Hi all,
I want to use an EJB to login at my application.
Although I have disabled the IIOP Listeners SSL and SSL_MUTUALAUTH I get the following exception:
[#|2009-03-06T10:02:43.339+0100|SEVERE|sun-appserver2.1|javax.enterprise.system.core.security|_ThreadID=13;_ThreadName=httpSSLWorkerThread-8080-0;_RequestID=625f364f-c756-4ef3-9945-5dda92fcd568;|JACC: Unexpected security exception on access decision
java.lang.NullPointerExceptionnull
at java.io.Win32FileSystem.normalize(Win32FileSystem.java:164)null
at java.io.Win32FileSystem.getUserPath(Win32FileSystem.java:296)null
at java.io.Win32FileSystem.resolve(Win32FileSystem.java:314)null
at java.io.File.getCanonicalPath(File.java:559)null
at com.sun.enterprise.security.provider.PolicyFile.canonPath(PolicyFile.java:1860)null
at com.sun.enterprise.security.provider.PolicyFile.canonicalizeCodebase(PolicyFile.java:1826)null
at com.sun.enterprise.security.provider.PolicyFile.access$700(PolicyFile.java:296)null
at com.sun.enterprise.security.provider.PolicyFile$6.run(PolicyFile.java:1277)null
at com.sun.enterprise.security.provider.PolicyFile$6.run(PolicyFile.java:1276)null
at java.security.AccessController.doPrivileged(Native Method)null
at com.sun.enterprise.security.provider.PolicyFile.getPermissions(PolicyFile.java:1274)null
at com.sun.enterprise.security.provider.PolicyFile.getPermissions(PolicyFile.java:1227)null
at com.sun.enterprise.security.provider.BasePolicyWrapper.getPermissions(BasePolicyWrapper.java:174)null
at com.sun.enterprise.security.PermissionCache.checkCache(PermissionCache.java:268)null
at com.sun.enterprise.security.PermissionCache.checkPermission(PermissionCache.java:337)null
at com.sun.enterprise.security.CachedPermissionImpl.checkPermission(CachedPermissionImpl.java:71)null
at com.sun.enterprise.security.application.EJBSecurityManager.authorize(EJBSecurityManager.java:663)null
at com.sun.ejb.containers.BaseContainer.authorize(BaseContainer.java:1549)null
at com.sun.ejb.containers.BaseContainer.preInvoke(BaseContainer.java:1217)null
at com.sun.ejb.containers.EJBObjectInvocationHandler.invoke(EJBObjectInvocationHandler.java:202)null
at com.sun.ejb.containers.EJBObjectInvocationHandlerDelegate.invoke(EJBObjectInvocationHandlerDelegate.java:117)null
at $Proxy55.login(Unknown Source)null
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)null
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)null
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)null
at java.lang.reflect.Method.invoke(Method.java:597)null
at com.sun.corba.ee.impl.presentation.rmi.StubInvocationHandlerImpl.privateInvoke(StubInvocationHandlerImpl.java:233)null
at com.sun.corba.ee.impl.presentation.rmi.StubInvocationHandlerImpl.invoke(StubInvocationHandlerImpl.java:152)null
at com.sun.corba.ee.impl.presentation.rmi.bcel.BCELStubBase.invoke(BCELStubBase.java:225)null
=> The client is not authorized for this invocation:
javax.ejb.AccessLocalException: Client not authorized for this invocation.null at com.sun.ejb.containers.BaseContainer.preInvoke(BaseContainer.java:1218)null
java.rmi.AccessException: CORBA NO_PERMISSION 9998 Maybe; nested exception is: org.omg.CORBA.NO_PERMISSION: vmcid: 0x2000 minor code: 1806 completed: Maybe
at com.sun.corba.ee.impl.javax.rmi.CORBA.Util.mapSystemException(Util.java:277)
at com.sun.corba.ee.impl.javax.rmi.CORBA.Util.wrapException(Util.java:741)
Does anybody have an idea what could be the solution of the problem?
I don't know the internal procedure of the authentication, but the Security Manager is disabled.
[Message sent by forum member 'fenixx' (fenixx)]
http://forums.java.net/jive/thread.jspa?messageID=335471