Ear file deploys on oc4j standalone, not on ias using the ent.appl.manager

Question

We added security constraints to our web.xml, and this works when we deploy it on a standalone OC4J. Deploying this ear on the ias with the Enterprise application Manager: after choosing the ear-file, giving it a name and pushing the next button we get a nullpointer-exception.
After removing the security constraints the deployment works. Any ideas????
Eelco

Answer 1

To be complete, here's the web.xml:
<?xml version="1.0"?>
<!DOCTYPE web-app PUBLIC "-//Sun Microsystems, Inc.//DTD Web Application 2.2//EN" "http://java.sun.com/j2ee/dtds/web-app_2_2.dtd">
<!-- This file contains the configuration for a web-application.-->
<web-app>
<distributable />
<display-name>Laris Application</display-name>
<description>Laris Application</description>
<env-entry>
     <description>Database connection string</description>
     <env-entry-name>dbconnect</env-entry-name>
     <env-entry-value>jdbc:oracle:thin:&lt;user&gt;&lt;pwd&gt;@&lt;host&gt;:&lt;port&gt;:&lt;sid&gt;</env-entry-value>
     <env-entry-type>java.lang.String</env-entry-type>
</env-entry>
<env-entry>
     <description>Dtd locatie string</description>
     <env-entry-name>dtd_url</env-entry-name>
     <env-entry-value>http://&lt;host&gt;:&lt;port&gt;/laris/dtd/</env-entry-value>
     <env-entry-type>java.lang.String</env-entry-type>
</env-entry>
<servlet>
<servlet-name>LarisController</servlet-name>
<servlet-class>oracle.clex.process.controller.HttpServletController</servlet-class>
<init-param>
<param-name>cle-service-descriptor</param-name>
<param-value>StartLarisService.xml</param-value>
</init-param>
</servlet>
<servlet>
<servlet-name>PortaalController</servlet-name>
<servlet-class>oracle.clex.process.controller.HttpServletController</servlet-class>
<init-param>
<param-name>cle-service-descriptor</param-name>
<param-value>PortaalService.xml</param-value>
</init-param>
</servlet>
<servlet>
<servlet-name>InvoerenAanspraakController</servlet-name>
<servlet-class>oracle.clex.process.controller.HttpServletController</servlet-class>
<init-param>
<param-name>cle-service-descriptor</param-name>
<param-value>InvoerenAanspraakService.xml</param-value>
</init-param>
</servlet>
<servlet>
<servlet-name>ControlerenAanspraakController</servlet-name>
<servlet-class>oracle.clex.process.controller.HttpServletController</servlet-class>
<init-param>
<param-name>cle-service-descriptor</param-name>
<param-value>ControlerenAanspraakService.xml</param-value>
</init-param>
</servlet>
<servlet>
<servlet-name>BeoordelenAanspraakController</servlet-name>
<servlet-class>oracle.clex.process.controller.HttpServletController</servlet-class>
<init-param>
<param-name>cle-service-descriptor</param-name>
<param-value>BeoordelenAanspraakService.xml</param-value>
</init-param>
</servlet>
<servlet>
<servlet-name>BeslissenAanspraakController</servlet-name>
<servlet-class>oracle.clex.process.controller.HttpServletController</servlet-class>
<init-param>
<param-name>cle-service-descriptor</param-name>
<param-value>BeslissenAanspraakService.xml</param-value>
</init-param>
</servlet>
<servlet>
<servlet-name>BehandelenAanspraakController</servlet-name>
<servlet-class>oracle.clex.process.controller.HttpServletController</servlet-class>
<init-param>
<param-name>cle-service-descriptor</param-name>
<param-value>BehandelenAanspraakService.xml</param-value>
</init-param>
</servlet>
<servlet>
<servlet-name>CommunicatieGeneratorController</servlet-name>
<servlet-class>oracle.clex.process.controller.HttpServletController</servlet-class>
<init-param>
<param-name>cle-service-descriptor</param-name>
<param-value>CommunicatieGeneratorService.xml</param-value>
</init-param>
</servlet>
<servlet>
<servlet-name>KruisjestabelController</servlet-name>
<servlet-class>oracle.clex.process.controller.HttpServletController</servlet-class>
