[jira] Created: (GERONIMO-4166) EAR missing dependency on j2ee-security breaks Server Console

EAR missing dependency on j2ee-security breaks Server Console
-------------------------------------------------------------

                 Key: GERONIMO-4166
                 URL: https://issues.apache.org/jira/browse/GERONIMO-4166
             Project: Geronimo
          Issue Type: Bug
      Security Level: public (Regular issues)
          Components: console
    Affects Versions: 2.2
            Reporter: Shrey Banga
             Fix For: 2.2
         Attachments: dbPoolPlan.xml, securityRealmPlan.xml, TimeReportDB.sql

I created an ear with security configuration which seemed to get deployed successfully but once deployed, the Web app wars and Application EARS portlets failed with the exception:
java.lang.NullPointerException
        at org.apache.geronimo.console.configmanager.ConfigManagerPortlet.doView(ConfigManagerPortlet.java:239)
        at javax.portlet.GenericPortlet.doDispatch(GenericPortlet.java:247)
        at javax.portlet.GenericPortlet.render(GenericPortlet.java:175)
        at org.apache.pluto.core.PortletServlet.dispatch(PortletServlet.java:208)
        at org.apache.pluto.core.PortletServlet.doGet(PortletServlet.java:139)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:693)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:806)
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
        at org.apache.catalina.core.ApplicationDispatcher.invoke(ApplicationDispatcher.java:630)
        at org.apache.catalina.core.ApplicationDispatcher.doInclude(ApplicationDispatcher.java:535)
        at org.apache.catalina.core.ApplicationDispatcher.include(ApplicationDispatcher.java:472)
        at org.apache.pluto.core.DefaultPortletInvokerService.invoke(DefaultPortletInvokerService.java:167)
        at org.apache.pluto.core.DefaultPortletInvokerService.render(DefaultPortletInvokerService.java:101)
        at org.apache.pluto.core.PortletContainerImpl.doRender(PortletContainerImpl.java:173)
        at org.apache.pluto.driver.tags.PortletTag.doStartTag(PortletTag.java:152)
        at jsp.WEB_002dINF.themes.portlet_002dskin_jsp._jspService(portlet_002dskin_jsp.java:87)
        at org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:70)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:806)
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
        at org.apache.catalina.core.ApplicationDispatcher.invoke(ApplicationDispatcher.java:630)
        at org.apache.catalina.core.ApplicationDispatcher.doInclude(ApplicationDispatcher.java:535)
        at org.apache.catalina.core.ApplicationDispatcher.include(ApplicationDispatcher.java:472)
        at org.apache.jasper.runtime.JspRuntimeLibrary.include(JspRuntimeLibrary.java:968)
        at jsp.WEB_002dINF.themes.default_002dtheme_jsp._jspx_meth_c_005fforEach_005f0(default_002dtheme_jsp.java:196)
        at jsp.WEB_002dINF.themes.default_002dtheme_jsp._jspService(default_002dtheme_jsp.java:101)
        at org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:70)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:806)
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
        at org.apache.catalina.core.ApplicationDispatcher.invoke(ApplicationDispatcher.java:630)
        at org.apache.catalina.core.ApplicationDispatcher.processRequest(ApplicationDispatcher.java:436)
        at org.apache.catalina.core.ApplicationDispatcher.doForward(ApplicationDispatcher.java:374)
        at org.apache.catalina.core.ApplicationDispatcher.forward(ApplicationDispatcher.java:302)
        at org.apache.pluto.driver.PortalDriverServlet.doGet(PortalDriverServlet.java:151)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:693)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:806)
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
        at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)
        at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:175)
        at org.apache.geronimo.tomcat.valve.DefaultSubjectValve.invoke(DefaultSubjectValve.java:56)
        at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:525)
        at org.apache.geronimo.tomcat.GeronimoStandardContext$SystemMethodValve.invoke(GeronimoStandardContext.java:406)
        at org.apache.geronimo.tomcat.valve.GeronimoBeforeAfterValve.invoke(GeronimoBeforeAfterValve.java:47)
        at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:128)
        at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
        at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
        at org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:568)
        at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:286)
        at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:844)
        at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:583)
        at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:447)
        at java.lang.Thread.run(Thread.java:595)

Later I discovered that there are exceptions on the command line when the ear is deployed, but the console reports as successful:


java.security.PrivilegedActionException: java.lang.ClassNotFoundException: org.apache.geronimo.security.realm.providers.GeronimoGroupPrincipal in classloader default/timereportEAR/1.0/car
        at java.security.AccessController.doPrivileged(Native Method)
        at org.apache.geronimo.security.util.ConfigurationUtil.generatePrincipal(ConfigurationUtil.java:72)
        at org.apache.geronimo.security.util.ConfigurationUtil.generatePrincipal(ConfigurationUtil.java:67)...

I'll upload the buggy ear and working ear. To be able to deploy these, you need to do the following:

1) Using "DBManager" portlet, create a database by name "TimeReportDB" and run "TimeReportDB.sql" on this new database.

2) Using "Deploy New" portlet, create a new database pool "TimeReportPool" by specifying
"<GERONIMO_HOME>\repository\org\tranql\tranql-connector-ra\1.4\tranql-connector-ra-1.4.rar" as the "Archive" and "dbPoolPlan.xml" as the "Plan".

3) Using "Deploy New" portlet, create a new security realm "TimeReportRealm" by only specifying "securityRealmPlan.xml" as the "Plan".

4) Now use the "Deploy New" portlet to deploy the timereport_buggy.ear which should be displayed as deployed successfully on the Server Console but should raise exceptions in the command line. After this, the Web App WARS and Application EARs will also fail to open.

