You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@geronimo.apache.org by "John Sisson (JIRA)" <de...@geronimo.apache.org> on 2005/03/10 10:42:52 UTC

[jira] Created: (GERONIMO-603) IllegalArgumentException when deploying WebApp containing a url-pattern of /* in security-constraint

IllegalArgumentException when deploying WebApp containing a url-pattern of /* in security-constraint
----------------------------------------------------------------------------------------------------

         Key: GERONIMO-603
         URL: http://issues.apache.org/jira/browse/GERONIMO-603
     Project: Geronimo
        Type: Bug
  Components: web  
    Reporter: John Sisson


For example,

<web-app>
  ..
  <security-constraint>
    <web-resource-collection>
      <web-resource-name>Access to all of the APP</web-resource-name>
      <url-pattern>/*</url-pattern>
    </web-resource-collection>
  ..
  </security-constraint>
  ..
</web-app>

The java.lang.IllegalArgumentException("Qualifier patterns in the URLPatternSpec cannot match the first URLPattern") exception is thrown from:

javax.security.jacc.URLPatternSpec.<init>(java.lang.String) line: 54
javax.security.jacc.WebResourcePermission.<init>(java.lang.String, java.lang.String) line: 54
org.apache.geronimo.jetty.deployment.JettyModuleBuilder.buildSpecSecurityConfig(..) line: 1000
org.apache.geronimo.jetty.deployment.JettyModuleBuilder.addGBeans(..) line: 400

Looking at the last paragraph of page 22 of the JACC spec, it seems this should be allowed as it paragraph discusses patterns being made irrelevant by the presence of the path prefix pattern "/*" in a deployment descriptor.


-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
   http://issues.apache.org/jira/secure/Administrators.jspa
-
If you want more information on JIRA, or have a bug to report see:
   http://www.atlassian.com/software/jira


[jira] Updated: (GERONIMO-603) IllegalArgumentException when deploying WebApp containing a url-pattern of /* in security-constraint

Posted by "David Jencks (JIRA)" <de...@geronimo.apache.org>.
     [ http://issues.apache.org/jira/browse/GERONIMO-603?page=all ]

David Jencks updated GERONIMO-603:
----------------------------------

    Fix Version: 1.0-M5
    Description: 
For example,

<web-app>
  ..
  <security-constraint>
    <web-resource-collection>
      <web-resource-name>Access to all of the APP</web-resource-name>
      <url-pattern>/*</url-pattern>
    </web-resource-collection>
  ..
  </security-constraint>
  ..
</web-app>

The java.lang.IllegalArgumentException("Qualifier patterns in the URLPatternSpec cannot match the first URLPattern") exception is thrown from:

javax.security.jacc.URLPatternSpec.<init>(java.lang.String) line: 54
javax.security.jacc.WebResourcePermission.<init>(java.lang.String, java.lang.String) line: 54
org.apache.geronimo.jetty.deployment.JettyModuleBuilder.buildSpecSecurityConfig(..) line: 1000
org.apache.geronimo.jetty.deployment.JettyModuleBuilder.addGBeans(..) line: 400

Looking at the last paragraph of page 22 of the JACC spec, it seems this should be allowed as it paragraph discusses patterns being made irrelevant by the presence of the path prefix pattern "/*" in a deployment descriptor.


  was:
For example,

<web-app>
  ..
  <security-constraint>
    <web-resource-collection>
      <web-resource-name>Access to all of the APP</web-resource-name>
      <url-pattern>/*</url-pattern>
    </web-resource-collection>
  ..
  </security-constraint>
  ..
</web-app>

The java.lang.IllegalArgumentException("Qualifier patterns in the URLPatternSpec cannot match the first URLPattern") exception is thrown from:

javax.security.jacc.URLPatternSpec.<init>(java.lang.String) line: 54
javax.security.jacc.WebResourcePermission.<init>(java.lang.String, java.lang.String) line: 54
org.apache.geronimo.jetty.deployment.JettyModuleBuilder.buildSpecSecurityConfig(..) line: 1000
org.apache.geronimo.jetty.deployment.JettyModuleBuilder.addGBeans(..) line: 400

Looking at the last paragraph of page 22 of the JACC spec, it seems this should be allowed as it paragraph discusses patterns being made irrelevant by the presence of the path prefix pattern "/*" in a deployment descriptor.


