Using JAAS on an Application Client Container

Question

I am trying to authenticate users who are going to be accessing
EJBs from an Application Client Container developed using AWT/Swing.
I am able to authenticate users accessing these EJBs via the Web Client.
But some how I get the following error when I run the ACC client:
Nov 11, 2004 3:47:30 PM com.sun.enterprise.security.auth.login.PasswordLoginModule login
SEVERE: SEC1105: A PasswordCredential was required but not provided.
I have tried lc.login with/without the subject and/or principal with the same result.
Here is the login code
// Obtain a LoginContext, needed for authentication. Tell
// it to use the LoginModule implementation specified by
// the entry named "jdbcRealm" in the JAAS login
// configuration file and to also use the specified
// CallbackHandler.
LoginContext lc = null;
NameCallback namecb = new NameCallback( "Enter User name: " );
PasswordCallback passwdcb = new PasswordCallback( "Enter password: ", true );
Callback[] callbackparm = new Callback[2];
callbackparm[0] = namecb;
callbackparm[1] = passwdcb;
try {
System.out.println( "entering atUser: login()" );
//TextCallbackHandler callback = new TextCallbackHandler();
DialogCallbackHandler callback = new DialogCallbackHandler();
callback.handle( callbackparm );
//lc = new LoginContext( "jdbcRealm", callback );
System.out.println( "entering atUser: login() namecb.getName() = " + namecb.getName() );
System.out.println( "entering atUser: login() passwdcb.getPassword() = " +
passwdcb.getPassword() );
PasswordCredential pwd = new PasswordCredential (namecb.getName(), passwdcb.getPassword() );
System.out.println( "entering atUser: login() PasswordCredential pwd = " + pwd );
Subject subject = new Subject();
//subject.getPrincipals().addAll(tempPrincipals);
if (!subject.getPrincipals().contains(pwd)) {
Principal principal = new X500Principal( "CN=JdbcRealm,OU=AkanTech,O=Akan Technology, C=US" );
subject.getPrincipals().add( principal );
System.out.println( "entering atUser: login() subject.getPrincipals().add(pwd) = " +
subject.getPrincipals() );
if (!subject.getPrivateCredentials().contains(pwd)) {
subject.getPrivateCredentials().add( pwd );
subject.getPublicCredentials().add( pwd );
System.out.println( "entering atUser: login() subject.getPrivateCredentials().add(pwd) = " +
subject.getPrivateCredentials() );
System.out.println( "entering atUser: login() subject.getPrivateCredentials().add(pwd) = " +
subject.getPrivateCredentials() );
lc = new LoginContext( "jdbcRealm", subject, callback );
System.out.println( "entering atUser: login() loginContext = " + lc );
System.out.println( "entering atUser: login() lc.getSubject() = " + lc.getSubject() );
} catch (LoginException le) {
System.err.println("atUser login() LoginException: Cannot create LoginContext: " +
le.getMessage());
System.exit( -1 );
} catch (SecurityException se) {
System.err.println("atUser login() SecurityException: Cannot create LoginContext: " +
se.getMessage());
System.exit( -1 );
//} catch (UnsupportedCallbackException se) {
//System.err.println("atUser login() UnsupportedCallbackException: Cannot create LoginContext: " +
se.getMessage());
//System.exit( -1 );
} catch (Exception se) {
System.err.println("atUser login() Exception: Cannot create LoginContext: " + se.getMessage());
System.exit( -1 );
try {
// attempt authentication
lc.login();
} catch (LoginException le) {
System.err.println( "atUser login() LoginException Authentication failed: " + le.getMessage() );
System.exit( -1 );
System.out.println( "atUser login() Authentication succeeded!" );
Here is the content of: appclientlogin.conf
/* Copyright 2004 Sun Microsystems, Inc. All rights reserved. */
/* SUN PROPRIETARY/CONFIDENTIAL. Use is subject to license terms. */
default {
     com.sun.enterprise.security.auth.login.ClientPasswordLoginModule required debug=false;
certificate {
     com.sun.enterprise.security.auth.login.ClientCertificateLoginModule required debug=false;
jdbcRealm {
     com.akantech.security.jdbcrealm.JDBCLoginModule required debug=false;
Here is the content of sun-acc.xml.
I have tried with/without the client-credential entry with the same result.
<?xml version="1.0" encoding="UTF-8"?>
<!--
Copyright 2004 Sun Microsystems, Inc. All rights reserved.
SUN PROPRIETARY/CONFIDENTIAL. Use is subject to license terms.
-->
<!DOCTYPE client-container PUBLIC "-//Sun Microsystems Inc.//DTD Application Server 8.0 Application Client Container//EN" "http://www.sun.com/software/appserver/dtds/sun-application-client-container_1_0.dtd">
<client-container>
<target-server name="winxppro" address="winxppro" port="3700"/>
<log-service file="C:/Sun/AppServer/lib/appclient/logs/client.log" level="WARNING"/>
<auth-realm classname="com.akantech.security.jdbcrealm.JDBCRealm" name="jdbc">
<property name="dbdrivername" value="com.ibm.db2.jcc.DB2Driver"/>
<property name="auth-type" value="jdbccustomrealm"/>
<property name="dburl" value="jdbc:db2://localhost:50000/authuser"/>
<property name="jaas-context" value="jdbcRealm"/>
</auth-realm>
<client-credential user-name="admin" password="akantech" realm="jdbc"/>
</client-container>
What am I missing?
I have read the following documentation but cant seem to figure out what I am missing.
http://docs.sun.com/source/819-0079/dgdesc.html#wp130029
http://docs.sun.com/source/819-0079/dgsecure.html
http://docs.sun.com/source/819-0079/dgsecure.html#wp32713
http://java.sun.com/security/jaas/doc/api.html
http://java.sun.com/security/jaas/doc/module.html
http://java.sun.com/j2se/1.4.2/docs/guide/security/jaas/tutorials/index.html
I added a lot of log info in the JDBCLoginModule : authenticate() method.
It seems to me like the authenticate() method is never called. Because nothing is
logged from this method.
Thanks a million
Stephen

Answer 1

I have not been able to figure this one out yet so put it on the
back burner.
I am still waiting for an answer.
Did you find the answer?