--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

     [ https://issues.apache.org/jira/browse/GERONIMO-4166?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Shrey Banga updated GERONIMO-4166:
----------------------------------

    Attachment: dbPoolPlan.xml

> EAR missing dependency on j2ee-security breaks Server Console
> -------------------------------------------------------------
>
>                 Key: GERONIMO-4166
>                 URL: https://issues.apache.org/jira/browse/GERONIMO-4166
>             Project: Geronimo
>          Issue Type: Bug
>      Security Level: public(Regular issues)
>          Components: console
>    Affects Versions: 2.2
>            Reporter: Shrey Banga
>             Fix For: 2.2
>
>         Attachments: dbPoolPlan.xml, securityRealmPlan.xml, TimeReportDB.sql
>
>
> I created an ear with security configuration which seemed to get deployed successfully but once deployed, the Web app wars and Application EARS portlets failed with the exception:
> java.lang.NullPointerException
> at org.apache.geronimo.console.configmanager.ConfigManagerPortlet.doView(ConfigManagerPortlet.java:239)
> at javax.portlet.GenericPortlet.doDispatch(GenericPortlet.java:247)
> at javax.portlet.GenericPortlet.render(GenericPortlet.java:175)
> at org.apache.pluto.core.PortletServlet.dispatch(PortletServlet.java:208)
> at org.apache.pluto.core.PortletServlet.doGet(PortletServlet.java:139)
> at javax.servlet.http.HttpServlet.service(HttpServlet.java:693)
> at javax.servlet.http.HttpServlet.service(HttpServlet.java:806)
> at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
> at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
> at org.apache.catalina.core.ApplicationDispatcher.invoke(ApplicationDispatcher.java:630)
> at org.apache.catalina.core.ApplicationDispatcher.doInclude(ApplicationDispatcher.java:535)
> at org.apache.catalina.core.ApplicationDispatcher.include(ApplicationDispatcher.java:472)
> at org.apache.pluto.core.DefaultPortletInvokerService.invoke(DefaultPortletInvokerService.java:167)
> at org.apache.pluto.core.DefaultPortletInvokerService.render(DefaultPortletInvokerService.java:101)
> at org.apache.pluto.core.PortletContainerImpl.doRender(PortletContainerImpl.java:173)
> at org.apache.pluto.driver.tags.PortletTag.doStartTag(PortletTag.java:152)
> at jsp.WEB_002dINF.themes.portlet_002dskin_jsp._jspService(portlet_002dskin_jsp.java:87)
> at org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:70)
> at javax.servlet.http.HttpServlet.service(HttpServlet.java:806)
> at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
> at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
> at org.apache.catalina.core.ApplicationDispatcher.invoke(ApplicationDispatcher.java:630)
> at org.apache.catalina.core.ApplicationDispatcher.doInclude(ApplicationDispatcher.java:535)
> at org.apache.catalina.core.ApplicationDispatcher.include(ApplicationDispatcher.java:472)
> at org.apache.jasper.runtime.JspRuntimeLibrary.include(JspRuntimeLibrary.java:968)
> at jsp.WEB_002dINF.themes.default_002dtheme_jsp._jspx_meth_c_005fforEach_005f0(default_002dtheme_jsp.java:196)
> at jsp.WEB_002dINF.themes.default_002dtheme_jsp._jspService(default_002dtheme_jsp.java:101)
> at org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:70)
> at javax.servlet.http.HttpServlet.service(HttpServlet.java:806)
> at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
> at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
> at org.apache.catalina.core.ApplicationDispatcher.invoke(ApplicationDispatcher.java:630)
> at org.apache.catalina.core.ApplicationDispatcher.processRequest(ApplicationDispatcher.java:436)
> at org.apache.catalina.core.ApplicationDispatcher.doForward(ApplicationDispatcher.java:374)
> at org.apache.catalina.core.ApplicationDispatcher.forward(ApplicationDispatcher.java:302)
> at org.apache.pluto.driver.PortalDriverServlet.doGet(PortalDriverServlet.java:151)
> at javax.servlet.http.HttpServlet.service(HttpServlet.java:693)
> at javax.servlet.http.HttpServlet.service(HttpServlet.java:806)
> at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
> at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
> at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)
> at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:175)
> at org.apache.geronimo.tomcat.valve.DefaultSubjectValve.invoke(DefaultSubjectValve.java:56)
> at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:525)
> at org.apache.geronimo.tomcat.GeronimoStandardContext$SystemMethodValve.invoke(GeronimoStandardContext.java:406)
> at org.apache.geronimo.tomcat.valve.GeronimoBeforeAfterValve.invoke(GeronimoBeforeAfterValve.java:47)
> at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:128)
> at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
> at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
> at org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:568)
> at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:286)
> at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:844)
> at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:583)
> at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:447)
> at java.lang.Thread.run(Thread.java:595)
> Later I discovered that there are exceptions on the command line when the ear is deployed, but the console reports as successful:
> java.security.PrivilegedActionException: java.lang.ClassNotFoundException: org.apache.geronimo.security.realm.providers.GeronimoGroupPrincipal in classloader default/timereportEAR/1.0/car
>         at java.security.AccessController.doPrivileged(Native Method)
>         at org.apache.geronimo.security.util.ConfigurationUtil.generatePrincipal(ConfigurationUtil.java:72)
>         at org.apache.geronimo.security.util.ConfigurationUtil.generatePrincipal(ConfigurationUtil.java:67)...
> I'll upload the buggy ear and working ear. To be able to deploy these, you need to do the following:
> 1) Using "DBManager" portlet, create a database by name "TimeReportDB" and run "TimeReportDB.sql" on this new database.
> 2) Using "Deploy New" portlet, create a new database pool "TimeReportPool" by specifying
> "<GERONIMO_HOME>\repository\org\tranql\tranql-connector-ra\1.4\tranql-connector-ra-1.4.rar" as the "Archive" and "dbPoolPlan.xml" as the "Plan".
> 3) Using "Deploy New" portlet, create a new security realm "TimeReportRealm" by only specifying "securityRealmPlan.xml" as the "Plan".
> 4) Now use the "Deploy New" portlet to deploy the timereport_buggy.ear which should be displayed as deployed successfully on the Server Console but should raise exceptions in the command line. After this, the Web App WARS and Application EARs will also fail to open.