    Environment: 

> IllegalArgumentException when deploying WebApp containing a url-pattern of /* in security-constraint
> ----------------------------------------------------------------------------------------------------
>
>          Key: GERONIMO-603
>          URL: http://issues.apache.org/jira/browse/GERONIMO-603
>      Project: Geronimo
>         Type: Bug
>   Components: web
>     Reporter: John Sisson
>     Assignee: Alan Cabrera
>      Fix For: 1.0-M5

>
> For example,
> <web-app>
>   ..
>   <security-constraint>
>     <web-resource-collection>
>       <web-resource-name>Access to all of the APP</web-resource-name>
>       <url-pattern>/*</url-pattern>
>     </web-resource-collection>
>   ..
>   </security-constraint>
>   ..
> </web-app>
> The java.lang.IllegalArgumentException("Qualifier patterns in the URLPatternSpec cannot match the first URLPattern") exception is thrown from:
> javax.security.jacc.URLPatternSpec.<init>(java.lang.String) line: 54
> javax.security.jacc.WebResourcePermission.<init>(java.lang.String, java.lang.String) line: 54
> org.apache.geronimo.jetty.deployment.JettyModuleBuilder.buildSpecSecurityConfig(..) line: 1000
> org.apache.geronimo.jetty.deployment.JettyModuleBuilder.addGBeans(..) line: 400
> Looking at the last paragraph of page 22 of the JACC spec, it seems this should be allowed as it paragraph discusses patterns being made irrelevant by the presence of the path prefix pattern "/*" in a deployment descriptor.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
   http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see:
   http://www.atlassian.com/software/jira


[jira] Updated: (GERONIMO-603) IllegalArgumentException when deploying WebApp containing a url-pattern of /* in security-constraint

Posted by "Matt Hogstrom (JIRA)" <de...@geronimo.apache.org>.
     [ http://issues.apache.org/jira/browse/GERONIMO-603?page=all ]

Matt Hogstrom updated GERONIMO-603:
-----------------------------------

    Fix Version: 1.1
                     (was: 1.0)

Not sure if this is still an issue.  Alan, I'm moving it to 1.x.  Feel free to bring it back if you think this needs to be fixed for 1.0

> IllegalArgumentException when deploying WebApp containing a url-pattern of /* in security-constraint
> ----------------------------------------------------------------------------------------------------
>
>          Key: GERONIMO-603
>          URL: http://issues.apache.org/jira/browse/GERONIMO-603
>      Project: Geronimo
>         Type: Bug
>   Components: web
>     Reporter: John Sisson
>     Assignee: Alan Cabrera
>      Fix For: 1.1

>
> For example,
> <web-app>
>   ..
>   <security-constraint>
>     <web-resource-collection>
>       <web-resource-name>Access to all of the APP</web-resource-name>
>       <url-pattern>/*</url-pattern>
>     </web-resource-collection>
>   ..
>   </security-constraint>
>   ..
> </web-app>
> The java.lang.IllegalArgumentException("Qualifier patterns in the URLPatternSpec cannot match the first URLPattern") exception is thrown from:
> javax.security.jacc.URLPatternSpec.<init>(java.lang.String) line: 54
> javax.security.jacc.WebResourcePermission.<init>(java.lang.String, java.lang.String) line: 54
> org.apache.geronimo.jetty.deployment.JettyModuleBuilder.buildSpecSecurityConfig(..) line: 1000
> org.apache.geronimo.jetty.deployment.JettyModuleBuilder.addGBeans(..) line: 400
> Looking at the last paragraph of page 22 of the JACC spec, it seems this should be allowed as it paragraph discusses patterns being made irrelevant by the presence of the path prefix pattern "/*" in a deployment descriptor.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
   http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see:
   http://www.atlassian.com/software/jira


[jira] Assigned: (GERONIMO-603) IllegalArgumentException when deploying WebApp containing a url-pattern of /* in security-constraint

