Return-Path: 
 <dev-return-70229-apmail-geronimo-dev-archive=geronimo.apache.org@geronimo.apache.org>
Delivered-To: apmail-geronimo-dev-archive@www.apache.org
Received: (qmail 91789 invoked from network); 5 Dec 2008 12:11:47 -0000
Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.2)
  by minotaur.apache.org with SMTP; 5 Dec 2008 12:11:47 -0000
Received: (qmail 88224 invoked by uid 500); 5 Dec 2008 12:11:56 -0000
Delivered-To: apmail-geronimo-dev-archive@geronimo.apache.org
Received: (qmail 87164 invoked by uid 500); 5 Dec 2008 12:11:54 -0000
Mailing-List: contact dev-help@geronimo.apache.org; run by ezmlm
Precedence: bulk
list-help: <mailto:dev-help@geronimo.apache.org>
list-unsubscribe: <mailto:dev-unsubscribe@geronimo.apache.org>
List-Post: <mailto:dev@geronimo.apache.org>
Reply-To: dev@geronimo.apache.org
List-Id: <dev.geronimo.apache.org>
Delivered-To: mailing list dev@geronimo.apache.org
Received: (qmail 87142 invoked by uid 99); 5 Dec 2008 12:11:54 -0000
Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136)
    by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 05 Dec 2008 04:11:54 -0800
X-ASF-Spam-Status: No, hits=-0.0 required=10.0
	tests=SPF_PASS
X-Spam-Check-By: apache.org
Received-SPF: pass (athena.apache.org: local policy)
Received: from [209.86.89.68] (HELO elasmtp-masked.atl.sa.earthlink.net)
 (209.86.89.68)
    by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 05 Dec 2008 12:10:22 +0000
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
  s=dk20050327; d=earthlink.net;
  b=R0EJ+lfizOH4Xk4VFiOQTbqcaNIiqPh9Sj4KACCxLu9SrU8TBIj1BLRlMff6hO3i;
  h=Received:Message-ID:Date:From:User-Agent:MIME-Version:To:Subject:References:In-Reply-To:Content-Type:Content-Transfer-Encoding:X-ELNK-Trace:X-Originating-IP;
Received: from [24.40.200.241] (helo=tetra.local)
	by elasmtp-masked.atl.sa.earthlink.net with esmtpa (Exim 4.67)
	(envelope-from <joe.bohn@earthlink.net>)
	id 1L8ZWX-0002YL-G1
	for dev@geronimo.apache.org; Fri, 05 Dec 2008 07:11:09 -0500
Message-ID: <49391A5D.3070602@earthlink.net>
Date: Fri, 05 Dec 2008 07:11:09 -0500
From: Joe Bohn <joe.bohn@earthlink.net>
User-Agent: Thunderbird 2.0.0.18 (Macintosh/20081105)
MIME-Version: 1.0
To: dev@geronimo.apache.org
Subject: Re: svn commit: r723242 -
 /geronimo/server/trunk/plugins/monitoring/agent/src/main/plan/plan.xml
References: <20081204083520.CD0FB238889E@eris.apache.org>
 <5eb405c70812042049x33d8095duc9af3678dfa1dc95@mail.gmail.com>
In-Reply-To: <5eb405c70812042049x33d8095duc9af3678dfa1dc95@mail.gmail.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
X-ELNK-Trace: 
 c408501814fc19611aa676d7e74259b7b3291a7d08dfec79af58d41ae5ae2f881074f2825b9a4982350badd9bab72f9c350badd9bab72f9c350badd9bab72f9c
X-Originating-IP: 24.40.200.241
X-Virus-Checked: Checked by ClamAV on apache.org

I've been seeing the same thing trying to run tck tests.

