From user-return-14864-apmail-geronimo-user-archive=geronimo.apache.org@geronimo.apache.org Mon May 24 08:55:10 2010
Return-Path: <user-return-14864-apmail-geronimo-user-archive=geronimo.apache.org@geronimo.apache.org>
Delivered-To: apmail-geronimo-user-archive@www.apache.org
Received: (qmail 71048 invoked from network); 24 May 2010 08:55:10 -0000
Received: from unknown (HELO mail.apache.org) (140.211.11.3)
  by 140.211.11.9 with SMTP; 24 May 2010 08:55:10 -0000
Received: (qmail 79710 invoked by uid 500); 24 May 2010 08:55:09 -0000
Delivered-To: apmail-geronimo-user-archive@geronimo.apache.org
Received: (qmail 79554 invoked by uid 500); 24 May 2010 08:55:07 -0000
Mailing-List: contact user-help@geronimo.apache.org; run by ezmlm
Precedence: bulk
list-help: <mailto:user-help@geronimo.apache.org>
list-unsubscribe: <mailto:user-unsubscribe@geronimo.apache.org>
List-Post: <mailto:user@geronimo.apache.org>
Reply-To: user@geronimo.apache.org
List-Id: <user.geronimo.apache.org>
Delivered-To: mailing list user@geronimo.apache.org
Received: (qmail 79546 invoked by uid 99); 24 May 2010 08:55:06 -0000
Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230)
    by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 24 May 2010 08:55:06 +0000
X-ASF-Spam-Status: No, hits=2.0 required=10.0
	tests=SPF_HELO_PASS,SPF_NEUTRAL,URI_HEX
X-Spam-Check-By: apache.org
Received-SPF: neutral (nike.apache.org: local policy)
Received: from [216.139.236.158] (HELO kuber.nabble.com) (216.139.236.158)
    by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 24 May 2010 08:55:00 +0000
Received: from ben.nabble.com ([192.168.236.152])
	by kuber.nabble.com with esmtp (Exim 4.63)
	(envelope-from <timo.tiuraniemi@iki.fi>)
	id 1OGTQl-0004Rm-GM
	for user@geronimo.apache.org; Mon, 24 May 2010 01:54:39 -0700
Date: Mon, 24 May 2010 01:54:39 -0700 (PDT)
From: ttiurani <timo.tiuraniemi@iki.fi>
To: user@geronimo.apache.org
Message-ID: <1274691279499-839216.post@n3.nabble.com>
In-Reply-To: <1274691279499-334181.post@n3.nabble.com>
References: <1274691279500-334180.post@n3.nabble.com> <1274691279499-334181.post@n3.nabble.com>
Subject: Re: issue deploying webapp with security realm
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-Virus-Checked: Checked by ClamAV on apache.org


Hi,

I am getting the same error with geronimo 2.2, but there does not seem to be
any way around my problem. I am trying to deploy my application with one
.ear-file and use a custom security realm that is created with
geronimo-application.xml and referenced in geronimo-web.xml. This does not
seem to be possible anymore with Geronimo 2.2.

geronimo-application.xml has this:

       <dep:gbean name="MySecurityRealmGBean"
		class="org.apache.geronimo.security.realm.GenericSecurityRealm"
		xsi:type="dep:gbeanType"
		xmlns:dep="http://geronimo.apache.org/xml/ns/deployment-1.2"
		xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
		<dep:attribute name="realmName">MySecurityRealm</dep:attribute>
		<dep:reference name="ServerInfo">
			<dep:name>ServerInfo</dep:name>
		</dep:reference>
		<dep:xml-reference name="LoginModuleConfiguration">
			<log:login-config
xmlns:log="http://geronimo.apache.org/xml/ns/loginconfig-2.0">
				<log:login-module control-flag="REQUIRED"
					wrap-principals="false">
					<log:login-domain-name>
						MySecurityRealm
					</log:login-domain-name>
					<log:login-module-class>
                                         org.test.MySecurityRealmLoginModule
					</log:login-module-class>
				</log:login-module>
			</log:login-config>
		</dep:xml-reference>
	</dep:gbean>

and geronimo-web.xml inside the same .ear tries to reference the realm with
this:

        <security-realm-name>MySecurityRealm</security-realm-name>

Now this has worked nicely with Geronimo 2.0.1 -> 2.1.3 (I'm guessing it
works for 2.1.4 and 2.1.5 as well) but it fails with 2.2 with the same stack
trace as in the first message. I'm guessing the problem is this that by the
time geronimo-web.xml is evaluated during deployment, the custom security
realm from geronimo-application.xml is not either created yet or then there
is some kind of class loader problem.

I've tried every kind of combination of geronimo-application.xml and
geronimo-web.xml and am quite confident the problem is not a simple
configuration typo or lack of <depencency> tags.

I believe it is possible to do this in two separete deployments, where I
would first deploy the custom security realm alone to Geronimo and then
reference it in a separeate .ear containing a geronimo-web.xml with a
dependency to something like this:

       <dependency>
              <groupId>org.test</groupId>
              <artifactId>security</artifactId>
              <version>1.0</version>
              <type>car</type>
        </dependency>

The unfortunate thing is, this approach complicates my development so
significantly, it is out of the question.

Is it possible to create and reference a custom login module inside a single
.ear with Geronimo 2.2? If not, is this possiblity removed from 2.2 on
purpose, or is it a bug that wil be fixed in later versions?

Best regards,
Timo Tiuraniemi

p.s. This seems to be possible in JBoss
(http://community.jboss.org/thread/145856).
-- 
View this message in context: http://apache-geronimo.328035.n3.nabble.com/issue-deploying-webapp-with-security-realm-tp334180p839216.html
Sent from the Users mailing list archive at Nabble.com.