Posted by "Alan Cabrera (JIRA)" <de...@geronimo.apache.org>.
     [ http://issues.apache.org/jira/browse/GERONIMO-603?page=history ]

Alan Cabrera reassigned GERONIMO-603:
-------------------------------------

    Assign To: Alan Cabrera

> IllegalArgumentException when deploying WebApp containing a url-pattern of /* in security-constraint
> ----------------------------------------------------------------------------------------------------
>
>          Key: GERONIMO-603
>          URL: http://issues.apache.org/jira/browse/GERONIMO-603
>      Project: Geronimo
>         Type: Bug
>   Components: web
>     Reporter: John Sisson
>     Assignee: Alan Cabrera

>
> For example,
> <web-app>
>   ..
>   <security-constraint>
>     <web-resource-collection>
>       <web-resource-name>Access to all of the APP</web-resource-name>
>       <url-pattern>/*</url-pattern>
>     </web-resource-collection>
>   ..
>   </security-constraint>
>   ..
> </web-app>
> The java.lang.IllegalArgumentException("Qualifier patterns in the URLPatternSpec cannot match the first URLPattern") exception is thrown from:
> javax.security.jacc.URLPatternSpec.<init>(java.lang.String) line: 54
> javax.security.jacc.WebResourcePermission.<init>(java.lang.String, java.lang.String) line: 54
> org.apache.geronimo.jetty.deployment.JettyModuleBuilder.buildSpecSecurityConfig(..) line: 1000
> org.apache.geronimo.jetty.deployment.JettyModuleBuilder.addGBeans(..) line: 400
> Looking at the last paragraph of page 22 of the JACC spec, it seems this should be allowed as it paragraph discusses patterns being made irrelevant by the presence of the path prefix pattern "/*" in a deployment descriptor.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
   http://issues.apache.org/jira/secure/Administrators.jspa
-
If you want more information on JIRA, or have a bug to report see:
   http://www.atlassian.com/software/jira


[jira] Commented: (GERONIMO-603) IllegalArgumentException when deploying WebApp containing a url-pattern of /* in security-constraint

Posted by "Gary Karasiuk (JIRA)" <de...@geronimo.apache.org>.
    [ http://issues.apache.org/jira/browse/GERONIMO-603?page=comments#action_12365346 ] 

Gary Karasiuk commented on GERONIMO-603:
----------------------------------------

For what it is worth, this bug cost me a large amount of time. I'd like to see it fixed.

The main problem is that the error message is quite useless. I was trying to deploy my ear and all I got back was this message:

    Error: Unable to distribute StudioPerf.ear: Unable to initialize
    webapp GBean

        Qualifier patterns in the URLPatternSpec cannot match the first
    URLPattern

If it told me what file and line it was complaining about, then I wouldn't have spent two days trying to figure this out. 

> IllegalArgumentException when deploying WebApp containing a url-pattern of /* in security-constraint
> ----------------------------------------------------------------------------------------------------
>
>          Key: GERONIMO-603
>          URL: http://issues.apache.org/jira/browse/GERONIMO-603
>      Project: Geronimo
>         Type: Bug
>   Components: web
>     Reporter: John Sisson
>     Assignee: Alan Cabrera
>      Fix For: 1.1

>
> For example,
> <web-app>
>   ..
>   <security-constraint>
>     <web-resource-collection>
>       <web-resource-name>Access to all of the APP</web-resource-name>
>       <url-pattern>/*</url-pattern>
>     </web-resource-collection>
>   ..
>   </security-constraint>
>   ..
> </web-app>
> The java.lang.IllegalArgumentException("Qualifier patterns in the URLPatternSpec cannot match the first URLPattern") exception is thrown from:
> javax.security.jacc.URLPatternSpec.<init>(java.lang.String) line: 54
> javax.security.jacc.WebResourcePermission.<init>(java.lang.String, java.lang.String) line: 54
> org.apache.geronimo.jetty.deployment.JettyModuleBuilder.buildSpecSecurityConfig(..) line: 1000
> org.apache.geronimo.jetty.deployment.JettyModuleBuilder.addGBeans(..) line: 400
> Looking at the last paragraph of page 22 of the JACC spec, it seems this should be allowed as it paragraph discusses patterns being made irrelevant by the presence of the path prefix pattern "/*" in a deployment descriptor.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
   http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see:
   http://www.atlassian.com/software/jira


