You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@shiro.apache.org by anton93 <ah...@tradeworks.io> on 2015/12/30 16:09:45 UTC

Help - 401 (Unauthorized) but using full access in ini file

Hello

I currently have a Errai GWT app that is running on Jboss 7, using Apache
Shiro. 
I am trying to get the app to run on Wildfly 9.0.2, however, for some
reason, it is not working, and the problem appears to be related to shiro.

If anyone has any ideas, please let me know. Thanks

*Client*
In the browser, the client is producing a lot of logs, some relevant info
is:
15:36:47 INFO [ClientMessageBusImpl$ProtocolCommandProcessor] bus federated
and running.
Failed to load resource: the server responded with a status of 401
(Unauthorized)
15:36:47 INFO [ClientMessageBusImpl$ProtocolCommandProcessor] session
expired while in state CONNECTED: attempting to reset ...
15:36:47 INFO [InitVotes] init polling system reset ...
15:36:47 INFO [ClientMessageBusImpl] stopping bus ...
15:36:47 INFO [ClientMessageBusImpl] bus initialization started ...

*Server*
Here is the logs, with Trace level, from the server:
appui-dev-local | TRACE [OncePerRequestFilter] Filter 'ShiroFilter' not yet
executed.  Executing now.
appui-dev-local | TRACE [DefaultSecurityManager] Context already contains a
SecurityManager instance.  Returning.
appui-dev-local | TRACE [DefaultSecurityManager] Context already contains a
SecurityManager instance.  Returning.
appui-dev-local | TRACE [AbstractValidatingSessionManager] Attempting to
retrieve session with key
org.apache.shiro.web.session.mgt.WebSessionKey@213c7aca
appui-dev-local | TRACE [AbstractValidatingSessionManager] Attempting to
retrieve session with key
org.apache.shiro.web.session.mgt.WebSessionKey@3da70473
appui-dev-local | DEBUG [DefaultWebSessionManager] Session ID cookie is
disabled - session id will not be acquired from a request cookie.
appui-dev-local | DEBUG [DefaultWebSessionManager] Session ID cookie is
disabled - session id will not be acquired from a request cookie.
appui-dev-local | DEBUG [DefaultSessionManager] Unable to resolve session ID
from SessionKey [org.apache.shiro.web.session.mgt.WebSessionKey@3da70473]. 
Returning null to indicate a session could not be found.
appui-dev-local | DEBUG [DefaultSessionManager] Unable to resolve session ID
from SessionKey [org.apache.shiro.web.session.mgt.WebSessionKey@213c7aca]. 
Returning null to indicate a session could not be found.
appui-dev-local | TRACE [DefaultSecurityManager] No identity
(PrincipalCollection) found in the context.  Looking for a remembered
identity.
appui-dev-local | TRACE [DefaultSecurityManager] No identity
(PrincipalCollection) found in the context.  Looking for a remembered
identity.
appui-dev-local | TRACE [SimpleCookie] No 'rememberMe' cookie value
appui-dev-local | TRACE [DefaultSecurityManager] No remembered identity
found.  Returning original context.
appui-dev-local | TRACE [SimpleCookie] No 'rememberMe' cookie value
appui-dev-local | TRACE [DefaultSecurityManager] No remembered identity
found.  Returning original context.
appui-dev-local | TRACE [DelegatingSubject] attempting to get session;
create = false; session is null = true; session has id = false
appui-dev-local | TRACE [DelegatingSubject] attempting to get session;
create = false; session is null = true; session has id = false
appui-dev-local | TRACE [DelegatingSubject] attempting to get session;
create = false; session is null = true; session has id = false
appui-dev-local | TRACE [DelegatingSubject] attempting to get session;
create = false; session is null = true; session has id = false
appui-dev-local | TRACE [DelegatingSubject] attempting to get session;
create = false; session is null = true; session has id = false
appui-dev-local | TRACE [DelegatingSubject] attempting to get session;
create = false; session is null = true; session has id = false
appui-dev-local | TRACE [ThreadContext] Bound value of type
[org.apache.shiro.web.subject.support.WebDelegatingSubject] for key
[org.apache.shiro.util.ThreadContext_SUBJECT_KEY] to thread [default
task-126]
appui-dev-local | TRACE [ThreadContext] Bound value of type
[org.apache.shiro.web.mgt.DefaultWebSecurityManager] for key
[org.apache.shiro.util.ThreadContext_SECURITY_MANAGER_KEY] to thread
[default task-126]
appui-dev-local | TRACE [ThreadContext] get() - in thread [default task-126]
appui-dev-local | TRACE [ThreadContext] Retrieved value of type
[org.apache.shiro.web.subject.support.WebDelegatingSubject] for key
[org.apache.shiro.util.ThreadContext_SUBJECT_KEY] bound to thread [default
task-126]
appui-dev-local | TRACE [DelegatingSubject] attempting to get session;