--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

     [ https://issues.apache.org/jira/browse/GERONIMO-4166?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Shrey Banga updated GERONIMO-4166:
----------------------------------

    Attachment: TimeReportDB.sql

> EAR missing dependency on j2ee-security breaks Server Console
> -------------------------------------------------------------
>
>                 Key: GERONIMO-4166
>                 URL: https://issues.apache.org/jira/browse/GERONIMO-4166
>             Project: Geronimo
>          Issue Type: Bug
>      Security Level: public(Regular issues)
>          Components: console
>    Affects Versions: 2.2
>            Reporter: Shrey Banga
>             Fix For: 2.2
>
>         Attachments: dbPoolPlan.xml, securityRealmPlan.xml, TimeReportDB.sql
>
>
> I created an ear with security configuration which seemed to get deployed successfully but once deployed, the Web app wars and Application EARS portlets failed with the exception:
> java.lang.NullPointerException
> at org.apache.geronimo.console.configmanager.ConfigManagerPortlet.doView(ConfigManagerPortlet.java:239)
> at javax.portlet.GenericPortlet.doDispatch(GenericPortlet.java:247)
> at javax.portlet.GenericPortlet.render(GenericPortlet.java:175)
> at org.apache.pluto.core.PortletServlet.dispatch(PortletServlet.java:208)
> at org.apache.pluto.core.PortletServlet.doGet(PortletServlet.java:139)
> at javax.servlet.http.HttpServlet.service(HttpServlet.java:693)
> at javax.servlet.http.HttpServlet.service(HttpServlet.java:806)
> at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
> at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
> at org.apache.catalina.core.ApplicationDispatcher.invoke(ApplicationDispatcher.java:630)
> at org.apache.catalina.core.ApplicationDispatcher.doInclude(ApplicationDispatcher.java:535)
> at org.apache.catalina.core.ApplicationDispatcher.include(ApplicationDispatcher.java:472)
> at org.apache.pluto.core.DefaultPortletInvokerService.invoke(DefaultPortletInvokerService.java:167)
> at org.apache.pluto.core.DefaultPortletInvokerService.render(DefaultPortletInvokerService.java:101)
> at org.apache.pluto.core.PortletContainerImpl.doRender(PortletContainerImpl.java:173)
> at org.apache.pluto.driver.tags.PortletTag.doStartTag(PortletTag.java:152)
> at jsp.WEB_002dINF.themes.portlet_002dskin_jsp._jspService(portlet_002dskin_jsp.java:87)
> at org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:70)
> at javax.servlet.http.HttpServlet.service(HttpServlet.java:806)
> at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
> at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
> at org.apache.catalina.core.ApplicationDispatcher.invoke(ApplicationDispatcher.java:630)
> at org.apache.catalina.core.ApplicationDispatcher.doInclude(ApplicationDispatcher.java:535)
> at org.apache.catalina.core.ApplicationDispatcher.include(ApplicationDispatcher.java:472)
> at org.apache.jasper.runtime.JspRuntimeLibrary.include(JspRuntimeLibrary.java:968)
> at jsp.WEB_002dINF.themes.default_002dtheme_jsp._jspx_meth_c_005fforEach_005f0(default_002dtheme_jsp.java:196)
> at jsp.WEB_002dINF.themes.default_002dtheme_jsp._jspService(default_002dtheme_jsp.java:101)
> at org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:70)
> at javax.servlet.http.HttpServlet.service(HttpServlet.java:806)
> at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
> at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
> at org.apache.catalina.core.ApplicationDispatcher.invoke(ApplicationDispatcher.java:630)
> at org.apache.catalina.core.ApplicationDispatcher.processRequest(ApplicationDispatcher.java:436)
> at org.apache.catalina.core.ApplicationDispatcher.doForward(ApplicationDispatcher.java:374)
> at org.apache.catalina.core.ApplicationDispatcher.forward(ApplicationDispatcher.java:302)
> at org.apache.pluto.driver.PortalDriverServlet.doGet(PortalDriverServlet.java:151)
> at javax.servlet.http.HttpServlet.service(HttpServlet.java:693)
> at javax.servlet.http.HttpServlet.service(HttpServlet.java:806)
> at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
> at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
> at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)
> at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:175)
> at org.apache.geronimo.tomcat.valve.DefaultSubjectValve.invoke(DefaultSubjectValve.java:56)
> at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:525)
> at org.apache.geronimo.tomcat.GeronimoStandardContext$SystemMethodValve.invoke(GeronimoStandardContext.java:406)
> at org.apache.geronimo.tomcat.valve.GeronimoBeforeAfterValve.invoke(GeronimoBeforeAfterValve.java:47)
> at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:128)
> at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
> at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
> at org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:568)
> at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:286)
> at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:844)
> at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:583)
> at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:447)
> at java.lang.Thread.run(Thread.java:595)
> Later I discovered that there are exceptions on the command line when the ear is deployed, but the console reports as successful:
> java.security.PrivilegedActionException: java.lang.ClassNotFoundException: org.apache.geronimo.security.realm.providers.GeronimoGroupPrincipal in classloader default/timereportEAR/1.0/car
>         at java.security.AccessController.doPrivileged(Native Method)
>         at org.apache.geronimo.security.util.ConfigurationUtil.generatePrincipal(ConfigurationUtil.java:72)
>         at org.apache.geronimo.security.util.ConfigurationUtil.generatePrincipal(ConfigurationUtil.java:67)...
> I'll upload the buggy ear and working ear. To be able to deploy these, you need to do the following:
> 1) Using "DBManager" portlet, create a database by name "TimeReportDB" and run "TimeReportDB.sql" on this new database.
> 2) Using "Deploy New" portlet, create a new database pool "TimeReportPool" by specifying
> "<GERONIMO_HOME>\repository\org\tranql\tranql-connector-ra\1.4\tranql-connector-ra-1.4.rar" as the "Archive" and "dbPoolPlan.xml" as the "Plan".
> 3) Using "Deploy New" portlet, create a new security realm "TimeReportRealm" by only specifying "securityRealmPlan.xml" as the "Plan".
> 4) Now use the "Deploy New" portlet to deploy the timereport_buggy.ear which should be displayed as deployed successfully on the Server Console but should raise exceptions in the command line. After this, the Web App WARS and Application EARs will also fail to open.

