Problems with binding remote Objects (JNDI/WebSphere)
ace...@mail.ru
I'm trying to bind my objects on WebSphere Application Server 5.0 from stand-alone java application running on remote machine (IBM JRE).
Java source code on remote JVM:
Properties props = new Properties();
props.put(Context.INITIAL_CONTEXT_FACTORY, "com.ibm.websphere.naming.WsnInitialContextFactory");
props.put(Context.PROVIDER_URL, corbaloc:iiop:tisproject:2811);
final InitialContext ctx = new InitialContext(props);
Object obj = ctx.lookup("");
ctx.bind("MailService", new MailService());
class MailService, of course, implements Serializable
I also use property file on client side to connect to remote WAS: sas.client.props with following properties:
com.ibm.CORBA.authenticationTarget=BasicAuth
com.ibm.CORBA.loginSource=properties
com.ibm.CORBA.loginUserid=wpsadmin
com.ibm.CORBA.loginPassword=wpspassword
I consider, that the problem is a kind of security issue, but i can't find the solution. Please, tell me what should I do.
I have the following stacktrace:
12:03:54.967 com.ibm.CORBA.iiop.ClientDelegate@69143a7a invoke:777 P=34108:O=0:CT ORBRas[default] Received SystemException org.omg.CORBA.NO_PERMISSION:
Trace from server: 209891810 at host tisproject.tf.local >>
org.omg.CORBA.NO_PERMISSION: not authorized to perform bind_java_object operation. vmcid: 0x0 minor code: 0 completed: No
at com.ibm.ws.naming.cosbase.WsnOptimizedNamingImplBase.performAuthorizationCheck(WsnOptimizedNamingImplBase.java:2808)
at com.ibm.ws.naming.cosbase.WsnOptimizedNamingImplBase.bind_java_object(WsnOptimizedNamingImplBase.java:844)
at com.ibm.WsnOptimizedNaming._NamingContextImplBase._invoke(Unknown Source)
at com.ibm.CORBA.iiop.ServerDelegate.dispatchInvokeHandler(ServerDelegate.java:608)
at com.ibm.CORBA.iiop.ServerDelegate.dispatch(ServerDelegate.java:461)
at com.ibm.rmi.iiop.ORB.process(ORB.java:432)
at com.ibm.CORBA.iiop.ORB.process(ORB.java:1728)
at com.ibm.rmi.iiop.Connection.doWork(Connection.java:2227)
at com.ibm.rmi.iiop.WorkUnitImpl.doWork(WorkUnitImpl.java:65)
at com.ibm.ejs.oa.pool.PooledThread.run(ThreadPool.java:95)
at com.ibm.ws.util.ThreadPool$Worker.run(ThreadPool.java(Compiled Code))
<< END server: 209891810 at host tisproject.tf.local
vmcid: 0x0 minor code: 0 completed: No
at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:80)
at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:44)
at java.lang.reflect.Constructor.newInstance(Constructor.java:315)
at com.ibm.rmi.iiop.ReplyMessage._getSystemException(ReplyMessage.java:199)
at com.ibm.rmi.iiop.ReplyMessage.getSystemException(ReplyMessage.java:148)
at com.ibm.rmi.iiop.ClientResponseImpl.getSystemException(ClientResponseImpl.java:207)
at com.ibm.rmi.corba.ClientDelegate.invoke(ClientDelegate.java:526)
at com.ibm.CORBA.iiop.ClientDelegate.invoke(ClientDelegate.java:1150)
at com.ibm.rmi.corba.ClientDelegate.invoke(ClientDelegate.java:748)
at com.ibm.CORBA.iiop.ClientDelegate.invoke(ClientDelegate.java:1180)
at org.omg.CORBA.portable.ObjectImpl._invoke(ObjectImpl.java:486)
at com.ibm.WsnOptimizedNaming._NamingContextStub.bind_java_object(Unknown Source)
at com.ibm.ws.naming.jndicos.CNContextImpl.cosBindJavaObject(CNContextImpl.java:3229)
at com.ibm.ws.naming.jndicos.CNContextImpl.doBind(CNContextImpl.java:1929)
at com.ibm.ws.naming.jndicos.CNContextImpl.bind(CNContextImpl.java:577)
at com.ibm.ws.naming.util.WsnInitCtx.bind(WsnInitCtx.java:164)
at javax.naming.InitialContext.bind(InitialContext.java:369)
at ru.teleform.mail.reporterclient.MailReporterClient2.main(MailReporterClient2.java:34)
, p1=<null>
Server logs:
[
15.08.06 12:03:54:762 MSD] bcf7d89 RoleBasedAuth E SECJ0306E: No received or invocation credential exist on the thread. The Role based authorization check will not have an accessId of the caller to check. The parameters are: access check method bind_java_object on resource NameServer and module /com/ibm/ws/naming/bootstrap/xml/NameServer.xml. The stack trace is java.lang.Exception: dump thread stack for debugging
at com.ibm.ws.security.role.RoleBasedAuthorizerImpl.checkAccess(RoleBasedAuthorizerImpl.java:291)
at com.ibm.ws.naming.cosbase.WsnOptimizedNamingImplBase.performAuthorizationCheck(WsnOptimizedNamingImplBase.java:2791)
at com.ibm.ws.naming.cosbase.WsnOptimizedNamingImplBase.bind_java_object(WsnOptimizedNamingImplBase.java:844)
at com.ibm.WsnOptimizedNaming._NamingContextImplBase._invoke(Unknown Source)
at com.ibm.CORBA.iiop.ServerDelegate.dispatchInvokeHandler(ServerDelegate.java:608)
at com.ibm.CORBA.iiop.ServerDelegate.dispatch(ServerDelegate.java:461)
at com.ibm.rmi.iiop.ORB.process(ORB.java:432)
at com.ibm.CORBA.iiop.ORB.process(ORB.java:1728)
at com.ibm.rmi.iiop.Connection.doWork(Connection.java:2227)
at com.ibm.rmi.iiop.WorkUnitImpl.doWork(WorkUnitImpl.java:65)
at com.ibm.ejs.oa.pool.PooledThread.run(ThreadPool.java:95)
at com.ibm.ws.util.ThreadPool$Worker.run(ThreadPool.java(Compiled Code))
.
[15.08.06 12:03:54:762 MSD] bcf7d89 RoleBasedAuth A SECJ0305I: Role based authorization check failed for security name <null>, accessId no_cred_no_access_id while invoking method bind_java_object on resource NameServer and module /com/ibm/ws/naming/bootstrap/xml/NameServer.xml.
[15.08.06 12:03:54:778 MSD] bf43d89 RoleBasedAuth E SECJ0306E: No received or invocation credential exist on the thread. The Role based authorization check will not have an accessId of the caller to check. The parameters are: access check method bind_java_object on resource NameServer and module /com/ibm/ws/naming/bootstrap/xml/NameServer.xml. The stack trace is java.lang.Exception: dump thread stack for debugging
at com.ibm.ws.security.role.RoleBasedAuthorizerImpl.checkAccess(RoleBasedAuthorizerImpl.java:291)
at com.ibm.ws.naming.cosbase.WsnOptimizedNamingImplBase.performAuthorizationCheck(WsnOptimizedNamingImplBase.java:2791)
at com.ibm.ws.naming.cosbase.WsnOptimizedNamingImplBase.bind_java_object(WsnOptimizedNamingImplBase.java:844)
at com.ibm.WsnOptimizedNaming._NamingContextImplBase._invoke(Unknown Source)
at com.ibm.CORBA.iiop.ServerDelegate.dispatchInvokeHandler(ServerDelegate.java:608)
at com.ibm.CORBA.iiop.ServerDelegate.dispatch(ServerDelegate.java:461)
at com.ibm.rmi.iiop.ORB.process(ORB.java:432)
at com.ibm.CORBA.iiop.ORB.process(ORB.java:1728)
at com.ibm.rmi.iiop.Connection.doWork(Connection.java:2227)
at com.ibm.rmi.iiop.WorkUnitImpl.doWork(WorkUnitImpl.java:65)
at com.ibm.ejs.oa.pool.PooledThread.run(ThreadPool.java:95)
at com.ibm.ws.util.ThreadPool$Worker.run(ThreadPool.java(Compiled Code))
I have no idea, why properties is not passing onto the server.