[jira] Closed: (GERONIMO-603) IllegalArgumentException when deploying WebApp containing a url-pattern of /* in security-constraint

Posted by "David Jencks (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/GERONIMO-603?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

David Jencks closed GERONIMO-603.
---------------------------------

       Resolution: Duplicate
    Fix Version/s:     (was: 2.0)
                   2.0-M2
                   1.2
         Assignee: David Jencks  (was: Alan Cabrera)

Duplicate of  	 GERONIMO-1585

> IllegalArgumentException when deploying WebApp containing a url-pattern of /* in security-constraint
> ----------------------------------------------------------------------------------------------------
>
>                 Key: GERONIMO-603
>                 URL: https://issues.apache.org/jira/browse/GERONIMO-603
>             Project: Geronimo
>          Issue Type: Bug
>          Components: web
>            Reporter: John Sisson
>            Assignee: David Jencks
>             Fix For: 1.2, 2.0-M2
>
>
> For example,
> <web-app>
>   ..
>   <security-constraint>
>     <web-resource-collection>
>       <web-resource-name>Access to all of the APP</web-resource-name>
>       <url-pattern>/*</url-pattern>
>     </web-resource-collection>
>   ..
>   </security-constraint>
>   ..
> </web-app>
> The java.lang.IllegalArgumentException("Qualifier patterns in the URLPatternSpec cannot match the first URLPattern") exception is thrown from:
> javax.security.jacc.URLPatternSpec.<init>(java.lang.String) line: 54
> javax.security.jacc.WebResourcePermission.<init>(java.lang.String, java.lang.String) line: 54
> org.apache.geronimo.jetty.deployment.JettyModuleBuilder.buildSpecSecurityConfig(..) line: 1000
> org.apache.geronimo.jetty.deployment.JettyModuleBuilder.addGBeans(..) line: 400
> Looking at the last paragraph of page 22 of the JACC spec, it seems this should be allowed as it paragraph discusses patterns being made irrelevant by the presence of the path prefix pattern "/*" in a deployment descriptor.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


[jira] Updated: (GERONIMO-603) IllegalArgumentException when deploying WebApp containing a url-pattern of /* in security-constraint

Posted by "Prasad Kashyap (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/GERONIMO-603?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Prasad Kashyap updated GERONIMO-603:
------------------------------------

    Fix Version/s:     (was: 2.0-M5)
                   2.0

> IllegalArgumentException when deploying WebApp containing a url-pattern of /* in security-constraint
> ----------------------------------------------------------------------------------------------------
>
>                 Key: GERONIMO-603
>                 URL: https://issues.apache.org/jira/browse/GERONIMO-603
>             Project: Geronimo
>          Issue Type: Bug
>          Components: web
>            Reporter: John Sisson
>            Assignee: Alan Cabrera
>             Fix For: 2.0
>
>
> For example,
> <web-app>
>   ..
>   <security-constraint>
>     <web-resource-collection>
>       <web-resource-name>Access to all of the APP</web-resource-name>
>       <url-pattern>/*</url-pattern>
>     </web-resource-collection>
>   ..
>   </security-constraint>
>   ..
> </web-app>
> The java.lang.IllegalArgumentException("Qualifier patterns in the URLPatternSpec cannot match the first URLPattern") exception is thrown from:
> javax.security.jacc.URLPatternSpec.<init>(java.lang.String) line: 54
> javax.security.jacc.WebResourcePermission.<init>(java.lang.String, java.lang.String) line: 54
> org.apache.geronimo.jetty.deployment.JettyModuleBuilder.buildSpecSecurityConfig(..) line: 1000
> org.apache.geronimo.jetty.deployment.JettyModuleBuilder.addGBeans(..) line: 400
> Looking at the last paragraph of page 22 of the JACC spec, it seems this should be allowed as it paragraph discusses patterns being made irrelevant by the presence of the path prefix pattern "/*" in a deployment descriptor.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