--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

     [ https://issues.apache.org/jira/browse/GERONIMO-4166?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Shrey Banga updated GERONIMO-4166:
----------------------------------

    Attachment: securityRealmPlan.xml

> EAR missing dependency on j2ee-security breaks Server Console
> -------------------------------------------------------------
>
>                 Key: GERONIMO-4166
>                 URL: https://issues.apache.org/jira/browse/GERONIMO-4166
>             Project: Geronimo
>          Issue Type: Bug
>      Security Level: public(Regular issues)
>          Components: console
>    Affects Versions: 2.2
>            Reporter: Shrey Banga
>             Fix For: 2.2
>
>         Attachments: dbPoolPlan.xml, securityRealmPlan.xml, TimeReportDB.sql
>
>
> I created an ear with security configuration which seemed to get deployed successfully but once deployed, the Web app wars and Application EARS portlets failed with the exception:
> java.lang.NullPointerException
> at org.apache.geronimo.console.configmanager.ConfigManagerPortlet.doView(ConfigManagerPortlet.java:239)
> at javax.portlet.GenericPortlet.doDispatch(GenericPortlet.java:247)
> at javax.portlet.GenericPortlet.render(GenericPortlet.java:175)
> at org.apache.pluto.core.PortletServlet.dispatch(PortletServlet.java:208)
> at org.apache.pluto.core.PortletServlet.doGet(PortletServlet.java:139)
> at javax.servlet.http.HttpServlet.service(HttpServlet.java:693)
> at javax.servlet.http.HttpServlet.service(HttpServlet.java:806)
> at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
> at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
> at org.apache.catalina.core.ApplicationDispatcher.invoke(ApplicationDispatcher.java:630)
> at org.apache.catalina.core.ApplicationDispatcher.doInclude(ApplicationDispatcher.java:535)
> at org.apache.catalina.core.ApplicationDispatcher.include(ApplicationDispatcher.java:472)
> at org.apache.pluto.core.DefaultPortletInvokerService.invoke(DefaultPortletInvokerService.java:167)
> at org.apache.pluto.core.DefaultPortletInvokerService.render(DefaultPortletInvokerService.java:101)
> at org.apache.pluto.core.PortletContainerImpl.doRender(PortletContainerImpl.java:173)
> at org.apache.pluto.driver.tags.PortletTag.doStartTag(PortletTag.java:152)
> at jsp.WEB_002dINF.themes.portlet_002dskin_jsp._jspService(portlet_002dskin_jsp.java:87)
> at org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:70)
> at javax.servlet.http.HttpServlet.service(HttpServlet.java:806)
> at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
> at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
> at org.apache.catalina.core.ApplicationDispatcher.invoke(ApplicationDispatcher.java:630)
> at org.apache.catalina.core.ApplicationDispatcher.doInclude(ApplicationDispatcher.java:535)
> at org.apache.catalina.core.ApplicationDispatcher.include(ApplicationDispatcher.java:472)
> at org.apache.jasper.runtime.JspRuntimeLibrary.include(JspRuntimeLibrary.java:968)
> at jsp.WEB_002dINF.themes.default_002dtheme_jsp._jspx_meth_c_005fforEach_005f0(default_002dtheme_jsp.java:196)
> at jsp.WEB_002dINF.themes.default_002dtheme_jsp._jspService(default_002dtheme_jsp.java:101)
> at org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:70)
> at javax.servlet.http.HttpServlet.service(HttpServlet.java:806)
> at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
> at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
> at org.apache.catalina.core.ApplicationDispatcher.invoke(ApplicationDispatcher.java:630)
> at org.apache.catalina.core.ApplicationDispatcher.processRequest(ApplicationDispatcher.java:436)
> at org.apache.catalina.core.ApplicationDispatcher.doForward(ApplicationDispatcher.java:374)
> at org.apache.catalina.core.ApplicationDispatcher.forward(ApplicationDispatcher.java:302)
> at org.apache.pluto.driver.PortalDriverServlet.doGet(PortalDriverServlet.java:151)
> at javax.servlet.http.HttpServlet.service(HttpServlet.java:693)
> at javax.servlet.http.HttpServlet.service(HttpServlet.java:806)
> at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
> at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
> at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)
> at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:175)
> at org.apache.geronimo.tomcat.valve.DefaultSubjectValve.invoke(DefaultSubjectValve.java:56)
> at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:525)
> at org.apache.geronimo.tomcat.GeronimoStandardContext$SystemMethodValve.invoke(GeronimoStandardContext.java:406)
> at org.apache.geronimo.tomcat.valve.GeronimoBeforeAfterValve.invoke(GeronimoBeforeAfterValve.java:47)
> at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:128)
> at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
> at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
> at org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:568)
> at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:286)
> at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:844)
> at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:583)
> at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:447)
> at java.lang.Thread.run(Thread.java:595)
> Later I discovered that there are exceptions on the command line when the ear is deployed, but the console reports as successful:
> java.security.PrivilegedActionException: java.lang.ClassNotFoundException: org.apache.geronimo.security.realm.providers.GeronimoGroupPrincipal in classloader default/timereportEAR/1.0/car
>         at java.security.AccessController.doPrivileged(Native Method)
>         at org.apache.geronimo.security.util.ConfigurationUtil.generatePrincipal(ConfigurationUtil.java:72)
>         at org.apache.geronimo.security.util.ConfigurationUtil.generatePrincipal(ConfigurationUtil.java:67)...
> I'll upload the buggy ear and working ear. To be able to deploy these, you need to do the following:
> 1) Using "DBManager" portlet, create a database by name "TimeReportDB" and run "TimeReportDB.sql" on this new database.
> 2) Using "Deploy New" portlet, create a new database pool "TimeReportPool" by specifying
> "<GERONIMO_HOME>\repository\org\tranql\tranql-connector-ra\1.4\tranql-connector-ra-1.4.rar" as the "Archive" and "dbPoolPlan.xml" as the "Plan".
> 3) Using "Deploy New" portlet, create a new security realm "TimeReportRealm" by only specifying "securityRealmPlan.xml" as the "Plan".
> 4) Now use the "Deploy New" portlet to deploy the timereport_buggy.ear which should be displayed as deployed successfully on the Server Console but should raise exceptions in the command line. After this, the Web App WARS and Application EARs will also fail to open.

