed to call this EJB method, check your security settings (method-permission in ejb-jar.xml and security-role-mapping in orion-application.xml).
I was told the error could be in the following files but I have yet to find it
***************
* ejb-jar.xml *
***************
<?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE orion-ejb-jar PUBLIC "-//Evermind//DTD Enterprise JavaBeans 1.1 runtime//EN" "http://xmlns.oracle.com/ias/dtds/orion-ejb-jar.dtd">
<orion-ejb-jar deployment-version="9.0.2.0.0" deployment-time="f3ed54c502">
<enterprise-beans>
<session-deployment name="loto" max-instances="10" location="loto" wrapper="GameDriverHome_StatelessSessionHomeWrapper7" persistence-filename="loto.VLA_default_island_1" />
</enterprise-beans>
<assembly-descriptor>
<security-role-mapping name="admin">
</security-role-mapping>
<default-method-access>
<security-role-mapping name="<default-ejb-caller-role>" impliesAll="true" />
</default-method-access>
</assembly-descriptor>
</orion-ejb-jar>
*************************
* orion-application.xml *
*************************
<?xml version = '1.0'?>
<!DOCTYPE orion-application PUBLIC "-//Evermind//DTD J2EE Application runtime 1.2//EN" "http://xmlns.oracle.com/ias/dtds/orion-application.dtd">
<orion-application deployment-version="9.0.2.0.0" default-data-source="jdbc/OracleDS">
<ejb-module remote="false" path="LotoGameDriver.jar"/>
<persistence path="persistence"/>
<principals path="principals.xml"/>
<jazn provider="XML" location="jazn-data.xml"/>
<log>
<file path="application.log"/>
</log>
<namespace-access>
<read-access>
<namespace-resource root="">
<security-role-mapping name="<jndi-user-role>">
<group name="jazn.com/administrators"/>
</security-role-mapping>
</namespace-resource>
</read-access>
<write-access>
<namespace-resource root="">
<security-role-mapping name="<jndi-user-role>">
<group name="jazn.com/administrators"/>
</security-role-mapping>
</namespace-resource>
</write-access>
</namespace-access>
</orion-application>
******************
* principals.xml *
******************
<?xml version = '1.0'?>
<!DOCTYPE principals PUBLIC "//Evermind - Orion Principals//" "http://xmlns.oracle.com/ias/dtds/principals.dtd">
<principals>
<groups>
<group name="administrators">
<description>administrators</description>
<permission name="administration"/>
</group>
<group name="guests">
<description>guests</description>
</group>
<group name="users">
<description>users</description>
<permission name="rmi:login"/>
</group>
</groups>
<users>
<user username="admin" password="y17433">
<group-membership group="administrators"/>
</user>
</users>
</principals>

[Marilyn de Queiroz]

*************************
* orion-application.xml *
*************************
<snipped>
******************
* principals.xml *
******************
<?xml version = '1.0'?>
<!DOCTYPE principals PUBLIC "//Evermind - Orion Principals//" "http://xmlns.oracle.com/ias/dtds/principals.dtd">
  <principals>
    <groups>
      <group name="administrators">
        <description>administrators</description> 
        <permission name="administration"/>
      </group>
   
      <group name="guests">
        <description>guests</description>
      </group>
    
      <group name="users">
        <description>users</description>
        <permission name="rmi:login"/>
      </group>
    </groups>
    
    <snipped>
  </principals>

I notice that "administrators" has permission "administration" and "users" has permission "rmi:login". However, for "guests" I see no permissions listed. Could this relate to your problem?
[ March 15, 2003: Message edited by: Marilyn de Queiroz ]

[christoph weingarten]

Hi friends..
we have one application from Java i am trying to access session bean .It is giving the following error ..

com.evermind.server.rmi.OrionRemoteException: guest is not allowed to call this EJB method,
check your security settings (method-permission in ejb-jar.xml and security-role-mapping in
orion-application.xml

hi,
it seems, that your context has wrong settings to acces the sessionbean. where do you get your context from?
1. are you trying to connect from one orion-app to another or
2. are your trying to connect from a standalone-client to an orion-app?
in the first case you can just take orions initialcontext.

context = new InitialContext();  

but be sure, that you have the permission to acces the ejb. look into ORIONHOME/conf/principals.xml and into ORIONHOME/application-deployment/MYAPP/principals.xml
in the second case you must set the user-settings in your clients code. i never wrote such a code, but this could work:

 
Hashtable env = new Hashtable();
env.put(Context.INITIAL_CONTEXT_FACTORY, "com.evermind.server.rmi.RMIInitialContextFactory");
env.put(Context.SECURITY_PRINCIPAL, "admin");
env.put(Context.SECURITY_CREDENTIALS, "welcome");
env.put(Context.PROVIDER_URL, "ormi://localhost/test");
context = new InitialContext(env); 

in both cases you have to enable the user in your ORION-HOME/principals.xml.
set the property deactivated="false" for the user.
hope this helps
christoph

[Jandler Mayer]

I notice that "administrators" has permission "administration" and "users" has permission "rmi:login". However, for "guests" I see no permissions listed. Could this relate to your problem?

Those lines are correct. I copied them directly from the orion server documents.

[Ramneek Handa]

I reached to this thread through google search.
Well I am also facing same problem. my bean is getting accessed as guest.
Even though I am calling bean with this piece of code.

           Hashtable env = new Hashtable();
            env.put( Context.INITIAL_CONTEXT_FACTORY,
                "com.evermind.server.rmi.RMIInitialContextFactory" );
            env.put( Context.SECURITY_PRINCIPAL, callUser );
            env.put( Context.SECURITY_CREDENTIALS, callPassword);
            env.put( Context.PROVIDER_URL, "ormi://localhost/myApp" );
            InitialContext ctx = new InitialContext( env );
 

but still i m getting user as guest.