Results 1 to 5 of 5

Thread: Accessing ejbs protected with declarative security

  1. #1
    Join Date
    Jun 2005
    Location
    México City
    Posts
    47

    Default Accessing ejbs protected with declarative security

    Hi all,

    I posted this on the EJB forum, but got no response. I am reposting here for the sake of good semantics.

    I have a SimpleRemoteStatelessSessionProxyFactoryBean to an EJB deployed in WL8. This EJB is protected using declarative security.

    This is a legacy component, and cannot be changed whatsoever.

    I also have a spring bean that must use the services provided by this EJB.

    Whenever I try to access this EJB, I get an obvious RemoteAccessException.

    What's the best way to get through declarative security in this case? Is Acegi needed? Is there a simpler approach?

    Please help. My deadlines are getting closer, and so is the guillotine.

    J.
    This is a block of text that can be added to posts you make. There is a 255 character limit.

  2. #2
    Luke Taylor is offline Senior Member Acegi Security System TeamSpring Team
    Join Date
    Aug 2004
    Location
    Glasgow, Scotland
    Posts
    3,449

    Default

    Hi,

    Can't you just use WL8's container security? Presumable other users of the EJB must be doing this? I don't think the Spring proxy bean should make any difference. Do you have container security configured?

    Luke.

  3. #3
    Join Date
    Jun 2005
    Location
    México City
    Posts
    47

    Default Configuring container security

    Quote Originally Posted by Luke
    Hi,

    Can't you just use WL8's container security? Presumable other users of the EJB must be doing this? I don't think the Spring proxy bean should make any difference. Do you have container security configured?

    Luke.
    Thank you for your reply

    That is what I have found on the net, but I do not know where to start. Could you give any links or info on how to do this? Or leastways how to start doing this?

    Thanks a lot.

    J.
    This is a block of text that can be added to posts you make. There is a 255 character limit.

  4. #4
    Luke Taylor is offline Senior Member Acegi Security System TeamSpring Team
    Join Date
    Aug 2004
    Location
    Glasgow, Scotland
    Posts
    3,449

    Default

    I guess BEA's web site would be the best place to look. This isn't really an acegi-related topic.

  5. #5
    Join Date
    Jun 2005
    Location
    México City
    Posts
    47

    Default

    Hi Luke.

    I have found a workaround for this issue, awkward as it may be.

    Given the following SSLSBProxyFactoryBean:

    Code:
    <!-- Proxy to Phoenix Legacy System Connector//-->
    		<bean id="phoenixConnectorService" class="org.springframework.ejb.access.SimpleRemoteStatelessSessionProxyFactoryBean" lazy-init="true">
    			<description>Proxy para accesar el conector a Legacy System Phoenix</description>
    			<property name="jndiName">
    				<value>ejb/conector/phoenix/PHXBcoHome</value>
    			</property>
    			<property name="businessInterface">
    				<value>com.ixe.treasury.middleware.phoenix.PhoenixService</value>
    			</property>
    			<property name="jndiTemplate">
    				<ref local="weblogicJndiTemplate" />
    			</property>
    		</bean>
    Note that a jndiTemplate property is wired to this bean. In the jndiTemplate you can provide the context initialization values, as well as the user principal, and the credentials for container authentication. JndiTemplate is just a wrapper for a properties object, just like instantiating an InitialContext.

    I am sure there is a better way to do this, but for now this is all I have. Any replies with additional info, or best practices will be most welcome.

    Thank you all for your follow-ups.

    J.
    This is a block of text that can be added to posts you make. There is a 255 character limit.

Similar Threads

  1. Replies: 3
    Last Post: Oct 7th, 2005, 01:08 PM
  2. Authentication of a remote EJB client
    By Andreas Senft in forum Security
    Replies: 10
    Last Post: Jun 27th, 2005, 11:25 AM
  3. Acegi and JBoss declarative security
    By catalean in forum Security
    Replies: 1
    Last Post: Jun 17th, 2005, 05:19 AM
  4. async JMS consumer and declarative security for spring?
    By Chuck Zheng in forum Architecture
    Replies: 1
    Last Post: Jan 25th, 2005, 12:52 PM
  5. Multiple value Property and JLists
    By afida in forum Swing
    Replies: 9
    Last Post: Aug 29th, 2004, 09:09 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •