RunAs and JAAS

Question

If i try to call an PrivilegedAction i get an SecurityError: Invalid
Subject: principals=[....]
In an MessageBean in the onMessage()-Methode i do:
LoginContext lc = new LoginContext("myrealm",new
MyCallBackHandler(username,password))
lc.login();
Subject s = lc.getSubject();
weblogic.Security.SecurityRunAs(s,this); // this implements
PrivilegedAction
in the run()-Methode
i check the current-Subject/User
Subject cs=weblogic.security.Security.getCurrentSubject();
System.out.println("User:= "
+weblogic.security.SubjectUtils.getUsername(cs));
The System out prints the correct User!!!
After that an Exception occures:
Invalid Subject: principals=[....]

Answer 1

You need to sign the subject:
PrincipalValidator principalValidator =
new PrincipalValidatorImpl();
Set principals = subject.getPrincipals();
Iterator i = principals.iterator();
while(i.hasNext())
Principal principal = (Principal) i.next();
AccessController.doPrivileged(
PrivilegedActions.getSignPrincipalAction(
principalValidator, principal));
[email protected] wrote:
If i try to call an PrivilegedAction i get an SecurityError: Invalid
Subject: principals=[....]
In an MessageBean in the onMessage()-Methode i do:
LoginContext lc = new LoginContext("myrealm",new
MyCallBackHandler(username,password))
lc.login();
Subject s = lc.getSubject();
weblogic.Security.SecurityRunAs(s,this); // this implements
PrivilegedAction
in the run()-Methode
i check the current-Subject/User
Subject cs=weblogic.security.Security.getCurrentSubject();
System.out.println("User:= "
+weblogic.security.SubjectUtils.getUsername(cs));
The System out prints the correct User!!!
After that an Exception occures:
Invalid Subject: principals=[....]