<init-param>
<param-name>cle-service-descriptor</param-name>
<param-value>KruisjestabelService.xml</param-value>
</init-param>
</servlet>
<servlet>
<servlet-name>CitesController</servlet-name>
<servlet-class>oracle.clex.process.controller.HttpServletController</servlet-class>
<init-param>
<param-name>cle-service-descriptor</param-name>
<param-value>LarisService.xml</param-value>
</init-param>
</servlet>
<servlet>
<servlet-name>BaBoSSController</servlet-name>
<servlet-class>oracle.clex.process.controller.HttpServletController</servlet-class>
<init-param>
<param-name>cle-service-descriptor</param-name>
<param-value>LarisService.xml</param-value>
</init-param>
</servlet>
<servlet-mapping>
<servlet-name>LarisController</servlet-name>
<url-pattern>Default/StartIt</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>PortaalController</servlet-name>
<url-pattern>Portaal/StartIt</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>InvoerenAanspraakController</servlet-name>
<url-pattern>Portaal/InvoerenAanspraak/StartIt</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>ControlerenAanspraakController</servlet-name>
<url-pattern>Portaal/ControlerenAanspraak/StartIt</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>BeoordelenAanspraakController</servlet-name>
<url-pattern>BeoordelenAanspraak/Eenvoudig/StartIt</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>BeslissenAanspraakController</servlet-name>
<url-pattern>Beslissen/VaststellenBeslissing/StartIt</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>BehandelenAanspraakController</servlet-name>
<url-pattern>Behandelen/AdministratiefControleren/StartIt</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>CommunicatieGeneratorController</servlet-name>
<url-pattern>Informeren/CommunicatieGenerator/StartIt</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>KruisjestabelController</servlet-name>
<url-pattern>Kruisjestabel/Kruisjestabel/StartIt</url-pattern>
</servlet-mapping>
<!-- security roles -->
<security-role>
     <role-name>sr_manager</role-name>
</security-role>
<security-role>
     <role-name>sr_developer</role-name>
</security-role>
<!-- security constraints -->
<security-constraint>
<web-resource-collection>
<url-pattern>cabo/*</url-pattern>
<url-pattern>jheadstart/*</url-pattern>
<url-pattern>help/*</url-pattern>
<url-pattern>laris/*</url-pattern>
<url-pattern>images/*</url-pattern>
<url-pattern>uix/*</url-pattern>
</web-resource-collection>
<!-- authorization -->
<!-- <auth-constraint>
<role-name>sr_developer</role-name>
</auth-constraint> -->
</security-constraint>
<security-constraint>
<web-resource-collection>
<url-pattern>Default/*</url-pattern>
<url-pattern>Portaal/*</url-pattern>
<url-pattern>Informeren/*</url-pattern>
<url-pattern>Behandelen/*</url-pattern>
<url-pattern>Beslissen/*</url-pattern>
<url-pattern>BeoordelenAanspraak/*</url-pattern>
<!-- volgende is wel gewenst (in 1 keer alles beveiligen), maar werkt niet
<url-pattern>*</url-pattern> geeft error bij createmarlinbeanpag
<url-pattern>*/*</url-pattern> beveiligt gewoon niet
<url-pattern>./*</url-pattern> beveiligt niet alles
<url-pattern>./*/*</url-pattern> beveiligt niet(s)
<url-pattern>../*</url-pattern> beveiligt niets
-->
</web-resource-collection>
<!-- authorization -->
<auth-constraint>
<role-name>sr_developer</role-name>
</auth-constraint>
</security-constraint>
<!-- de volgende security constraint is niet zozeer voor de administrator
maar om er voor te zorgen dat bovenstaande constraint de toegang
beperkt tot alleen het gedefinieerde -->
<security-constraint>
<web-resource-collection>
<url-pattern>/*</url-pattern>
</web-resource-collection>
<auth-constraint>
     <role-name>sr_administrator</role-name>
</auth-constraint>
</security-constraint>
<!-- authentication -->
<login-config>
     <auth-method>BASIC</auth-method>
</login-config>
</web-app>