Re: [Ejbca-develop] `ant install' fails with `Internal admin was denied access' error message

[Branko M. <br...@ma...>]

Hm...

I don't know what the issue might be based on the output you provided,
but one way to make debugging easier would be to, instead of running
ant install straight away, use the EJBCA CLI (after deploy and restart
of JBoss) to see if it can access anything.

I.e. (assuming below paths are correct, of course):

cd /opt/ejbca/
bin/ejbca.sh ca listcas

The above command should work even before ant install (default CLI user
gets generated on the first deployment of EJBCA app in an empty
database).

Perhaps make sure to start out with a fresh database (truncate all
tables at least) as well.

Best regards

On Thu, 05 Jun 2014 18:27:49 +0300
Pavel Bychykhin <byc...@ht...> wrote:

> Hi All,
> 
> I'm trying to install a new instance of EJBCA (6.1.1).
> My system is: FreeBSD 9.2, Jboss 7.1.1, OpenJDK 1.7.0_55, PostgreSQL 9.3.
> `ant deploy' finishes with success and I able to see a database tables 
> after that.
> 
> `ant install finishes with failure. Here is the error message, which I 
> observe on Jboss console:
> 10:35:56,077 INFO 
> [org.cesecore.authorization.control.AccessControlSessionBean] (EJB 
> default - 1) Authorization failed for Internal GlobalConfiguration Admin 
> of type AlwaysAllowLocalAuthenticationToken for resource /
> 10:35:56,078 ERROR [org.jboss.ejb3.invocation] (EJB default - 1) 
> JBAS014134: EJB Invocation failed on component 
> GlobalConfigurationSessionBean for method public abstract 
> org.ejbca.config.Configuration 
> org.ejbca.core.ejb.config.GlobalConfigurationSession.getCachedConfiguration(java.lang.String): 
> java.lang.RuntimeException: Internal admin was denied access. This 
> should not be able to happen.
> 
> And the script output is:
> ejbca:install:
> 
> ejbca:initCA:
>       [echo] Initializing CA with 'ManagementCA' 
> 'CN=ManagementCA,O=EJBCA Sample,C=SE' 'soft' <ca.tokenpassword hidden> 
> '2048' 'RSA' '3650' 'null' 'SHA256WithRSA' -superadmincn 'SuperAdmin'...
> 
>       [java] Could not run execute method for class ca
>       [java] java.lang.RuntimeException: Internal admin was denied 
> access. This should not be able to happen.
> 
> Could you please help me to find out an issue.
> Thanks in advance.
> 



-- 
Branko Majic
Jabber: br...@ma...
Please use only Free formats when sending attachments to me.

Бранко Мајић
Џабер: br...@ma...
Молим вас да додатке шаљете искључиво у слободним форматима.