create = false; session is null = true; session has id = false
appui-dev-local | TRACE [PathMatchingFilterChainResolver] Matched path
pattern [/*.*] for requestURI [/out.43618-23590.erraiBus].  Utilizing
corresponding filter chain...
appui-dev-local | TRACE [AbstractShiroFilter] Resolved a configured
FilterChain for the current request.
appui-dev-local | TRACE [ProxiedFilterChain] Invoking wrapped filter at
index [0]
appui-dev-local | TRACE [OncePerRequestFilter] Filter 'anon' not yet
executed.  Executing now.
appui-dev-local | TRACE [PathMatchingFilter] Attempting to match pattern
'/*.*' with current requestURI '/out.43618-23590.erraiBus'...
appui-dev-local | TRACE [PathMatchingFilter] Current requestURI matches
pattern '/*.*'.  Determining filter chain execution...
appui-dev-local | TRACE [PathMatchingFilter] Filter 'anon' is enabled for
the current request under path '/*.*' with config [null].  Delegating to
subclass implementation for 'onPreHandle' check.
appui-dev-local | TRACE [AdviceFilter] Invoked preHandle method.  Continuing
chain?: [true]
appui-dev-local | TRACE [ProxiedFilterChain] Invoking original filter chain.
appui-dev-local | TRACE [ThreadContext] get() - in thread [default task-126]
appui-dev-local | TRACE [ThreadContext] Retrieved value of type
[org.apache.shiro.web.subject.support.WebDelegatingSubject] for key
[org.apache.shiro.util.ThreadContext_SUBJECT_KEY] bound to thread [default
task-126]
appui-dev-local | TRACE [DelegatingSubject] attempting to get session;
create = false; session is null = true; session has id = false
appui-dev-local | TRACE [ThreadContext] get() - in thread [default task-126]
appui-dev-local | TRACE [ThreadContext] Retrieved value of type
[org.apache.shiro.web.subject.support.WebDelegatingSubject] for key
[org.apache.shiro.util.ThreadContext_SUBJECT_KEY] bound to thread [default
task-126]
appui-dev-local | TRACE [DelegatingSubject] attempting to get session;
create = true; session is null = true; session has id = false
appui-dev-local | TRACE [DelegatingSubject] Starting session for host
172.18.0.1
appui-dev-local | TRACE [DefaultSessionManager] Creating session for host
172.18.0.1
appui-dev-local | DEBUG [DefaultSessionManager] Creating new EIS record for
new session instance [org.apache.shiro.session.mgt.SimpleSession,id=null]
appui-dev-local | DEBUG [DefaultWebSessionManager] Session ID cookie is
disabled.  No cookie has been set for new session with id
7fca7b38-6e78-4b85-a8ba-2ea4612883a3
appui-dev-local | TRACE [AbstractValidatingSessionManager] Attempting to
retrieve session with key
org.apache.shiro.web.session.mgt.WebSessionKey@63f4222b
appui-dev-local | TRACE [DelegatingSubject] attempting to get session;
create = false; session is null = true; session has id = false
appui-dev-local | TRACE [AbstractValidatingSessionManager] Attempting to
retrieve session with key
org.apache.shiro.web.session.mgt.WebSessionKey@63f4222b
appui-dev-local | TRACE [DelegatingSubject] attempting to get session;
create = false; session is null = true; session has id = false
appui-dev-local | TRACE [DelegatingSubject] attempting to get session;
create = false; session is null = true; session has id = false
appui-dev-local | TRACE [DelegatingSubject] attempting to get session;
create = false; session is null = true; session has id = false
appui-dev-local | DEBUG [HttpSessionProvider] queue session 43618-23590
started
appui-dev-local | TRACE [ThreadContext] Bound value of type
[org.apache.shiro.web.subject.support.WebDelegatingSubject] for key
[org.apache.shiro.util.ThreadContext_SUBJECT_KEY] to thread [default
task-127]
appui-dev-local | TRACE [ThreadContext] Bound value of type
[org.apache.shiro.web.mgt.DefaultWebSecurityManager] for key
[org.apache.shiro.util.ThreadContext_SECURITY_MANAGER_KEY] to thread
[default task-127]
appui-dev-local | TRACE [ThreadContext] get() - in thread [default task-127]
appui-dev-local | TRACE [ThreadContext] Retrieved value of type
[org.apache.shiro.web.subject.support.WebDelegatingSubject] for key
[org.apache.shiro.util.ThreadContext_SUBJECT_KEY] bound to thread [default
task-127]
appui-dev-local | TRACE [DelegatingSubject] attempting to get session;
create = false; session is null = true; session has id = false
appui-dev-local | TRACE [PathMatchingFilterChainResolver] Matched path
pattern [/*.*] for requestURI [/in.43618-23590.erraiBus].  Utilizing
corresponding filter chain...
appui-dev-local | TRACE [AbstractShiroFilter] Resolved a configured
FilterChain for the current request.
appui-dev-local | TRACE [AdviceFilter] Successfully invoked postHandle
method
appui-dev-local | TRACE [AdviceFilter] Successfully invoked afterCompletion