--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

     [ https://issues.apache.org/jira/browse/GERONIMO-4166?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Shrey Banga updated GERONIMO-4166:
----------------------------------

    Attachment: timereport.ear
                timereport_buggy.ear

> EAR missing dependency on j2ee-security breaks Server Console
> -------------------------------------------------------------
>
>                 Key: GERONIMO-4166
>                 URL: https://issues.apache.org/jira/browse/GERONIMO-4166
>             Project: Geronimo
>          Issue Type: Bug
>      Security Level: public(Regular issues)
>          Components: console
>    Affects Versions: 2.2
>            Reporter: Shrey Banga
>             Fix For: 2.2
>
>         Attachments: dbPoolPlan.xml, securityRealmPlan.xml, timereport.ear, timereport_buggy.ear, TimeReportDB.sql
>
>
> I created an ear with security configuration which seemed to get deployed successfully but once deployed, the Web app wars and Application EARS portlets failed with the exception:
> java.lang.NullPointerException
> at org.apache.geronimo.console.configmanager.ConfigManagerPortlet.doView(ConfigManagerPortlet.java:239)
> at javax.portlet.GenericPortlet.doDispatch(GenericPortlet.java:247)
> at javax.portlet.GenericPortlet.render(GenericPortlet.java:175)
> at org.apache.pluto.core.PortletServlet.dispatch(PortletServlet.java:208)
> at org.apache.pluto.core.PortletServlet.doGet(PortletServlet.java:139)
> at javax.servlet.http.HttpServlet.service(HttpServlet.java:693)
> at javax.servlet.http.HttpServlet.service(HttpServlet.java:806)
> at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
> at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
> at org.apache.catalina.core.ApplicationDispatcher.invoke(ApplicationDispatcher.java:630)
> at org.apache.catalina.core.ApplicationDispatcher.doInclude(ApplicationDispatcher.java:535)
> at org.apache.catalina.core.ApplicationDispatcher.include(ApplicationDispatcher.java:472)
> at org.apache.pluto.core.DefaultPortletInvokerService.invoke(DefaultPortletInvokerService.java:167)
> at org.apache.pluto.core.DefaultPortletInvokerService.render(DefaultPortletInvokerService.java:101)
> at org.apache.pluto.core.PortletContainerImpl.doRender(PortletContainerImpl.java:173)
> at org.apache.pluto.driver.tags.PortletTag.doStartTag(PortletTag.java:152)
> at jsp.WEB_002dINF.themes.portlet_002dskin_jsp._jspService(portlet_002dskin_jsp.java:87)
> at org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:70)
> at javax.servlet.http.HttpServlet.service(HttpServlet.java:806)
> at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
> at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
> at org.apache.catalina.core.ApplicationDispatcher.invoke(ApplicationDispatcher.java:630)
> at org.apache.catalina.core.ApplicationDispatcher.doInclude(ApplicationDispatcher.java:535)
> at org.apache.catalina.core.ApplicationDispatcher.include(ApplicationDispatcher.java:472)
> at org.apache.jasper.runtime.JspRuntimeLibrary.include(JspRuntimeLibrary.java:968)
> at jsp.WEB_002dINF.themes.default_002dtheme_jsp._jspx_meth_c_005fforEach_005f0(default_002dtheme_jsp.java:196)
> at jsp.WEB_002dINF.themes.default_002dtheme_jsp._jspService(default_002dtheme_jsp.java:101)
> at org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:70)
> at javax.servlet.http.HttpServlet.service(HttpServlet.java:806)
> at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
> at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
> at org.apache.catalina.core.ApplicationDispatcher.invoke(ApplicationDispatcher.java:630)
> at org.apache.catalina.core.ApplicationDispatcher.processRequest(ApplicationDispatcher.java:436)
> at org.apache.catalina.core.ApplicationDispatcher.doForward(ApplicationDispatcher.java:374)
> at org.apache.catalina.core.ApplicationDispatcher.forward(ApplicationDispatcher.java:302)
> at org.apache.pluto.driver.PortalDriverServlet.doGet(PortalDriverServlet.java:151)
> at javax.servlet.http.HttpServlet.service(HttpServlet.java:693)
> at javax.servlet.http.HttpServlet.service(HttpServlet.java:806)
> at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
> at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
> at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)
> at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:175)
> at org.apache.geronimo.tomcat.valve.DefaultSubjectValve.invoke(DefaultSubjectValve.java:56)
> at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:525)
> at org.apache.geronimo.tomcat.GeronimoStandardContext$SystemMethodValve.invoke(GeronimoStandardContext.java:406)
> at org.apache.geronimo.tomcat.valve.GeronimoBeforeAfterValve.invoke(GeronimoBeforeAfterValve.java:47)
> at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:128)
> at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
> at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
> at org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:568)
> at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:286)
> at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:844)
> at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:583)
> at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:447)
> at java.lang.Thread.run(Thread.java:595)
> Later I discovered that there are exceptions on the command line when the ear is deployed, but the console reports as successful:
> java.security.PrivilegedActionException: java.lang.ClassNotFoundException: org.apache.geronimo.security.realm.providers.GeronimoGroupPrincipal in classloader default/timereportEAR/1.0/car
>         at java.security.AccessController.doPrivileged(Native Method)
>         at org.apache.geronimo.security.util.ConfigurationUtil.generatePrincipal(ConfigurationUtil.java:72)
>         at org.apache.geronimo.security.util.ConfigurationUtil.generatePrincipal(ConfigurationUtil.java:67)...
> I'll upload the buggy ear and working ear. To be able to deploy these, you need to do the following:
> 1) Using "DBManager" portlet, create a database by name "TimeReportDB" and run "TimeReportDB.sql" on this new database.
> 2) Using "Deploy New" portlet, create a new database pool "TimeReportPool" by specifying
> "<GERONIMO_HOME>\repository\org\tranql\tranql-connector-ra\1.4\tranql-connector-ra-1.4.rar" as the "Archive" and "dbPoolPlan.xml" as the "Plan".
> 3) Using "Deploy New" portlet, create a new security realm "TimeReportRealm" by only specifying "securityRealmPlan.xml" as the "Plan".
> 4) Now use the "Deploy New" portlet to deploy the timereport_buggy.ear which should be displayed as deployed successfully on the Server Console but should raise exceptions in the command line. After this, the Web App WARS and Application EARs will also fail to open.

--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

    [ https://issues.apache.org/jira/browse/GERONIMO-4166?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12608754#action_12608754 ]

Shrey Banga commented on GERONIMO-4166:
---------------------------------------

Adding the dependency to j2ee-security successfully deploys the application but with the buggy ear, it should have ideally reported the error on the server console and not have broken the Web App wars and Application EARs.
I have attached timereport_buggy.ear and timereport.ear, the only difference being the dependency to j2ee-security.

