Re: [Ejbca-develop] `ant install' fails with `Internal admin was denied access' error message

SourceForge Headquarters 1320 Columbia Street Suite 310 San Diego, CA 92101 +1 (858) 422-6466

Hi Branko,
Thank you for reply.
I've tried ejbca.sh (on fresh clear installation of Jboss, just afret 
ant deploy and restart) with no success.
Here is the outcome (hope there is enough info for debugging) :

[root@mtamonitor1 /tmp/ejbca_distr/ejbca_ce_6_1_1]# ./bin/ejbca.sh ca 
listcas
Could not run execute method for class ca
java.lang.RuntimeException: Internal admin was denied access. This 
should not be able to happen.
         at 
org.ejbca.core.ejb.config.GlobalConfigurationSessionBean.getCachedConfiguration(GlobalConfigurationSessionBean.java:182)
         at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
         at 
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
         at 
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
         at java.lang.reflect.Method.invoke(Method.java:606)
         at 
org.jboss.as.ee.component.ManagedReferenceMethodInterceptorFactory$ManagedReferenceMethodInterceptor.processInvocation(ManagedReferenceMethodInterceptorFactory.java:72)
         at 
org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288)
         at 
org.jboss.invocation.WeavedInterceptor.processInvocation(WeavedInterceptor.java:53)
         at 
org.jboss.as.ee.component.interceptors.UserInterceptorFactory$1.processInvocation(UserInterceptorFactory.java:36)
         at 
org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288)
         at 
org.jboss.as.jpa.interceptor.SBInvocationInterceptor.processInvocation(SBInvocationInterceptor.java:47)
         at 
org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288)
         at 
org.jboss.invocation.InitialInterceptor.processInvocation(InitialInterceptor.java:21)
         at 
org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288)
         at 
org.jboss.invocation.ChainedInterceptor.processInvocation(ChainedInterceptor.java:61)
         at 
org.jboss.as.ee.component.interceptors.ComponentDispatcherInterceptor.processInvocation(ComponentDispatcherInterceptor.java:53)
         at 
org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288)
         at 
org.jboss.as.ejb3.component.pool.PooledInstanceInterceptor.processInvocation(PooledInstanceInterceptor.java:51)
         at 
org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288)
         at 
org.jboss.as.ejb3.tx.CMTTxInterceptor.invokeInNoTx(CMTTxInterceptor.java:211)
         at 
org.jboss.as.ejb3.tx.CMTTxInterceptor.supports(CMTTxInterceptor.java:363)
         at 
org.jboss.as.ejb3.tx.CMTTxInterceptor.processInvocation(CMTTxInterceptor.java:194)
         at 
org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288)
         at 
org.jboss.as.ejb3.remote.EJBRemoteTransactionPropagatingInterceptor.processInvocation(EJBRemoteTransactionPropagatingInterceptor.java:80)
         at 
org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288)
         at 
org.jboss.as.ejb3.component.interceptors.CurrentInvocationContextInterceptor.processInvocation(CurrentInvocationContextInterceptor.java:41)
         at 
org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288)
         at 
org.jboss.as.ejb3.component.interceptors.LoggingInterceptor.processInvocation(LoggingInterceptor.java:59)
         at 
org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288)
         at 
org.jboss.as.ee.component.NamespaceContextInterceptor.processInvocation(NamespaceContextInterceptor.java:50)
         at 
org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288)
         at 
org.jboss.as.ejb3.component.interceptors.AdditionalSetupInterceptor.processInvocation(AdditionalSetupInterceptor.java:43)
         at 
org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288)
         at 
org.jboss.as.ee.component.TCCLInterceptor.processInvocation(TCCLInterceptor.java:45)
         at 
org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288)
         at 
org.jboss.invocation.ChainedInterceptor.processInvocation(ChainedInterceptor.java:61)
         at 
org.jboss.as.ee.component.ViewService$View.invoke(ViewService.java:165)
         at 
org.jboss.as.ejb3.remote.protocol.versionone.MethodInvocationMessageHandler.invokeMethod(MethodInvocationMessageHandler.java:302)
         at 
org.jboss.as.ejb3.remote.protocol.versionone.MethodInvocationMessageHandler.access$200(MethodInvocationMessageHandler.java:64)
         at 
org.jboss.as.ejb3.remote.protocol.versionone.MethodInvocationMessageHandler$1.run(MethodInvocationMessageHandler.java:196)
         at 
java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:471)
         at java.util.concurrent.FutureTask.run(FutureTask.java:262)
         at 
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)
         at 
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)
         at java.lang.Thread.run(Thread.java:745)
         at org.jboss.threads.JBossThread.run(JBossThread.java:122)
         at ...asynchronous invocation...(Unknown Source)
         at 
org.jboss.ejb.client.remoting.InvocationExceptionResponseHandler$MethodInvocationExceptionResultProducer.getResult(InvocationExceptionResponseHandler.java:99)
         at 
org.jboss.ejb.client.EJBClientInvocationContext.getResult(EJBClientInvocationContext.java:270)
         at 
org.jboss.ejb.client.TransactionInterceptor.handleInvocationResult(TransactionInterceptor.java:47)
         at 
org.jboss.ejb.client.EJBClientInvocationContext.getResult(EJBClientInvocationContext.java:272)
         at 
org.jboss.ejb.client.ReceiverInterceptor.handleInvocationResult(ReceiverInterceptor.java:132)
         at 
org.jboss.ejb.client.EJBClientInvocationContext.getResult(EJBClientInvocationContext.java:260)
         at 
org.jboss.ejb.client.EJBClientInvocationContext.awaitResponse(EJBClientInvocationContext.java:399)
         at 
org.jboss.ejb.client.EJBInvocationHandler.doInvoke(EJBInvocationHandler.java:140)
         at 
org.jboss.ejb.client.EJBInvocationHandler.doInvoke(EJBInvocationHandler.java:121)
         at 
org.jboss.ejb.client.EJBInvocationHandler.invoke(EJBInvocationHandler.java:104)
         at com.sun.proxy.$Proxy0.getCachedConfiguration(Unknown Source)
         at 
org.ejbca.ui.cli.BaseCommand.parseUsernameAndPasswordFromArgs(BaseCommand.java:126)
         at 
org.ejbca.ui.cli.ca.CaListCAsCommand.execute(CaListCAsCommand.java:43)
         at 
org.ejbca.ui.cli.CliCommandHelper.executeCommand(CliCommandHelper.java:147)
         at 
org.ejbca.ui.cli.CliCommandHelper.searchAndRun(CliCommandHelper.java:105)
         at org.ejbca.ui.cli.EjbcaEjbCli.main(EjbcaEjbCli.java:25)
[root@mtamonitor1 /tmp/ejbca_distr/ejbca_ce_6_1_1]#

