Authentication on JBoss

Question

Hi all,
I'm trying to make user's authentication on JBoss 3.0.6.
I don't want to specify method permissions on my ejb-jar.xml, because I just want to authenticate users (username and password), any authenticated user has all permissions.
But I can't do this! The server throws the following exception:
"EJBException:; nested exception is: javax.ejb.EJBException: checkSecurityAssociation; CausedByException is: No method permissions assigned to method=create, interface=HOME".
Does anybody know anything about it?
Thanks,
Denis.

Answer 1

Hi DMacedo,
To connect to the server (specified by serverURL), you do new InitialContext(getProperties(...)).
     private Properties getProperties(String username, String password, String serverURL, String classFactory) {
          char[]               passwd;
          LoginContext         lc = null;
          AppCallbackHandler   handler;
          Properties              properties;
          Context                   context;
          properties = new Properties();
          try {
               properties.put(Context.INITIAL_CONTEXT_FACTORY, classFactory);
               properties.put(Context.PROVIDER_URL, serverURL);
               if (StringSvc.hasValue(username)) {
                    passwd = password.toCharArray();
                    handler = new AppCallbackHandler(username, passwd);
                    lc = new LoginContext("A2F", handler);
                    lc.login();
                    properties.put(Context.SECURITY_PRINCIPAL, username);
                    properties.put(Context.SECURITY_CREDENTIALS, password);
          } catch (Exception ex) {
               ex.printStackTrace();
          return properties;
     // Here is the CallbackHandler class.     
     static class AppCallbackHandler implements CallbackHandler {
          private String username;
          private char[] password;
          public AppCallbackHandler(String username, char[] password) {
               this.username = username;
               this.password = password;
          public void handle(Callback[] callbacks) throws IOException, UnsupportedCallbackException {
               NameCallback nc;
               PasswordCallback pc;
               for (int i = 0; i < callbacks.length; i++) {
                    if (callbacks[i] instanceof NameCallback) {
                         nc = (NameCallback) callbacks;
                         nc.setName(username);
                    } else if (callbacks[i] instanceof PasswordCallback) {
                         pc = (PasswordCallback) callbacks[i];
                         pc.setPassword(password);
                    } else {
                         throw new UnsupportedCallbackException(callbacks[i], "Unrecognized Callback");
But at first is necessary to configure JBoss security, as you know.
Ok?!
I hope can help,
Migoux.