10g: Bug with XML\Jazn Security

Question

For days I've been trying to get my migrated apps (from 9.0.3.1) to run with the internal JDev OC4J using JAZN security. I've been able to deploy to the packaged OC4J just fine, yet whenever I run it internally, it's never accepted my username and password.
I just now found that JDev added a...
<jazn provider="XML" location="[AppName]-jazn-data.xml" default-realm="jazn.com"/>
to my App-oc4j-app.xml. I'm guessing this is for the Current Workspace settings, which is fine... however, for the Global settings, JDev never looks into system9.0.5.0.0.1375 \ oc4j-config for the global jazn-data.xml file when you run your app. (It will obfuscate passwords and everything, just won't look up your credentials)
To fix the problem, I ended up copying my global jazn-data.xml file to my app's main directory (where App-oc4j-app.xml exists) from the system directory, then changing the location of the jazn provider in the App-oc4j-app.xml file to jazn-data.xml. (I suppose I could have just changed the location to point to the System directory as well).
Anyways, figured this might help someone.

Answer 1

I have the same problem. My app works fine with Stand alone OC4J. I tried to migrate my app into 10g Env.
But I had the problem the JAZN Authentication. I tried all solutions, it still failed. I decided to create
very simple EJB project to test Embedded OC4J debugging.
I create a simple Test Workspace and testEJB project.
I followed the steps to create a simple TestSesssionEJB with one method: insert.
I right clicked on the TestSesssionEJB to generate New Sample EJB Client, named TestSessionEJBClient.
1) To start the debug EJB, I right cliked the TestSesssionEJB and selected Degug TestSesssionEJB.
2) Embedded OC4J Server started fine.
3) I ran TestSessionEJBClient I got javax.naming.AuthenticationException
javax.naming.NamingException: Lookup error: javax.naming.AuthenticationException: Invalid username/password for current-workspace-app (admin); nested exception is:
     javax.naming.AuthenticationException: Invalid username/password for current-workspace-app (admin). Root exception is javax.naming.AuthenticationException: Invalid username/password for current-workspace-app (admin)
     at com.evermind.server.rmi.RMIConnection.connect(RMIConnection.java:2298)
     at com.evermind.server.rmi.RMIConnection.connect(RMIConnection.java:2129)
     at com.evermind.server.rmi.RMIConnection.lookup(RMIConnection.java:1665)
     at com.evermind.server.rmi.RMIServer.lookup(RMIServer.java:680)
     at com.evermind.server.rmi.RMIContext.lookup(RMIContext.java:134)
     at javax.naming.InitialContext.lookup(InitialContext.java:347)
     at test.TestSessionEJBClient.main(TestSessionEJBClient.java:17)
Here is TestSessionEJBClient generated by JDeveloper
package test;
import javax.naming.Context;
import javax.naming.InitialContext;
import javax.rmi.PortableRemoteObject;
import test.TestSessionEJB;
import test.TestSessionEJBHome;
import javax.naming.NamingException;
public class TestSessionEJBClient
public static void main(String [] args)
TestSessionEJBClient testSessionEJBClient = new TestSessionEJBClient();
try
Context context = getInitialContext();
TestSessionEJBHome testSessionEJBHome = (TestSessionEJBHome)PortableRemoteObject.narrow(context.lookup("TestSessionEJB"), TestSessionEJBHome.class);
TestSessionEJB testSessionEJB;
// Use one of the create() methods below to create a new instance
testSessionEJB = testSessionEJBHome.create();
// Call any of the Remote methods below to access the EJB
// testSessionEJB.insertClob( );
catch(Throwable ex)
ex.printStackTrace();
private static Context getInitialContext() throws NamingException
// Get InitialContext for Embedded OC4J.
// The embedded server must be running for lookups to succeed.
return new InitialContext();
Test-oc4j-app.xml content
<?xml version = '1.0' encoding = 'windows-1252'?>
<!DOCTYPE orion-application PUBLIC "-//Evermind//DTD J2EE Application runtime 1.2//EN" "http://xmlns.oracle.com/ias/dtds/orion-application.dtd">
<orion-application>
<ejb-module path="file:/C:/jdev905WorkSpaces/testEJB/classes/"/>
<library path="C:\jdev905WorkSpaces\testEJB\classes">jdev-generated</library>
<library path="C:\Tools\oracle\jdev905\jdev\system9.0.5.0.1349\oc4j-config\.client">jdev-generated</library>
<library path="C:\Tools\oracle\jdev905\lib\xmlparserv2.jar">jdev-generated</library>
<library path="C:\Tools\oracle\jdev905\lib\xmlcomp.jar">jdev-generated</library>
<log>
<file path="Test-oc4j-app.log"/>
</log>
<jazn provider="XML" location="Test-jazn-data.xml" default-realm="jazn.com"/>
<data-sources path="Test-data-sources.xml"/>
</orion-application>
Test-jazn-data.xml content
<jazn-data>
<jazn-realm>
<realm>
<name>jazn.com</name>
<users>
<user>
<name>jdevuser</name>
<credentials>!jdevuser</credentials>
</user>
</users>
<roles>
<role>
<name>jdevrole</name>
</role>
</roles>
</realm>
</jazn-realm>
</jazn-data>
.../system9.0.5.0.1349\oc4j-config/server.xml
<application-server application-directory="applications" deployment-directory="application-deployments" connector-directory="connectors" transaction-log="log/transaction.state" recovery-procedure="ignore" taskmanager-granularity="5000" taskmanager-interval="5000" auto-unpack-applications="true">
     <rmi-config path="./rmi.xml"/>
     <sep-config path="./internal-settings.xml"/>
     <!-- JMS-server config link, uncomment to activate the JMS service -->
     <jms-config path="./jms.xml"/>
     <log>
          <file path="log/server.log"/>
     </log>
<java-compiler name="ojc" in-process="false" bindir="C:\Tools\oracle\jdev905\jdev\bin\"/>
     <global-application name="default" path="application.xml"/>
<application name="bc4j" path="C:\Tools\oracle\jdev905\jdev\system9.0.5.0.1349\oc4j-config\applications\bc4j.ear"/>
<application name="larcis" path="C:\larcis3\jdev905\larcis3-oc4j-app.xml"/>
<application name="current-workspace-app" path="C:\jdev905WorkSpaces\Test-oc4j-app.xml"/>
     <global-web-app-config path="global-web-application.xml"/>
     <!-- <web-site path="./secure-web-site.xml" /> -->
     <web-site default="true" path="./default-web-site.xml"/>
     <!-- Compiler, activate this to specify an alternative compiler such
          as jikes for EJB/JSP compiling. -->
     <!-- <compiler executable="jikes" classpath="/myjdkdir/jre/lib/rt.jar" /> -->
</application-server>
I think this is a bug in XML/JAZN that Tim mentioned in the first post.
I also tried the solution suggested by Tim. But it still did not work.
Any one have another suggestion?