opentac2-developers

[Opentac2-developers] Application level security

[Seth M. <mr...@ph...>]

Hi everyone,

I just did a big checkin and implemented Application level security via 
SecurityFilter (http://securityfilter.sourceforge.net) thanks to 
Veljar's suggestion. This means that to authenticate for a particular 
role, we now simply begin each action's path with the role type. E.g.,

	/student/welcome.do

or

	/instructor/welcome.do

See src/webapps/WEB-INF/struts-config.xml and 
src/webapps/securityfilter-config.xml for more info. This couples nicely 
with Varma's edu.gmu.opentac2.webapp.action.SecurityAction. Now each 
action should extend this and we then have complete segregation for each 
role. Please let me know if there are any deficiencies in this scheme.

This brings me to menuing. Are there any tiles experts out there that 
would like to create a menuing system?

Best,

Seth

P.S. Is anyone interested in having a meeting? I'd really like to hash 
out how we're to interoperate! Thanks!

[Opentac2-developers] Exception

[Java C. <jav...@ya...>]

Hi Seth,

While i'm trying to run the app i'm getting the
following exception.. can u guess what could be the
problem??? I'm trying to run the app on Oracle.


2004-10-27 15:17:19,906 [http8080-Processor25] WARN 
org.apache.torque.oid.IDBro
ker - IDBroker is being used with db 'opentac2', which
does not support transact
ions. IDBroker attempts to use transactions to limit
the possibility of duplicat
e key generation.  Without transactions, duplicate key
generation is possible if
 multiple JVMs are used or other means are used to
write to the database.
2004-10-27 15:17:20,187 [http8080-Processor25] DEBUG
org.apache.torque.util.Tran
saction - called safeRollback with null argument
org.apache.torque.TorqueException:
org.apache.commons.dbcp.SQLNestedException: C
ould not retrieve connection info from pool, cause:
Could not create a validated
 object
        at
org.apache.torque.TorqueInstance.getConnection(TorqueInstance.java:71
7)
        at
org.apache.torque.Torque.getConnection(Torque.java:268)
        at
org.apache.torque.util.Transaction.beginOptional(Transaction.java:80)

        at
org.apache.torque.util.BasePeer.doSelect(BasePeer.java:1192)
        at
edu.gmu.opentac2.om.BasePersonPeer.doSelectVillageRecords(BasePersonP
eer.java:438)
        at
edu.gmu.opentac2.om.BasePersonPeer.doSelectVillageRecords(BasePersonP
eer.java:390)
        at
edu.gmu.opentac2.om.BasePersonPeer.doSelect(BasePersonPeer.java:359)
        at
edu.gmu.opentac2.om.Person.getPersonByEmailOrSid(Person.java:150)
        at
edu.gmu.opentac2.webapp.SecurityRealm.booleanAuthenticate(SecurityRea
lm.java:45)
        at
org.securityfilter.realm.SimpleSecurityRealmBase.authenticate(SimpleS
ecurityRealmBase.java:107)
        at
org.securityfilter.authenticator.FormAuthenticator.processLogin(FormA
uthenticator.java:178)
        at
org.securityfilter.filter.SecurityFilter.doFilter(SecurityFilter.java
:138)
        at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(Appl
icationFilterChain.java:233)
        at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationF
ilterChain.java:204)
        at
org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperV
alve.java:257)
        at
org.apache.catalina.core.StandardValveContext.invokeNext(StandardValv
eContext.java:151)
        at
org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.jav
a:564)
        at
org.apache.catalina.core.StandardContextValve.invokeInternal(Standard
ContextValve.java:245)
        at
org.apache.catalina.core.StandardContextValve.invoke(StandardContextV
alve.java:199)
        at
org.apache.catalina.core.StandardValveContext.invokeNext(StandardValv
eContext.java:151)
        at
org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.jav
a:564)
        at
org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.j
ava:195)
        at
org.apache.catalina.core.StandardValveContext.invokeNext(StandardValv
eContext.java:151)
        at
org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.j
ava:164)
        at
org.apache.catalina.core.StandardValveContext.invokeNext(StandardValv
eContext.java:149)
        at
org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.jav
a:564)
        at
org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineVal
ve.java:156)
        at
org.apache.catalina.core.StandardValveContext.invokeNext(StandardValv
eContext.java:151)
        at
org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.jav
a:564)
        at
org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:972)