Joe


Jarek Gawor wrote:
> David,
> 
> I'm not sure if anybody else is seeing this but I'm unable to reliably
> start a server after this change. Here's the error I get (from time to
> time when I try to start the server):
> 
> 2008-12-04 22:26:45,686 ERROR [GBeanInstanceState] Error while
> starting; GBean is now in the FAILED state:
> abstractName="org.apache.geronimo.plugins.monitoring/agent/2.2-SNAPSHOT/car?EJBModule
> =org.apache.geronimo.plugins.monitoring/agent/2.2-SNAPSHOT/car,J2EEApplication=null,j2eeType=JACCManager,name=JACCManager"
> javax.security.auth.login.LoginException: No LoginModules configured
> for monitoring-runas-realm
>         at javax.security.auth.login.LoginContext.init(LoginContext.java:256)
>         at javax.security.auth.login.LoginContext.<init>(LoginContext.java:499)
>         at org.apache.geronimo.security.ContextManager.login(ContextManager.java:83)
>         at org.apache.geronimo.security.credentialstore.SimpleCredentialStoreImpl.getSubject(SimpleCredentialStoreImpl.java:100)
>         at org.apache.geronimo.security.jacc.ApplicationPolicyConfigurationManager.<init>(ApplicationPolicyConfigurationManager.java:111)
>         at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
>         at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:39)
>         at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:27)
>         at java.lang.reflect.Constructor.newInstance(Constructor.java:494)
>         at org.apache.xbean.recipe.ReflectionUtil$ConstructorFactory.create(ReflectionUtil.java:882)
>         at org.apache.xbean.recipe.ObjectRecipe.internalCreate(ObjectRecipe.java:272)
>         at org.apache.xbean.recipe.AbstractRecipe.create(AbstractRecipe.java:96)
>         at org.apache.xbean.recipe.AbstractRecipe.create(AbstractRecipe.java:61)
> 
> Jarek
> 
> On Thu, Dec 4, 2008 at 3:35 AM,  <djencks@apache.org> wrote:
>> Author: djencks
>> Date: Thu Dec  4 00:35:20 2008
>> New Revision: 723242
>>
>> URL: http://svn.apache.org/viewvc?rev=723242&view=rev
>> Log:
>> GERONIMO-4415 Use new SimpleCredentialStore isolation features
>>
>> Modified:
>>    geronimo/server/trunk/plugins/monitoring/agent/src/main/plan/plan.xml
>>
>> Modified: geronimo/server/trunk/plugins/monitoring/agent/src/main/plan/plan.xml
>> URL: http://svn.apache.org/viewvc/geronimo/server/trunk/plugins/monitoring/agent/src/main/plan/plan.xml?rev=723242&r1=723241&r2=723242&view=diff
>> ==============================================================================
>> --- geronimo/server/trunk/plugins/monitoring/agent/src/main/plan/plan.xml (original)
>> +++ geronimo/server/trunk/plugins/monitoring/agent/src/main/plan/plan.xml Thu Dec  4 00:35:20 2008
>> @@ -22,6 +22,7 @@
>>         xmlns="http://www.openejb.org/xml/ns/openejb-jar-2.1"
>>         xmlns:sec="http://geronimo.apache.org/xml/ns/security-2.0"
>>         xmlns:sys="http://geronimo.apache.org/xml/ns/deployment-1.2"
>> +        xmlns:nam="http://geronimo.apache.org/xml/ns/naming-1.2"
>>         xmlns:cs="http://geronimo.apache.org/xml/ns/credentialstore-1.0">
>>
>>
>> @@ -37,7 +38,7 @@
>>             <sys:name>monitoring-credential-store</sys:name>
>>         </sec:credential-store-ref>
>>         <sec:default-subject>
>> -            <sec:realm>geronimo-admin</sec:realm>
>> +            <sec:realm>monitoring-runas-realm</sec:realm>
>>             <sec:id>monitoring-user</sec:id>
>>         </sec:default-subject>
>>         <sec:role-mappings>
>> @@ -58,20 +59,43 @@
>>     <sys:gbean name="monitoring-credential-store" class="org.apache.geronimo.security.credentialstore.SimpleCredentialStoreImpl">
>>         <sys:xml-attribute name="credentialStore">
>>             <cs:credential-store>
>> -                <cs:realm name="geronimo-admin">
>> +                <cs:realm name="monitoring-runas-realm">
>>                     <cs:subject>
>>                         <cs:id>monitoring-user</cs:id>
>>                         <cs:credential>
>>                             <cs:type>org.apache.geronimo.security.credentialstore.NameCallbackHandler</cs:type>
>> -                            <cs:value>system</cs:value>
>> -                        </cs:credential>
>> -                        <cs:credential>
>> -                            <cs:type>org.apache.geronimo.security.credentialstore.PasswordCallbackHandler</cs:type>
>> -                            <cs:value>manager</cs:value>
>> +                            <cs:value>admin</cs:value>
>>                         </cs:credential>
>>                     </cs:subject>
>>                 </cs:realm>
>>             </cs:credential-store>
>>         </sys:xml-attribute>
>> +        <sys:reference name="Realms">
>> +            <sys:name>monitoring-runas-realm</sys:name>
>> +        </sys:reference>
>> +        <sys:dependency>
>> +            <nam:name>monitoring-runas-realm</nam:name>
>> +        </sys:dependency>
>>     </sys:gbean>
>> +
>> +    <gbean name="monitoring-runas-realm"
>> +        class="org.apache.geronimo.security.realm.GenericSecurityRealm">
>> +        <attribute name="realmName">monitoring-runas-realm</attribute>
>> +        <attribute name="publish">false</attribute>
>> +        <xml-reference name="LoginModuleConfiguration">
>> +            <lc:login-config xmlns:lc="http://geronimo.apache.org/xml/ns/loginconfig-1.2">
>> +                <lc:login-module control-flag="REQUIRED">
>> +                    <lc:login-domain-name>monitoring-runas-domain</lc:login-domain-name>
>> +                    <lc:login-module-class>org.apache.geronimo.security.credentialstore.RunAsLoginModule</lc:login-module-class>
>> +                    <lc:option name="principalClass">org.apache.geronimo.security.realm.providers.GeronimoGroupPrincipal</lc:option>
>> +                    <lc:option name="principalNames">admin</lc:option>
>> +                </lc:login-module>
>> +            </lc:login-config>
>> +        </xml-reference>
>> +        <!--<reference name="ServerInfo">-->
>> +            <!--<name>ServerInfo</name>-->
>> +        <!--</reference>-->
>> +    </gbean>
>> +
>> +
>>  </openejb-jar>
>>
>>
>>
>