You are viewing a plain text version of this content. The canonical link for it is here.
Posted to jetspeed-dev@portals.apache.org by "Michael Lipp (JIRA)" <je...@portals.apache.org> on 2005/08/18 16:39:54 UTC

[jira] Created: (JS2-336) resource-ref entries missing in web.xml

resource-ref entries missing in web.xml
---------------------------------------

         Key: JS2-336
         URL: http://issues.apache.org/jira/browse/JS2-336
     Project: Jetspeed 2
        Type: Bug
  Components: Admin Portlets  
    Versions: 2.0-dev/cvs    
 Environment: JBoss/HSQL
    Reporter: Michael Lipp


The resource-ref entry for the data source "jdbc/jetspeed" is missing in security.war (at least; I havent't checked for all applications if they declare/need it).

I assume that Tomcat makes the resources configured in its JNDI availabel to all servlets and therefore the issue hasn't come up yet. But pack security.war as a web module in my EAR, i.e. it has its own context, and there the bug shows.


-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
   http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see:
   http://www.atlassian.com/software/jira


---------------------------------------------------------------------
To unsubscribe, e-mail: jetspeed-dev-unsubscribe@portals.apache.org
For additional commands, e-mail: jetspeed-dev-help@portals.apache.org


[jira] Commented: (JS2-336) resource-ref entries missing in web.xml

Posted by "Michael Lipp (JIRA)" <je...@portals.apache.org>.
    [ http://issues.apache.org/jira/browse/JS2-336?page=comments#action_12319183 ] 

Michael Lipp commented on JS2-336:
----------------------------------

I have spent quite some time now with the security services, not only for the JBoss security issue, but also because the application I want to integrate into Jetspeed needs its own access to Jetspeed's security as well. Believe me: the security apps *do* interact with the JDBC connection and JNDI.

Using an Object Relational Bridge like OJB makes things look easy for the application programmer, but also hides a lot about what is going on. Of course, the security apps get the security services from the portal. But these services use OJB and not every database connection required by OJB is created *before* the security service is passed to the security app.

So what happens is that the security apps get the (readily configured) security service. The configuration includes the information that OJB is to get a connection via a data source retrieved from "java:comp/env/jdbc/jetspeed" if it needs one. Now the security app calls some method of the security service and sometimes the need actually arises for OJB to get a connection. This happens in the context of the security app (security.war) and looking at the security app's java:comp/env namespace it finds: ... nothing configured there...


> resource-ref entries missing in web.xml
> ---------------------------------------
>
>          Key: JS2-336
>          URL: http://issues.apache.org/jira/browse/JS2-336
>      Project: Jetspeed 2
>         Type: Bug
>   Components: Admin Portlets
>     Versions: 2.0-dev/cvs
>  Environment: JBoss/HSQL
>     Reporter: Michael Lipp

>
> The resource-ref entry for the data source "jdbc/jetspeed" is missing in security.war (at least; I havent't checked for all applications if they declare/need it).
> I assume that Tomcat makes the resources configured in its JNDI availabel to all servlets and therefore the issue hasn't come up yet. But pack security.war as a web module in my EAR, i.e. it has its own context, and there the bug shows.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
   http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see:
   http://www.atlassian.com/software/jira


---------------------------------------------------------------------
To unsubscribe, e-mail: jetspeed-dev-unsubscribe@portals.apache.org
For additional commands, e-mail: jetspeed-dev-help@portals.apache.org


[jira] Commented: (JS2-336) resource-ref entries missing in web.xml

Posted by "Scott T Weaver (JIRA)" <je...@portals.apache.org>.
    [ http://issues.apache.org/jira/browse/JS2-336?page=comments#action_12319178 ] 

Scott T Weaver commented on JS2-336:
------------------------------------

Security apps don't directly interact with the JDBC connection.  They use services that are delegated to them from the portal itself which in turn run within the context of the Jetspeed portal which has the resource-ref defined.

HTH,
-Scott

> resource-ref entries missing in web.xml
> ---------------------------------------
>
>          Key: JS2-336
>          URL: http://issues.apache.org/jira/browse/JS2-336
>      Project: Jetspeed 2
>         Type: Bug
>   Components: Admin Portlets
>     Versions: 2.0-dev/cvs
>  Environment: JBoss/HSQL
>     Reporter: Michael Lipp

>
> The resource-ref entry for the data source "jdbc/jetspeed" is missing in security.war (at least; I havent't checked for all applications if they declare/need it).
> I assume that Tomcat makes the resources configured in its JNDI availabel to all servlets and therefore the issue hasn't come up yet. But pack security.war as a web module in my EAR, i.e. it has its own context, and there the bug shows.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
   http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see:
   http://www.atlassian.com/software/jira


---------------------------------------------------------------------
To unsubscribe, e-mail: jetspeed-dev-unsubscribe@portals.apache.org
For additional commands, e-mail: jetspeed-dev-help@portals.apache.org


[jira] Commented: (JS2-336) resource-ref entries missing in web.xml

Posted by "Michael Lipp (JIRA)" <je...@portals.apache.org>.
    [ http://issues.apache.org/jira/browse/JS2-336?page=comments#action_12323145 ] 

Michael Lipp commented on JS2-336:
----------------------------------

Fixed by recent changes described in JS2-326, can be closed.


> resource-ref entries missing in web.xml
> ---------------------------------------
>
>          Key: JS2-336
>          URL: http://issues.apache.org/jira/browse/JS2-336
>      Project: Jetspeed 2
>         Type: Bug
>   Components: Admin Portlets
>     Versions: 2.0-dev/cvs
>  Environment: JBoss/HSQL
>     Reporter: Michael Lipp

>
> The resource-ref entry for the data source "jdbc/jetspeed" is missing in security.war (at least; I havent't checked for all applications if they declare/need it).
> I assume that Tomcat makes the resources configured in its JNDI availabel to all servlets and therefore the issue hasn't come up yet. But pack security.war as a web module in my EAR, i.e. it has its own context, and there the bug shows.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
   http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see:
   http://www.atlassian.com/software/jira


---------------------------------------------------------------------
To unsubscribe, e-mail: jetspeed-dev-unsubscribe@portals.apache.org
For additional commands, e-mail: jetspeed-dev-help@portals.apache.org


[jira] Closed: (JS2-336) resource-ref entries missing in web.xml

Posted by "David Le Strat (JIRA)" <je...@portals.apache.org>.
     [ http://issues.apache.org/jira/browse/JS2-336?page=all ]
     
David Le Strat closed JS2-336:
------------------------------

    Resolution: Fixed

Fixed by Michael patch: http://issues.apache.org/jira/browse/JS2-326#action_12323144

> resource-ref entries missing in web.xml
> ---------------------------------------
>
>          Key: JS2-336
>          URL: http://issues.apache.org/jira/browse/JS2-336
>      Project: Jetspeed 2
>         Type: Bug
>   Components: Admin Portlets
>     Versions: 2.0-dev/cvs
>  Environment: JBoss/HSQL
>     Reporter: Michael Lipp

>
> The resource-ref entry for the data source "jdbc/jetspeed" is missing in security.war (at least; I havent't checked for all applications if they declare/need it).
> I assume that Tomcat makes the resources configured in its JNDI availabel to all servlets and therefore the issue hasn't come up yet. But pack security.war as a web module in my EAR, i.e. it has its own context, and there the bug shows.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
   http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see:
   http://www.atlassian.com/software/jira


---------------------------------------------------------------------
To unsubscribe, e-mail: jetspeed-dev-unsubscribe@portals.apache.org
For additional commands, e-mail: jetspeed-dev-help@portals.apache.org