Re: OSUser ejb impl

"Steven Loftis" <[email protected]> Tue, 23 Dec 2003 02:03:04 +0000
Newsgroups gmane.comp.java.open-symphony.devel
Message-ID <[email protected]>
The security hook as provided by the older OSUser 1.1 ejb implemention 
didn't work with JBoss 3.x, I asked about this and Pat had given up on it 
since it wasn't working.  The problem is that JBoss insists on 
authenticating both the web and ejb layers seperately according to whatever 
security modules have been associated with the security domains of these 
layers.  The ejb layer security interceptor will try to authenticate the 
principal associated with a web layer request.  If the web layer is trying 
to make an ejb call just to authenticate itself, as is attempted in the 
OSUser JBoss security module (invoked itself by the web layer's security 
interceptor), there won't yet be a principal associated with the request to 
make the ejb call.  This results in the ejb security interceptor thinking 
that a null principal is trying to call it, and JBoss exceptions.


>From: Hani Suleiman <[email protected]>
>Reply-To: [email protected]
>To: [email protected]
>Subject: Re: [Opensymphony-developers] OSUser ejb impl
>Date: Mon, 22 Dec 2003 20:05:37 -0500
>
>This is done, it (the example app, with ejb providers) now deploys 
>correctly in orion and jboss, and should work in weblogic. I'll verify this 
>tomorrow. I still haven't checked that the security hooks correctly talk to 
>the appserver, since I'm not entirely sure how it's done in jboss or 
>weblogic.
>
>On Dec 22, 2003, at 12:58 AM, J. Matthew Pryor wrote:
>
>>Well I am all in favor since I am not using it yet and would love to start
>>from a more maintainable base
>>
>>Matthew
>>
>>>-----Original Message-----
>>>From: [email protected]
>>>[mailto:[email protected]]On Behalf Of
>>>Hani Suleiman
>>>Sent: Saturday, December 20, 2003 6:53 AM
>>>To: [email protected]
>>>Subject: [Opensymphony-developers] OSUser ejb impl
>>>
>>>
>>>Would anyone object terribly if I refactor the EJB provider for osuser?
>>>It was written with ejb 1.1 in mind so is awkward and doesn't use any
>>>useful stuff like OR (and has a completely redundant membership entity).
>>>The drawback of doing this is that the schema will be changed so anyone
>>>using it currently will need to migrate their db's.
>>>
>>>
>>>
>>>-------------------------------------------------------
>>>This SF.net email is sponsored by: IBM Linux Tutorials.
>>>Become an expert in LINUX or just sharpen your skills.  Sign up for IBM's
>>>Free Linux Tutorials.  Learn everything from the bash shell to sys admin.
>>>Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click
>>>_______________________________________________
>>>Opensymphony-developers mailing list
>>>[email protected]
>>>https://lists.sourceforge.net/lists/listinfo/opensymphony-developers
>>
>>
>>
>>-------------------------------------------------------
>>This SF.net email is sponsored by: IBM Linux Tutorials.
>>Become an expert in LINUX or just sharpen your skills.  Sign up for IBM's
>>Free Linux Tutorials.  Learn everything from the bash shell to sys admin.
>>Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click
>>_______________________________________________
>>Opensymphony-developers mailing list
>>[email protected]
>>https://lists.sourceforge.net/lists/listinfo/opensymphony-developers
>>
>
>
>
>-------------------------------------------------------
>This SF.net email is sponsored by: IBM Linux Tutorials.
>Become an expert in LINUX or just sharpen your skills.  Sign up for IBM's
>Free Linux Tutorials.  Learn everything from the bash shell to sys admin.
>Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click
>_______________________________________________
>Opensymphony-developers mailing list
>[email protected]
>https://lists.sourceforge.net/lists/listinfo/opensymphony-developers

_________________________________________________________________
Find a cheaper internet access deal - choose one to suit you. 
http://www.msn.co.uk/internetaccess



-------------------------------------------------------
This SF.net email is sponsored by: IBM Linux Tutorials.
Become an expert in LINUX or just sharpen your skills.  Sign up for IBM's
Free Linux Tutorials.  Learn everything from the bash shell to sys admin.
Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click