[jira] Updated: (GERONIMO-603) IllegalArgumentException when deploying WebApp containing a url-pattern of /* in security-constraint

Posted by "David Blevins (JIRA)" <de...@geronimo.apache.org>.
     [ http://issues.apache.org/jira/browse/GERONIMO-603?page=all ]

David Blevins updated GERONIMO-603:
-----------------------------------

    Fix Version: 1.0
                     (was: 1.0-M5)

> IllegalArgumentException when deploying WebApp containing a url-pattern of /* in security-constraint
> ----------------------------------------------------------------------------------------------------
>
>          Key: GERONIMO-603
>          URL: http://issues.apache.org/jira/browse/GERONIMO-603
>      Project: Geronimo
>         Type: Bug
>   Components: web
>     Reporter: John Sisson
>     Assignee: Alan Cabrera
>      Fix For: 1.0

>
> For example,
> <web-app>
>   ..
>   <security-constraint>
>     <web-resource-collection>
>       <web-resource-name>Access to all of the APP</web-resource-name>
>       <url-pattern>/*</url-pattern>
>     </web-resource-collection>
>   ..
>   </security-constraint>
>   ..
> </web-app>
> The java.lang.IllegalArgumentException("Qualifier patterns in the URLPatternSpec cannot match the first URLPattern") exception is thrown from:
> javax.security.jacc.URLPatternSpec.<init>(java.lang.String) line: 54
> javax.security.jacc.WebResourcePermission.<init>(java.lang.String, java.lang.String) line: 54
> org.apache.geronimo.jetty.deployment.JettyModuleBuilder.buildSpecSecurityConfig(..) line: 1000
> org.apache.geronimo.jetty.deployment.JettyModuleBuilder.addGBeans(..) line: 400
> Looking at the last paragraph of page 22 of the JACC spec, it seems this should be allowed as it paragraph discusses patterns being made irrelevant by the presence of the path prefix pattern "/*" in a deployment descriptor.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
   http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see:
   http://www.atlassian.com/software/jira


[jira] Updated: (GERONIMO-603) IllegalArgumentException when deploying WebApp containing a url-pattern of /* in security-constraint

Posted by "Matt Hogstrom (JIRA)" <ji...@apache.org>.
     [ http://issues.apache.org/jira/browse/GERONIMO-603?page=all ]

Matt Hogstrom updated GERONIMO-603:
-----------------------------------

    Fix Version/s: 2.0
                       (was: 1.2)

Per Gary's comments we'll address this in 2.0

> IllegalArgumentException when deploying WebApp containing a url-pattern of /* in security-constraint
> ----------------------------------------------------------------------------------------------------
>
>                 Key: GERONIMO-603
>                 URL: http://issues.apache.org/jira/browse/GERONIMO-603
>             Project: Geronimo
>          Issue Type: Bug
>          Components: web
>            Reporter: John Sisson
>         Assigned To: Alan Cabrera
>             Fix For: 2.0
>
>
> For example,
> <web-app>
>   ..
>   <security-constraint>
>     <web-resource-collection>
>       <web-resource-name>Access to all of the APP</web-resource-name>
>       <url-pattern>/*</url-pattern>
>     </web-resource-collection>
>   ..
>   </security-constraint>
>   ..
> </web-app>
> The java.lang.IllegalArgumentException("Qualifier patterns in the URLPatternSpec cannot match the first URLPattern") exception is thrown from:
> javax.security.jacc.URLPatternSpec.<init>(java.lang.String) line: 54
> javax.security.jacc.WebResourcePermission.<init>(java.lang.String, java.lang.String) line: 54
> org.apache.geronimo.jetty.deployment.JettyModuleBuilder.buildSpecSecurityConfig(..) line: 1000
> org.apache.geronimo.jetty.deployment.JettyModuleBuilder.addGBeans(..) line: 400
> Looking at the last paragraph of page 22 of the JACC spec, it seems this should be allowed as it paragraph discusses patterns being made irrelevant by the presence of the path prefix pattern "/*" in a deployment descriptor.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira