Access to InitialContext by username and password

Question

hi,
I have implemented a web application, which gets resources via JNDI.
I am accessing JNDI by username and password:
Properties p = new Properties();
p.put(Context.INITIAL_CONTEXT_FACTORY, "com.sap.engine.services.jndi.InitialContextFactoryImpl");
p.put(Context.PROVIDER_URL, "localhost:50004");
p.put(Context.SECURITY_PRINCIPAL, "username1");
p.put(Context.SECURITY_CREDENTIALS, "password1");
javax.naming.Context ctx = new InitialContext(p);
Accessing the InitialContext works without any problems.
My webapplication provides the functionality, that the user can relogin within the application.
When the user pushes the relogin-button, the following code is run again
Properties p = new Properties();
p.put(Context.INITIAL_CONTEXT_FACTORY, guiConfig.getContext_factory());
p.put(Context.PROVIDER_URL, "com.sap.engine.services.jndi.InitialContextFactoryImpl");
p.put(Context.SECURITY_PRINCIPAL, "username2");
p.put(Context.SECURITY_CREDENTIALS, "password2");
javax.naming.Context ctx = new InitialContext(p);
So I would like to check the access to JNDI by username and password again.
Unfortunately I get an InitialContext EVEN WHEN MY PASSWORD IS WRONG.
It looks like InitialContext is not cleared and access to JNDI is not checked by username and password again.
Do I have to clear InitialContext before I relogin to the new InitialContext with the new username and new password; and if yes how can I do that?
Thanks for your help in advance!
Andreas
Message was edited by: Andreas Putscher

Answer 1

Hi Maksim
I have tried the following source (within my webapplication):
boolean isOldMethod = true;
if (isOldMethod) {
     Properties p = new Properties();
     p.put(Context.INITIAL_CONTEXT_FACTORY, "com.sap.engine.services.jndi.InitialContextFactoryImpl");
     p.put(Context.PROVIDER_URL, "localhost:50004");
     p.put(Context.SECURITY_PRINCIPAL, username);
     p.put(Context.SECURITY_CREDENTIALS, password);
     ctx = new InitialContext(p);
} else {
     ctx = new InitialContext();
     ctx.addToEnvironment(Context.INITIAL_CONTEXT_FACTORY, "com.sap.engine.services.jndi.InitialContextFactoryImpl");
     ctx.addToEnvironment(Context.PROVIDER_URL, "localhost:50004");
     ctx.addToEnvironment(Context.SECURITY_PRINCIPAL, username);
     ctx.addToEnvironment(Context.SECURITY_CREDENTIALS, password);
Source code within on of my EJBs:
     public void setSessionContext(SessionContext context) {
          this.context = context;
public UserAuthorization getUserProfile(String userName, String applicationName) throws CasablancaException {
     Principal prin = context.getCallerPrincipal();
When I run oldMethod for INITIAL LOGIN and username+password are false,
     - immediately an exception is thrown
     -> THIS IS CORRECT BEHAVIOUR
When I run newMethod for INITIAL LOGIN and username+password are false,
     - no exception is thrown,
     - context.getCallerPrincipal() returns "Guest" (I have logged in with user "TESTUSER", who is Adminstrator)
     -> WRONG BEHAVIOUR
When I run oldMethod for RELOGIN and username+password are false,
     - no exception is thrown
     - context.getCallerPrincipal() return the old user (Context HAS NOT CHANGED to new user)
     -> WRONG BEHAVIOUR
When I run newMethod for RELOGIN and username+password are false,
     - no exception is thrown
     - context.getCallerPrincipal() return the old user (Context HAS NOT CHANGED to new user)
     -> WRONG BEHAVIOUR     
So in both cases (oldMethod and newMethod) no errors are thrown, but no Relogin to JNDI is performed.
Do you have any more suggestions?
Thanks for your help!
Andreas