geronimo-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Vamsavardhana Reddy (JIRA)" <...@geronimo.apache.org>
Subject [jira] Resolved: (GERONIMO-1791) LDAP Security Realm created via Console can fail deployment
Date Tue, 25 Jul 2006 10:53:14 GMT
     [ http://issues.apache.org/jira/browse/GERONIMO-1791?page=all ]

Vamsavardhana Reddy resolved GERONIMO-1791.
-------------------------------------------

    Resolution: Fixed

Verified the issue in AG1.1 .  Issues seems to have been resolved.  Noticed that a fix in
modules\security\src\java\org\apache\geronimo\security\realm\providers\LDAPLoginModule.java
has resolved the issue.

> LDAP Security Realm created via Console can fail deployment
> -----------------------------------------------------------
>
>                 Key: GERONIMO-1791
>                 URL: http://issues.apache.org/jira/browse/GERONIMO-1791
>             Project: Geronimo
>          Issue Type: Bug
>      Security Level: public(Regular issues) 
>          Components: security
>    Affects Versions: 1.0, 1.2, 1.1
>         Environment: Geronimo 1.0.0
>            Reporter: Donald Woods
>            Priority: Minor
>             Fix For: 1.1.1
>
>         Attachments: G1791.patch, Geronimo-1791.patch
>
>
> Creation of an LDAP Security Realm through the Console can fail at runtime, due to a
NullPointerException being thrown by the LDAPLoginModule not checking that the optional connectionProtocl
and authentication attributes have not been supplied, while other attributes are being checked
for null and empty string.
>  655: 17:43:45,328 WARN [TomcatGeronimoRealm] Login exception authenticating username
"system"
> 656: javax.security.auth.login.LoginException: Error filling callback list
> 657:  at org.apache.geronimo.security.jaas.client.ServerLoginProxy.login(ServerLoginProxy.java:78)
> 658:  at org.apache.geronimo.security.jaas.client.JaasLoginCoordinator.performLogin(JaasLoginCoordinator.java:189)
> 659:  at org.apache.geronimo.security.jaas.client.JaasLoginCoordinator.login(JaasLoginCoordinator.java:113)
> 660:  at sun.reflect.GeneratedMethodAccessor218.invoke(Unknown Source)
> 661:  at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java(Compiled
Code))
> 662:  at java.lang.reflect.Method.invoke(Method.java(Compiled Code))
> 663:  at javax.security.auth.login.LoginContext.invoke(LoginContext.java:699)
> 664:  at javax.security.auth.login.LoginContext.access$000(LoginContext.java:151)
> 665:  at javax.security.auth.login.LoginContext$4.run(LoginContext.java:634)
> 666:  at java.security.AccessController.doPrivileged1(Native Method)
> 667:  at java.security.AccessController.doPrivileged(AccessController.java(Compiled Code))
> 668:  at javax.security.auth.login.LoginContext.invokeModule(LoginContext.java:631)
> 669:  at javax.security.auth.login.LoginContext.login(LoginContext.java:557)
> 670:  at org.apache.geronimo.tomcat.realm.TomcatGeronimoRealm.authenticate(TomcatGeronimoRealm.java:332)
> 671:  at org.apache.geronimo.tomcat.realm.TomcatGeronimoRealm.authenticate(TomcatGeronimoRealm.java:282)
> 672:  at org.apache.catalina.authenticator.FormAuthenticator.authenticate(FormAuthenticator.java:256)
> 673:  at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:391)
> 674:  at org.apache.geronimo.tomcat.GeronimoStandardContext$SystemMethodValve.invoke(GeronimoStandardContext.java:273)
> 675:  at org.apache.geronimo.tomcat.valve.GeronimoBeforeAfterValve.invoke(GeronimoBeforeAfterValve.java:31)
> 676:  at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:126)
> 677:  at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:105)
> 678:  at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:107)
> 679:  at org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:526)
> 680:  at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:148)
> 681:  at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:856)
> 682:  at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.processConnection(Http11Protocol.java:744)
> 683:  at org.apache.tomcat.util.net.PoolTcpEndpoint.processSocket(PoolTcpEndpoint.java:527)
> 684:  at org.apache.tomcat.util.net.LeaderFollowerWorkerThread.runIt(LeaderFollowerWorkerThread.java:80)
> 685:  at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:684)
> 686:  at java.lang.Thread.run(Thread.java:570)
> 687: Caused by: javax.security.auth.login.LoginException: LDAP Error
> 688:  at org.apache.geronimo.security.realm.providers.LDAPLoginModule.login(LDAPLoginModule.java:162)
> 689:  at org.apache.geronimo.security.jaas.server.JaasLoginService.performLogin(JaasLoginService.java:236)
> 690:  at org.apache.geronimo.security.jaas.server.JaasLoginService$$FastClassByCGLIB$$95b84fc9.invoke(<generated>)
> 691:  at net.sf.cglib.reflect.FastMethod.invoke(FastMethod.java(Inlined Compiled Code))
> 692:  at org.apache.geronimo.gbean.runtime.FastMethodInvoker.invoke(FastMethodInvoker.java(Compiled
Code))
> 693:  at org.apache.geronimo.gbean.runtime.GBeanOperation.invoke(GBeanOperation.java(Inlined
Compiled Code))
> 694:  at org.apache.geronimo.gbean.runtime.GBeanInstance.invoke(GBeanInstance.java(Compiled
Code))
> 695:  at org.apache.geronimo.gbean.runtime.RawInvoker.invoke(RawInvoker.java(Inlined
Compiled Code))
> 696:  at org.apache.geronimo.kernel.basic.RawOperationInvoker.invoke(RawOperationInvoker.java(Compiled
Code))
> 697:  at org.apache.geronimo.kernel.basic.ProxyMethodInterceptor.intercept(ProxyMethodInterceptor.java(Compiled
Code))
> 698:  at org.apache.geronimo.security.jaas.server.JaasLoginServiceMBean$$EnhancerByCGLIB$$4883447f.performLogin(<gene
> rated>)
> 699:  at org.apache.geronimo.security.jaas.client.ServerLoginProxy.login(ServerLoginProxy.java:74)
> 700:  ... 29 more
> 701: Caused by: java.lang.NullPointerException
> 702:  at java.util.Hashtable.put(Hashtable.java(Compiled Code))
> 703:  at org.apache.geronimo.security.realm.providers.LDAPLoginModule.open(LDAPLoginModule.java:422)
> 704:  at org.apache.geronimo.security.realm.providers.LDAPLoginModule.authenticate(LDAPLoginModule.java:200)
> 705:  at org.apache.geronimo.security.realm.providers.LDAPLoginModule.login(LDAPLoginModule.java:155)
> 706:  ... 40 more
> Thanks to VAMSAVARDHANA Vamsi for finding this problem.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

Mime
View raw message