        at
org.apache.coyote.tomcat5.CoyoteAdapter.service(CoyoteAdapter.java:20
6)
        at
org.apache.coyote.http11.Http11Processor.process(Http11Processor.java
:828)
        at
org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.proce
ssConnection(Http11Protocol.java:700)
        at
org.apache.tomcat.util.net.TcpWorkerThread.runIt(PoolTcpEndpoint.java
:584)
        at
org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadP
ool.java:683)
        at java.lang.Thread.run(Thread.java:536)
Caused by: org.apache.commons.dbcp.SQLNestedException:
Could not retrieve connec
tion info from pool, cause: Could not create a
validated object
        at
org.apache.commons.dbcp.datasources.SharedPoolDataSource.getPooledCon
nectionAndInfo(SharedPoolDataSource.java:217)
        at
org.apache.commons.dbcp.datasources.InstanceKeyDataSource.getConnecti
on(InstanceKeyDataSource.java:676)
        at
org.apache.commons.dbcp.datasources.InstanceKeyDataSource.getConnecti
on(InstanceKeyDataSource.java:660)
        at
org.apache.torque.TorqueInstance.getConnection(TorqueInstance.java:70
5)
        ... 35 more
Caused by: java.util.NoSuchElementException: Could not
create a validated object

        at
org.apache.commons.pool.impl.GenericKeyedObjectPool.borrowObject(Gene
ricKeyedObjectPool.java:828)
        at
org.apache.commons.dbcp.datasources.SharedPoolDataSource.getPooledCon
nectionAndInfo(SharedPoolDataSource.java:213)
        ... 38 more
2004-10-27 15:17:20,234 [http8080-Processor25] INFO 
edu.gmu.opentac2.webapp.Sec
urityRealm - Retreiving Person for username  and
security group => STUDENT Succe
ss => false

~Varma


		
_______________________________
Do you Yahoo!?
Express yourself with Y! Messenger! Free. Download now. 
http://messenger.yahoo.com

Re: [Opentac2-developers] Exception

[Velja R. <ve...@gm...>]

Maybe you have a problem with user authorization on db server.

Check that values specified in .properties files (WEB-INF/conf dir)
matches username, pwd, database name, ... in your db.