> EAR missing dependency on j2ee-security breaks Server Console
> -------------------------------------------------------------
>
>                 Key: GERONIMO-4166
>                 URL: https://issues.apache.org/jira/browse/GERONIMO-4166
>             Project: Geronimo
>          Issue Type: Bug
>      Security Level: public(Regular issues)
>          Components: console
>    Affects Versions: 2.2
>            Reporter: Shrey Banga
>             Fix For: 2.2
>
>         Attachments: dbPoolPlan.xml, securityRealmPlan.xml, timereport.ear, timereport_buggy.ear, TimeReportDB.sql
>
>
> I created an ear with security configuration which seemed to get deployed successfully but once deployed, the Web app wars and Application EARS portlets failed with the exception:
> java.lang.NullPointerException
> at org.apache.geronimo.console.configmanager.ConfigManagerPortlet.doView(ConfigManagerPortlet.java:239)
> at javax.portlet.GenericPortlet.doDispatch(GenericPortlet.java:247)
> at javax.portlet.GenericPortlet.render(GenericPortlet.java:175)
> at org.apache.pluto.core.PortletServlet.dispatch(PortletServlet.java:208)
> at org.apache.pluto.core.PortletServlet.doGet(PortletServlet.java:139)
> at javax.servlet.http.HttpServlet.service(HttpServlet.java:693)
> at javax.servlet.http.HttpServlet.service(HttpServlet.java:806)
> at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
> at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
> at org.apache.catalina.core.ApplicationDispatcher.invoke(ApplicationDispatcher.java:630)
> at org.apache.catalina.core.ApplicationDispatcher.doInclude(ApplicationDispatcher.java:535)
> at org.apache.catalina.core.ApplicationDispatcher.include(ApplicationDispatcher.java:472)
> at org.apache.pluto.core.DefaultPortletInvokerService.invoke(DefaultPortletInvokerService.java:167)
> at org.apache.pluto.core.DefaultPortletInvokerService.render(DefaultPortletInvokerService.java:101)
> at org.apache.pluto.core.PortletContainerImpl.doRender(PortletContainerImpl.java:173)
> at org.apache.pluto.driver.tags.PortletTag.doStartTag(PortletTag.java:152)
> at jsp.WEB_002dINF.themes.portlet_002dskin_jsp._jspService(portlet_002dskin_jsp.java:87)
> at org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:70)
> at javax.servlet.http.HttpServlet.service(HttpServlet.java:806)
> at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
> at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
> at org.apache.catalina.core.ApplicationDispatcher.invoke(ApplicationDispatcher.java:630)
> at org.apache.catalina.core.ApplicationDispatcher.doInclude(ApplicationDispatcher.java:535)
> at org.apache.catalina.core.ApplicationDispatcher.include(ApplicationDispatcher.java:472)
> at org.apache.jasper.runtime.JspRuntimeLibrary.include(JspRuntimeLibrary.java:968)
> at jsp.WEB_002dINF.themes.default_002dtheme_jsp._jspx_meth_c_005fforEach_005f0(default_002dtheme_jsp.java:196)
> at jsp.WEB_002dINF.themes.default_002dtheme_jsp._jspService(default_002dtheme_jsp.java:101)
> at org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:70)
> at javax.servlet.http.HttpServlet.service(HttpServlet.java:806)
> at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
> at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
> at org.apache.catalina.core.ApplicationDispatcher.invoke(ApplicationDispatcher.java:630)
> at org.apache.catalina.core.ApplicationDispatcher.processRequest(ApplicationDispatcher.java:436)
> at org.apache.catalina.core.ApplicationDispatcher.doForward(ApplicationDispatcher.java:374)
> at org.apache.catalina.core.ApplicationDispatcher.forward(ApplicationDispatcher.java:302)
> at org.apache.pluto.driver.PortalDriverServlet.doGet(PortalDriverServlet.java:151)
> at javax.servlet.http.HttpServlet.service(HttpServlet.java:693)
> at javax.servlet.http.HttpServlet.service(HttpServlet.java:806)
> at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
> at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
> at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)
> at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:175)
> at org.apache.geronimo.tomcat.valve.DefaultSubjectValve.invoke(DefaultSubjectValve.java:56)
> at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:525)
> at org.apache.geronimo.tomcat.GeronimoStandardContext$SystemMethodValve.invoke(GeronimoStandardContext.java:406)
> at org.apache.geronimo.tomcat.valve.GeronimoBeforeAfterValve.invoke(GeronimoBeforeAfterValve.java:47)
> at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:128)
> at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
> at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
> at org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:568)
> at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:286)
> at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:844)
> at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:583)
> at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:447)
> at java.lang.Thread.run(Thread.java:595)
> Later I discovered that there are exceptions on the command line when the ear is deployed, but the console reports as successful:
> java.security.PrivilegedActionException: java.lang.ClassNotFoundException: org.apache.geronimo.security.realm.providers.GeronimoGroupPrincipal in classloader default/timereportEAR/1.0/car
>         at java.security.AccessController.doPrivileged(Native Method)
>         at org.apache.geronimo.security.util.ConfigurationUtil.generatePrincipal(ConfigurationUtil.java:72)
>         at org.apache.geronimo.security.util.ConfigurationUtil.generatePrincipal(ConfigurationUtil.java:67)...
> I'll upload the buggy ear and working ear. To be able to deploy these, you need to do the following:
> 1) Using "DBManager" portlet, create a database by name "TimeReportDB" and run "TimeReportDB.sql" on this new database.
> 2) Using "Deploy New" portlet, create a new database pool "TimeReportPool" by specifying
> "<GERONIMO_HOME>\repository\org\tranql\tranql-connector-ra\1.4\tranql-connector-ra-1.4.rar" as the "Archive" and "dbPoolPlan.xml" as the "Plan".
> 3) Using "Deploy New" portlet, create a new security realm "TimeReportRealm" by only specifying "securityRealmPlan.xml" as the "Plan".
> 4) Now use the "Deploy New" portlet to deploy the timereport_buggy.ear which should be displayed as deployed successfully on the Server Console but should raise exceptions in the command line. After this, the Web App WARS and Application EARs will also fail to open.

