JAAS problem - credentials not forwarded...

Question

Hi there,
My app looks like this:
Business layer is a spring/hibernate-based application with SLSB EJB working as session facade to some POJO hibernate-based persistance layer. It's deployed as EAR.
Client tier is a web application connecting to this service. Webapp is residing in the same server instance but NOT in the same EAR.
I am trying to use declarative security (have one role InternalRole defined as required for both: the EJB and it's methods). The problem is, that:
1. run-as within web.xml of myweb-app is not working
2. I use such code to set up login context:
System.setProperty("java.security.auth.login.config", "http://localhost:8080/Top7Web/jaas.config");
      logger.debug("creating loginContext...");
      UsernamePasswordHandler handler = null;
      handler = new UsernamePasswordHandler("top7internal", "qwe");
      LoginContext lc = new LoginContext("top7auctions", handler);
      lc.login();      And the thing is - it works for obtaining handle of service object but principle is NOT passed to business layer while trying to invoke some service method, which results in:
2005-09-17 21:40:04,811 DEBUG [org.jboss.security.auth.spi.UsersRolesLoginModule] Loaded properties, users=[top7internal]
2005-09-17 21:40:04,811 TRACE [org.jboss.security.auth.spi.UsersRolesLoginModule] login
2005-09-17 21:40:04,811 TRACE [org.jboss.security.auth.spi.UsersRolesLoginModule] Authenticating as unauthenticatedIdentity=null
2005-09-17 21:40:04,811 DEBUG [org.jboss.security.auth.spi.UsersRolesLoginModule] Bad password for username=null
2005-09-17 21:40:04,821 TRACE [org.jboss.security.auth.spi.UsersRolesLoginModule] abort
2005-09-17 21:40:04,821 TRACE [org.jboss.security.plugins.JaasSecurityManager.top7auctions] Login failure
javax.security.auth.login.FailedLoginException: Password Incorrect/Password RequiredAny sugestions what should I do to manually set credentials under which web-app should be connecting business tier?
TIA
Wojtek

Answer 1

I believe you are getting ORA-12638: credentials retrieval failed.
If you search on metalink for this, you will get many threads which address this issue in different ways.
Try it.