method.
appui-dev-local | TRACE [Context] WELD-000201: Context
org.jboss.weld.context.http.LazyHttpConversationContextImpl@1014f6cb cleared
appui-dev-local | TRACE [ProxiedFilterChain] Invoking wrapped filter at
index [0]
appui-dev-local | TRACE [Context] WELD-000201: Context
org.jboss.weld.context.beanstore.http.LazySessionBeanStore@4cc6419c cleared
appui-dev-local | TRACE [OncePerRequestFilter] Filter 'anon' not yet
executed.  Executing now.
appui-dev-local | TRACE [Context] WELD-000215: Bean store
org.jboss.weld.context.beanstore.http.RequestBeanStore@7fd986c0 is detached
appui-dev-local | TRACE [Context] WELD-000201: Context
org.jboss.weld.context.http.HttpRequestContextImpl@1b5179bc cleared
appui-dev-local | TRACE [Context] WELD-000201: Context
org.jboss.weld.context.beanstore.http.RequestBeanStore@7fd986c0 cleared
appui-dev-local | TRACE [PathMatchingFilter] Attempting to match pattern
'/*.*' with current requestURI '/in.43618-23590.erraiBus'...
appui-dev-local | TRACE [Context] WELD-000215: Bean store
org.jboss.weld.context.beanstore.http.LazySessionBeanStore@5779691c is
detached
appui-dev-local | TRACE [PathMatchingFilter] Current requestURI matches
pattern '/*.*'.  Determining filter chain execution...
appui-dev-local | TRACE [PathMatchingFilter] Filter 'anon' is enabled for
the current request under path '/*.*' with config [null].  Delegating to
subclass implementation for 'onPreHandle' check.
appui-dev-local | TRACE [AdviceFilter] Invoked preHandle method.  Continuing
chain?: [true]
appui-dev-local | TRACE [ProxiedFilterChain] Invoking original filter chain.
appui-dev-local | TRACE [ThreadContext] get() - in thread [default task-127]
appui-dev-local | TRACE [ThreadContext] Retrieved value of type
[org.apache.shiro.web.subject.support.WebDelegatingSubject] for key
[org.apache.shiro.util.ThreadContext_SUBJECT_KEY] bound to thread [default
task-127]
appui-dev-local | TRACE [DelegatingSubject] attempting to get session;
create = false; session is null = true; session has id = false
appui-dev-local | TRACE [ThreadContext] get() - in thread [default task-127]
appui-dev-local | TRACE [ThreadContext] Retrieved value of type
[org.apache.shiro.web.subject.support.WebDelegatingSubject] for key
[org.apache.shiro.util.ThreadContext_SUBJECT_KEY] bound to thread [default
task-127]
appui-dev-local | TRACE [DelegatingSubject] attempting to get session;
create = true; session is null = true; session has id = false
appui-dev-local | TRACE [DelegatingSubject] Starting session for host
172.18.0.1
appui-dev-local | TRACE [DefaultSessionManager] Creating session for host
172.18.0.1
appui-dev-local | DEBUG [DefaultSessionManager] Creating new EIS record for
new session instance [org.apache.shiro.session.mgt.SimpleSession,id=null]
appui-dev-local | DEBUG [DefaultWebSessionManager] Session ID cookie is
disabled.  No cookie has been set for new session with id
e8a14bd5-4c6a-48f3-ae19-cddb1e03c3eb
appui-dev-local | TRACE [AbstractValidatingSessionManager] Attempting to
retrieve session with key
org.apache.shiro.web.session.mgt.WebSessionKey@25608a4
appui-dev-local | TRACE [AbstractValidatingSessionManager] Attempting to
retrieve session with key
org.apache.shiro.web.session.mgt.WebSessionKey@25608a4
appui-dev-local | DEBUG [HttpSessionProvider] queue session 43618-23590
started
appui-dev-local | TRACE [AdviceFilter] Successfully invoked postHandle
method
appui-dev-local | TRACE [AdviceFilter] Successfully invoked afterCompletion
method.

shiro.ini
Here is the relevant portions of the ini file:

[main]
...
sessionManager = org.apache.shiro.web.session.mgt.DefaultWebSessionManager 
securityManager.sessionMode=native 
securityManager.sessionManager=$sessionManager
securityManager.sessionManager.sessionIdCookieEnabled = false 

builtInCacheManager = org.apache.shiro.cache.MemoryConstrainedCacheManager
securityManager.cacheManager = $builtInCacheManager

[urls]
/*.* = anon
#/*.* = noSessionCreation  #not working




--
View this message in context: http://shiro-user.582556.n2.nabble.com/Help-401-Unauthorized-but-using-full-access-in-ini-file-tp7580896.html
Sent from the Shiro User mailing list archive at Nabble.com.

Re: Help - 401 (Unauthorized) but using full access in ini file

Posted by scSynergy <ro...@scsynergy.de>.
I noticed some bugs in 9.0.2 which are not present in 9.0.1 - maybe the
errors are related to the specific WildFly version?



--
View this message in context: http://shiro-user.582556.n2.nabble.com/Help-401-Unauthorized-but-using-full-access-in-ini-file-tp7580896p7580900.html
Sent from the Shiro User mailing list archive at Nabble.com.