--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

     [ https://issues.apache.org/jira/browse/GERONIMO-4166?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Manu T George reassigned GERONIMO-4166:
---------------------------------------

    Assignee: Manu T George

> EAR missing dependency on j2ee-security breaks Server Console
> -------------------------------------------------------------
>
>                 Key: GERONIMO-4166
>                 URL: https://issues.apache.org/jira/browse/GERONIMO-4166
>             Project: Geronimo
>          Issue Type: Bug
>      Security Level: public(Regular issues)
>          Components: console
>    Affects Versions: 2.2
>            Reporter: Shrey Banga
>            Assignee: Manu T George
>             Fix For: 2.2
>
>         Attachments: dbPoolPlan.xml, securityRealmPlan.xml, timereport.ear, timereport_buggy.ear, TimeReportDB.sql
>
>
> I created an ear with security configuration which seemed to get deployed successfully but once deployed, the Web app wars and Application EARS portlets failed with the exception:
> java.lang.NullPointerException
> at org.apache.geronimo.console.configmanager.ConfigManagerPortlet.doView(ConfigManagerPortlet.java:239)
> at javax.portlet.GenericPortlet.doDispatch(GenericPortlet.java:247)
> at javax.portlet.GenericPortlet.render(GenericPortlet.java:175)
> at org.apache.pluto.core.PortletServlet.dispatch(PortletServlet.java:208)
> at org.apache.pluto.core.PortletServlet.doGet(PortletServlet.java:139)
> at javax.servlet.http.HttpServlet.service(HttpServlet.java:693)
> at javax.servlet.http.HttpServlet.service(HttpServlet.java:806)
> at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
> at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
> at org.apache.catalina.core.ApplicationDispatcher.invoke(ApplicationDispatcher.java:630)
> at org.apache.catalina.core.ApplicationDispatcher.doInclude(ApplicationDispatcher.java:535)
> at org.apache.catalina.core.ApplicationDispatcher.include(ApplicationDispatcher.java:472)
> at org.apache.pluto.core.DefaultPortletInvokerService.invoke(DefaultPortletInvokerService.java:167)
> at org.apache.pluto.core.DefaultPortletInvokerService.render(DefaultPortletInvokerService.java:101)
> at org.apache.pluto.core.PortletContainerImpl.doRender(PortletContainerImpl.java:173)
> at org.apache.pluto.driver.tags.PortletTag.doStartTag(PortletTag.java:152)
> at jsp.WEB_002dINF.themes.portlet_002dskin_jsp._jspService(portlet_002dskin_jsp.java:87)
> at org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:70)
> at javax.servlet.http.HttpServlet.service(HttpServlet.java:806)
> at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
> at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
> at org.apache.catalina.core.ApplicationDispatcher.invoke(ApplicationDispatcher.java:630)
> at org.apache.catalina.core.ApplicationDispatcher.doInclude(ApplicationDispatcher.java:535)
> at org.apache.catalina.core.ApplicationDispatcher.include(ApplicationDispatcher.java:472)
> at org.apache.jasper.runtime.JspRuntimeLibrary.include(JspRuntimeLibrary.java:968)
> at jsp.WEB_002dINF.themes.default_002dtheme_jsp._jspx_meth_c_005fforEach_005f0(default_002dtheme_jsp.java:196)
> at jsp.WEB_002dINF.themes.default_002dtheme_jsp._jspService(default_002dtheme_jsp.java:101)
> at org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:70)
> at javax.servlet.http.HttpServlet.service(HttpServlet.java:806)
> at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
> at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
> at org.apache.catalina.core.ApplicationDispatcher.invoke(ApplicationDispatcher.java:630)
> at org.apache.catalina.core.ApplicationDispatcher.processRequest(ApplicationDispatcher.java:436)
> at org.apache.catalina.core.ApplicationDispatcher.doForward(ApplicationDispatcher.java:374)
> at org.apache.catalina.core.ApplicationDispatcher.forward(ApplicationDispatcher.java:302)
> at org.apache.pluto.driver.PortalDriverServlet.doGet(PortalDriverServlet.java:151)
> at javax.servlet.http.HttpServlet.service(HttpServlet.java:693)
> at javax.servlet.http.HttpServlet.service(HttpServlet.java:806)
> at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
> at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
> at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)
> at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:175)
> at org.apache.geronimo.tomcat.valve.DefaultSubjectValve.invoke(DefaultSubjectValve.java:56)
> at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:525)
> at org.apache.geronimo.tomcat.GeronimoStandardContext$SystemMethodValve.invoke(GeronimoStandardContext.java:406)
> at org.apache.geronimo.tomcat.valve.GeronimoBeforeAfterValve.invoke(GeronimoBeforeAfterValve.java:47)
> at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:128)
> at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
> at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
> at org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:568)
> at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:286)
> at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:844)
> at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:583)
> at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:447)
> at java.lang.Thread.run(Thread.java:595)
> Later I discovered that there are exceptions on the command line when the ear is deployed, but the console reports as successful:
> java.security.PrivilegedActionException: java.lang.ClassNotFoundException: org.apache.geronimo.security.realm.providers.GeronimoGroupPrincipal in classloader default/timereportEAR/1.0/car
>         at java.security.AccessController.doPrivileged(Native Method)
>         at org.apache.geronimo.security.util.ConfigurationUtil.generatePrincipal(ConfigurationUtil.java:72)
>         at org.apache.geronimo.security.util.ConfigurationUtil.generatePrincipal(ConfigurationUtil.java:67)...
> I'll upload the buggy ear and working ear. To be able to deploy these, you need to do the following:
> 1) Using "DBManager" portlet, create a database by name "TimeReportDB" and run "TimeReportDB.sql" on this new database.
> 2) Using "Deploy New" portlet, create a new database pool "TimeReportPool" by specifying
> "<GERONIMO_HOME>\repository\org\tranql\tranql-connector-ra\1.4\tranql-connector-ra-1.4.rar" as the "Archive" and "dbPoolPlan.xml" as the "Plan".
> 3) Using "Deploy New" portlet, create a new security realm "TimeReportRealm" by only specifying "securityRealmPlan.xml" as the "Plan".
> 4) Now use the "Deploy New" portlet to deploy the timereport_buggy.ear which should be displayed as deployed successfully on the Server Console but should raise exceptions in the command line. After this, the Web App WARS and Application EARs will also fail to open.