On 07.06.2014 14:16, Branko Majic wrote:
> Hm...
>
> I don't know what the issue might be based on the output you provided,
> but one way to make debugging easier would be to, instead of running
> ant install straight away, use the EJBCA CLI (after deploy and restart
> of JBoss) to see if it can access anything.
>
> I.e. (assuming below paths are correct, of course):
>
> cd /opt/ejbca/
> bin/ejbca.sh ca listcas
>
> The above command should work even before ant install (default CLI user
> gets generated on the first deployment of EJBCA app in an empty
> database).
>
> Perhaps make sure to start out with a fresh database (truncate all
> tables at least) as well.
>
> Best regards
>
> On Thu, 05 Jun 2014 18:27:49 +0300
> Pavel Bychykhin <byc...@ht...> wrote:
>
>> Hi All,
>>
>> I'm trying to install a new instance of EJBCA (6.1.1).
>> My system is: FreeBSD 9.2, Jboss 7.1.1, OpenJDK 1.7.0_55, PostgreSQL 9.3.
>> `ant deploy' finishes with success and I able to see a database tables
>> after that.
>>
>> `ant install finishes with failure. Here is the error message, which I
>> observe on Jboss console:
>> 10:35:56,077 INFO
>> [org.cesecore.authorization.control.AccessControlSessionBean] (EJB
>> default - 1) Authorization failed for Internal GlobalConfiguration Admin
>> of type AlwaysAllowLocalAuthenticationToken for resource /
>> 10:35:56,078 ERROR [org.jboss.ejb3.invocation] (EJB default - 1)
>> JBAS014134: EJB Invocation failed on component
>> GlobalConfigurationSessionBean for method public abstract
>> org.ejbca.config.Configuration
>> org.ejbca.core.ejb.config.GlobalConfigurationSession.getCachedConfiguration(java.lang.String):
>> java.lang.RuntimeException: Internal admin was denied access. This
>> should not be able to happen.
>>
>> And the script output is:
>> ejbca:install:
>>
>> ejbca:initCA:
>>        [echo] Initializing CA with 'ManagementCA'
>> 'CN=ManagementCA,O=EJBCA Sample,C=SE' 'soft' <ca.tokenpassword hidden>
>> '2048' 'RSA' '3650' 'null' 'SHA256WithRSA' -superadmincn 'SuperAdmin'...
>>
>>        [java] Could not run execute method for class ca
>>        [java] java.lang.RuntimeException: Internal admin was denied
>> access. This should not be able to happen.
>>
>> Could you please help me to find out an issue.
>> Thanks in advance.
>>
>
>
>
>
> ------------------------------------------------------------------------------
> Learn Graph Databases - Download FREE O'Reilly Book
> "Graph Databases" is the definitive new guide to graph databases and their
> applications. Written by three acclaimed leaders in the field,
> this first edition is now available. Download your free book today!
> http://p.sf.net/sfu/NeoTech
>
>
> _______________________________________________
> Ejbca-develop mailing list
> Ejb...@li...
> https://lists.sourceforge.net/lists/listinfo/ejbca-develop

-- 
Best regards,
Pavel