Groups > Weblogic > WebLogic security > Re: Identity Assertion with EJB.




Re: Identity Assertion with EJB.

Re: Identity Assertion with EJB.
Thu, 24 Apr 2008 02:57:16 -070
OK I have got a little further.

>>>>> code snippet
String contextServiceURL =
"corbaloc:iiop:10.230.180.69:7002/NameService";

Hashtable table = new Hashtable();
table.put(InitialContext.INITIAL_CONTEXT_FACTORY,
"com.sun.jndi.cosnaming.CNCtxFactory");
table.put(InitialContext.PROVIDER_URL, contextServiceURL);       

InitialContext context = new InitialContext(table);
Object ref = context.lookup("ejb.myejbRemoteHome");
      myejbRemoteHome home = (myejbRemoteHome)PortableRemoteObject.narrow(ref,
myejbRemoteHome.class);
      myejbRemote obj = home.create();
      obj.testUnsecureMethod();
      obj.testSecureMethod();


<<<<<<<<

The unsecure call works fine, the secure call gives me:

java.rmi.AccessException: CORBA NO_PERMISSION 0 Maybe; nested exception is: 
	org.omg.CORBA.NO_PERMISSION:   vmcid: 0x0  minor code: 0 completed: Maybe


If i set defaultiiop username and password in WebLogic under Environment ->
Server -> protocals -> IIOP to weblogic/password then the secure call
works.  This makes me think that the Subject is not propagating properly.

In the request in Tomcat I have a GenericPrincipal with user and group info.  In
the Session i have a Subject with only WLSUserImpl, but not the WLSGroupImpl's
that I expect.  They are there when the login happes, I see the weblogic
Authenticate method populate the subject with the groups okay.

Any help much appreicated.

--
Edited by lnoton at 04/24/2008 2:56 AM

--
Post Reply
about | contact