--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

    [ https://issues.apache.org/jira/browse/GERONIMO-4166?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12610533#action_12610533 ]

Manu T George commented on GERONIMO-4166:
-----------------------------------------

Logging an error and passing a message to the console on failure to start an EAR instead of throwing PortletException and also checking for null configuration as in the above case

> EAR missing dependency on j2ee-security breaks Server Console
> -------------------------------------------------------------
>
>                 Key: GERONIMO-4166
>                 URL: https://issues.apache.org/jira/browse/GERONIMO-4166
>             Project: Geronimo
>          Issue Type: Bug
>      Security Level: public(Regular issues)
>          Components: console
>    Affects Versions: 2.2
>            Reporter: Shrey Banga
>            Assignee: Manu T George
>             Fix For: 2.2
>
>         Attachments: dbPoolPlan.xml, securityRealmPlan.xml, timereport.ear, timereport_buggy.ear, TimeReportDB.sql
>
>
> I created an ear with security configuration which seemed to get deployed successfully but once deployed, the Web app wars and Application EARS portlets failed with the exception:
> java.lang.NullPointerException
> at org.apache.geronimo.console.configmanager.ConfigManagerPortlet.doView(ConfigManagerPortlet.java:239)
> at javax.portlet.GenericPortlet.doDispatch(GenericPortlet.java:247)
> at javax.portlet.GenericPortlet.render(GenericPortlet.java:175)
> at org.apache.pluto.core.PortletServlet.dispatch(PortletServlet.java:208)
> at org.apache.pluto.core.PortletServlet.doGet(PortletServlet.java:139)
> at javax.servlet.http.HttpServlet.service(HttpServlet.java:693)
> at javax.servlet.http.HttpServlet.service(HttpServlet.java:806)
> at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
> at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
> at org.apache.catalina.core.ApplicationDispatcher.invoke(ApplicationDispatcher.java:630)
> at org.apache.catalina.core.ApplicationDispatcher.doInclude(ApplicationDispatcher.java:535)
> at org.apache.catalina.core.ApplicationDispatcher.include(ApplicationDispatcher.java:472)
> at org.apache.pluto.core.DefaultPortletInvokerService.invoke(DefaultPortletInvokerService.java:167)
> at org.apache.pluto.core.DefaultPortletInvokerService.render(DefaultPortletInvokerService.java:101)
> at org.apache.pluto.core.PortletContainerImpl.doRender(PortletContainerImpl.java:173)
> at org.apache.pluto.driver.tags.PortletTag.doStartTag(PortletTag.java:152)
> at jsp.WEB_002dINF.themes.portlet_002dskin_jsp._jspService(portlet_002dskin_jsp.java:87)
> at org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:70)
> at javax.servlet.http.HttpServlet.service(HttpServlet.java:806)
> at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
> at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
> at org.apache.catalina.core.ApplicationDispatcher.invoke(ApplicationDispatcher.java:630)
> at org.apache.catalina.core.ApplicationDispatcher.doInclude(ApplicationDispatcher.java:535)
> at org.apache.catalina.core.ApplicationDispatcher.include(ApplicationDispatcher.java:472)
> at org.apache.jasper.runtime.JspRuntimeLibrary.include(JspRuntimeLibrary.java:968)
> at jsp.WEB_002dINF.themes.default_002dtheme_jsp._jspx_meth_c_005fforEach_005f0(default_002dtheme_jsp.java:196)
> at jsp.WEB_002dINF.themes.default_002dtheme_jsp._jspService(default_002dtheme_jsp.java:101)
> at org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:70)
> at javax.servlet.http.HttpServlet.service(HttpServlet.java:806)
> at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
> at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
> at org.apache.catalina.core.ApplicationDispatcher.invoke(ApplicationDispatcher.java:630)
> at org.apache.catalina.core.ApplicationDispatcher.processRequest(ApplicationDispatcher.java:436)
> at org.apache.catalina.core.ApplicationDispatcher.doForward(ApplicationDispatcher.java:374)
> at org.apache.catalina.core.ApplicationDispatcher.forward(ApplicationDispatcher.java:302)
> at org.apache.pluto.driver.PortalDriverServlet.doGet(PortalDriverServlet.java:151)
> at javax.servlet.http.HttpServlet.service(HttpServlet.java:693)
> at javax.servlet.http.HttpServlet.service(HttpServlet.java:806)
> at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
> at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
> at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)
> at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:175)
> at org.apache.geronimo.tomcat.valve.DefaultSubjectValve.invoke(DefaultSubjectValve.java:56)
> at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:525)
> at org.apache.geronimo.tomcat.GeronimoStandardContext$SystemMethodValve.invoke(GeronimoStandardContext.java:406)
> at org.apache.geronimo.tomcat.valve.GeronimoBeforeAfterValve.invoke(GeronimoBeforeAfterValve.java:47)
> at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:128)
> at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
> at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
> at org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:568)
> at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:286)
> at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:844)
> at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:583)
> at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:447)
> at java.lang.Thread.run(Thread.java:595)
> Later I discovered that there are exceptions on the command line when the ear is deployed, but the console reports as successful:
> java.security.PrivilegedActionException: java.lang.ClassNotFoundException: org.apache.geronimo.security.realm.providers.GeronimoGroupPrincipal in classloader default/timereportEAR/1.0/car
>         at java.security.AccessController.doPrivileged(Native Method)
>         at org.apache.geronimo.security.util.ConfigurationUtil.generatePrincipal(ConfigurationUtil.java:72)
>         at org.apache.geronimo.security.util.ConfigurationUtil.generatePrincipal(ConfigurationUtil.java:67)...
> I'll upload the buggy ear and working ear. To be able to deploy these, you need to do the following:
> 1) Using "DBManager" portlet, create a database by name "TimeReportDB" and run "TimeReportDB.sql" on this new database.
> 2) Using "Deploy New" portlet, create a new database pool "TimeReportPool" by specifying
> "<GERONIMO_HOME>\repository\org\tranql\tranql-connector-ra\1.4\tranql-connector-ra-1.4.rar" as the "Archive" and "dbPoolPlan.xml" as the "Plan".
> 3) Using "Deploy New" portlet, create a new security realm "TimeReportRealm" by only specifying "securityRealmPlan.xml" as the "Plan".
> 4) Now use the "Deploy New" portlet to deploy the timereport_buggy.ear which should be displayed as deployed successfully on the Server Console but should raise exceptions in the command line. After this, the Web App WARS and Application EARs will also fail to open.

--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

     [ https://issues.apache.org/jira/browse/GERONIMO-4166?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Manu T George updated GERONIMO-4166:
------------------------------------

    Attachment: G4166_r673785

> EAR missing dependency on j2ee-security breaks Server Console
> -------------------------------------------------------------
>
>                 Key: GERONIMO-4166
>                 URL: