How to get username from a access denied SecurityException?
Steve Chan
I am getting a JMSSecurityException but it isn't giving me enough
information to know how to proceed with debugging.
A brief description of the environment - There are two domains, both are
WebLogic 8.1 SP1 running in their own processes. I have a MDB in a local
domain trying to receive from a topic in a remote domain. The two domains
have established trust. In the local domain I have a "Foreign JMS Server"
deployed with the JNDI mappings to the remote JMS resources. I also have a
credential map from the local user to a remote user for the MDB. The remote
user is authorized by being in a JMSUsers group and that group is granted
access to the topic. The MDB has specified a run-as in its deployment
descriptor to run-as the local user that has the credential map to the
remote user.
When the MDB is deployed it gets a JMSSecurityException with a access denied
to the specified JMS resource...it would be very useful if it would report
what username it was trying to authenticate with. Does anyone know how to
get this information? I am pasting the exception just in case it contains
information that can be gleened. Thanks for any help anyone can provide.
[EJB:010196]'weblogic.jms.common.JMSSecurityException: Access denied to
resource: type=<jms>, application=, destinationType=topic, resource=T,
action=receive' Linked exception =
'weblogic.jms.common.JMSSecurityException: Access denied to resource:
type=<jms>, application=, destinationType=topic, resource=T, action=receive'
weblogic.jms.common.JMSSecurityException: Access denied to resource:
type=<jms>, application=, destinationType=topic, resource=T, action=receive
at
weblogic.rjvm.BasicOutboundRequest.sendReceive(BasicOutboundRequest.java:108
)
at
weblogic.rmi.internal.BasicRemoteRef.invoke(BasicRemoteRef.java:138)
at
weblogic.jms.dispatcher.DispatcherImpl_811_WLStub.dispatchSyncFuture(Unknown
Source)
at
weblogic.jms.dispatcher.DispatcherWrapperState.dispatchSync(DispatcherWrappe
rState.java:333)
at
weblogic.jms.client.JMSSession.consumerCreate(JMSSession.java:1814)
at
weblogic.jms.client.JMSSession.createConsumer(JMSSession.java:1645)
at
weblogic.jms.client.JMSSession.createSubscriber(JMSSession.java:1376)
at
weblogic.ejb20.internal.JMSConnectionPoller.setUpTopicSessions(JMSConnection
Poller.java:1461)
at
weblogic.ejb20.internal.JMSConnectionPoller.createJMSConnection(JMSConnectio
nPoller.java:1823)
at
weblogic.ejb20.internal.JMSConnectionPoller.connectToJMS(JMSConnectionPoller
.java:1076)
at
weblogic.ejb20.internal.JMSConnectionPoller.trigger(JMSConnectionPoller.java
:962)
at
weblogic.time.common.internal.ScheduledTrigger.run(ScheduledTrigger.java:243
)
at
weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubjec
t.java:317)
at
weblogic.security.service.SecurityManager.runAs(SecurityManager.java:118)
at
weblogic.time.common.internal.ScheduledTrigger.executeLocally(ScheduledTrigg
er.java:229)
at
weblogic.time.common.internal.ScheduledTrigger.execute(ScheduledTrigger.java
:223)
at
weblogic.time.server.ScheduledTrigger.execute(ScheduledTrigger.java:49)
at weblogic.kernel.ExecuteThread.execute(ExecuteThread.java:197)
at weblogic.kernel.ExecuteThread.run(ExecuteThread.java:170)
Caused by: weblogic.jms.common.JMSSecurityException: Access denied to
resource: type=<jms>, application=, destinationType=topic, resource=T,
action=receive
at weblogic.jms.JMSService.checkPermission(JMSService.java:1139)
at weblogic.jms.JMSService.checkRecvPermission(JMSService.java:1156)
at
weblogic.jms.frontend.FESession.consumerCreate(FESession.java:1047)
at weblogic.jms.frontend.FESession.invoke(FESession.java:2550)
at
weblogic.jms.dispatcher.Request.wrappedFiniteStateMachine(Request.java:609)
at
weblogic.jms.dispatcher.DispatcherImpl.dispatchAsyncInternal(DispatcherImpl.
java:128)
at
weblogic.jms.dispatcher.DispatcherImpl.dispatchSyncFuture(DispatcherImpl.jav
a:180)
at weblogic.jms.dispatcher.DispatcherImpl_WLSkel.invoke(Unknown
Source)
at
weblogic.rmi.internal.BasicServerRef.invoke(BasicServerRef.java:466)
at
weblogic.rmi.internal.BasicServerRef$1.run(BasicServerRef.java:409)
at
weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubjec
t.java:353)
at
weblogic.security.service.SecurityManager.runAs(SecurityManager.java:144)
at
weblogic.rmi.internal.BasicServerRef.handleRequest(BasicServerRef.java:404)
at
weblogic.rmi.internal.BasicExecuteRequest.execute(BasicExecuteRequest.java:3
0)
... 2 more