JAAS in Java StoredProcedures: How to set up LoginModule

Question

Hi,
has anyone tried to use JAAS in a Java StoredProcedure on Oracle9i?
I couldn't find out how to set up the JVM to find the login configuration. Here the error I get, whenn I run the StoredProcedure:
ORA-29532: Java call terminated by uncaught Java exception: java.lang.SecurityException: Unable to locate a login configuration
Here is what I did so far:
1. copy jaas.jar into the $JAVA_HOME/lib/ext directory
2. add to $JAVA_HOME/lib/security/java.security
login.config.url.1=file:C:/my_jaas.config
3. provide configuration file my_jaas.config
Test {
auth.MyLoginModule required debug=true;
4. loadjava for jaas.jar (TEST schema)
5. setup of the database security:
dbms_java.grant_policy_permission( 'JAVA_ADMIN', 'TEST', 'javax.security.auth.AuthPermission', '*' );
dbms_java.grant_permission( 'TEST', 'TEST:javax.security.auth.AuthPermission', 'createLoginContext', null );
dbms_java.grant_permission( 'TEST', 'TEST:javax.security.auth.AuthPermission', 'getLoginConfiguration', null );
dbms_java.grant_permission( 'TEST', 'SYS:java.security.SecurityPermission', '*', null );
6. loadjava for the StoredProcedure (TEST schema)
LoginContext lc = new LoginContext( "Test", new TestCallbackHandler() );
lc.login();
How can I tell the database where to look for the login configuration. Am I missing something here?
Thanks for any help
Regards,
Christian

Answer 1

Hi,
has anyone tried to use JAAS in a Java StoredProcedure on Oracle9i?
I couldn't find out how to set up the JVM to find the login configuration. Here the error I get, whenn I run the StoredProcedure:
ORA-29532: Java call terminated by uncaught Java exception: java.lang.SecurityException: Unable to locate a login configuration
Here is what I did so far:
1. copy jaas.jar into the $JAVA_HOME/lib/ext directory
2. add to $JAVA_HOME/lib/security/java.security
login.config.url.1=file:C:/my_jaas.config
3. provide configuration file my_jaas.config
Test {
auth.MyLoginModule required debug=true;
4. loadjava for jaas.jar (TEST schema)
5. setup of the database security:
dbms_java.grant_policy_permission( 'JAVA_ADMIN', 'TEST', 'javax.security.auth.AuthPermission', '*' );
dbms_java.grant_permission( 'TEST', 'TEST:javax.security.auth.AuthPermission', 'createLoginContext', null );
dbms_java.grant_permission( 'TEST', 'TEST:javax.security.auth.AuthPermission', 'getLoginConfiguration', null );
dbms_java.grant_permission( 'TEST', 'SYS:java.security.SecurityPermission', '*', null );
6. loadjava for the StoredProcedure (TEST schema)
LoginContext lc = new LoginContext( "Test", new TestCallbackHandler() );
lc.login();
How can I tell the database where to look for the login configuration. Am I missing something here?
Thanks for any help
Regards,
Christian Hi, this is not supported yet - although some guys, on the forum, successfully implements JSSE but i am not allowed to disclose how they did it.
we hope to provide formal support for JAAS, JSSE and JCE in upcoming major database release
Kuassi