On Wed, 27 Oct 2004 02:53:47 -0700 (PDT), Java Chap <jav...@ya...> wrote:
> Hi Seth,
> 
> While i'm trying to run the app i'm getting the
> following exception.. can u guess what could be the
> problem??? I'm trying to run the app on Oracle.
> 
> 2004-10-27 15:17:19,906 [http8080-Processor25] WARN
> org.apache.torque.oid.IDBro
> ker - IDBroker is being used with db 'opentac2', which
> does not support transact
> ions. IDBroker attempts to use transactions to limit
> the possibility of duplicat
> e key generation.  Without transactions, duplicate key
> generation is possible if
> multiple JVMs are used or other means are used to
> write to the database.
> 2004-10-27 15:17:20,187 [http8080-Processor25] DEBUG
> org.apache.torque.util.Tran
> saction - called safeRollback with null argument
> org.apache.torque.TorqueException:
> org.apache.commons.dbcp.SQLNestedException: C
> ould not retrieve connection info from pool, cause:
> Could not create a validated
> object
>        at
> org.apache.torque.TorqueInstance.getConnection(TorqueInstance.java:71
> 7)
>        at
> org.apache.torque.Torque.getConnection(Torque.java:268)
>        at
> org.apache.torque.util.Transaction.beginOptional(Transaction.java:80)
> 
>        at
> org.apache.torque.util.BasePeer.doSelect(BasePeer.java:1192)
>        at
> edu.gmu.opentac2.om.BasePersonPeer.doSelectVillageRecords(BasePersonP
> eer.java:438)
>        at
> edu.gmu.opentac2.om.BasePersonPeer.doSelectVillageRecords(BasePersonP
> eer.java:390)
>        at
> edu.gmu.opentac2.om.BasePersonPeer.doSelect(BasePersonPeer.java:359)
>        at
> edu.gmu.opentac2.om.Person.getPersonByEmailOrSid(Person.java:150)
>        at
> edu.gmu.opentac2.webapp.SecurityRealm.booleanAuthenticate(SecurityRea
> lm.java:45)
>        at
> org.securityfilter.realm.SimpleSecurityRealmBase.authenticate(SimpleS
> ecurityRealmBase.java:107)
>        at
> org.securityfilter.authenticator.FormAuthenticator.processLogin(FormA
> uthenticator.java:178)
>        at
> org.securityfilter.filter.SecurityFilter.doFilter(SecurityFilter.java
> :138)
>        at
> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(Appl
> icationFilterChain.java:233)
>        at
> org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationF
> ilterChain.java:204)
>        at
> org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperV
> alve.java:257)
>        at
> org.apache.catalina.core.StandardValveContext.invokeNext(StandardValv
> eContext.java:151)
>        at
> org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.jav
> a:564)
>        at
> org.apache.catalina.core.StandardContextValve.invokeInternal(Standard
> ContextValve.java:245)
>        at
> org.apache.catalina.core.StandardContextValve.invoke(StandardContextV
> alve.java:199)
>        at
> org.apache.catalina.core.StandardValveContext.invokeNext(StandardValv
> eContext.java:151)
>        at
> org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.jav
> a:564)
>        at
> org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.j
> ava:195)
>        at
> org.apache.catalina.core.StandardValveContext.invokeNext(StandardValv
> eContext.java:151)
>        at
> org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.j
> ava:164)
>        at
> org.apache.catalina.core.StandardValveContext.invokeNext(StandardValv
> eContext.java:149)
>        at
> org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.jav
> a:564)
>        at
> org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineVal
> ve.java:156)
>        at
> org.apache.catalina.core.StandardValveContext.invokeNext(StandardValv
> eContext.java:151)
>        at
> org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.jav
> a:564)
>        at
> org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:972)
> 
>        at
> org.apache.coyote.tomcat5.CoyoteAdapter.service(CoyoteAdapter.java:20
> 6)
>        at
> org.apache.coyote.http11.Http11Processor.process(Http11Processor.java
> :828)
>        at
> org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.proce
> ssConnection(Http11Protocol.java:700)
>        at
> org.apache.tomcat.util.net.TcpWorkerThread.runIt(PoolTcpEndpoint.java
> :584)
>        at
> org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadP
> ool.java:683)
>        at java.lang.Thread.run(Thread.java:536)
> Caused by: org.apache.commons.dbcp.SQLNestedException:
> Could not retrieve connec
> tion info from pool, cause: Could not create a
> validated object
>        at
> org.apache.commons.dbcp.datasources.SharedPoolDataSource.getPooledCon
> nectionAndInfo(SharedPoolDataSource.java:217)
>        at
> org.apache.commons.dbcp.datasources.InstanceKeyDataSource.getConnecti
> on(InstanceKeyDataSource.java:676)
>        at
> org.apache.commons.dbcp.datasources.InstanceKeyDataSource.getConnecti
> on(InstanceKeyDataSource.java:660)
>        at
> org.apache.torque.TorqueInstance.getConnection(TorqueInstance.java:70
> 5)
>        ... 35 more
> Caused by: java.util.NoSuchElementException: Could not
> create a validated object
> 
>        at
> org.apache.commons.pool.impl.GenericKeyedObjectPool.borrowObject(Gene
> ricKeyedObjectPool.java:828)
>        at
> org.apache.commons.dbcp.datasources.SharedPoolDataSource.getPooledCon
> nectionAndInfo(SharedPoolDataSource.java:213)
>        ... 38 more
> 2004-10-27 15:17:20,234 [http8080-Processor25] INFO
> edu.gmu.opentac2.webapp.Sec
> urityRealm - Retreiving Person for username  and
> security group => STUDENT Succe
> ss => false
> 
> ~Varma
> 
> _______________________________
> Do you Yahoo!?
> Express yourself with Y! Messenger! Free. Download now.
> http://messenger.yahoo.com
> 
> -------------------------------------------------------
> This SF.Net email is sponsored by:
> Sybase ASE Linux Express Edition - download now for FREE
> LinuxWorld Reader's Choice Award Winner for best database on Linux.
> http://ads.osdn.com/?ad_id=5588&alloc_id=12065&op=click
> _______________________________________________
> Opentac2-developers mailing list
> Ope...@li...
> https://lists.sourceforge.net/lists/listinfo/opentac2-developers
>

Re: [Opentac2-developers] Exception

[Seth M. <mr...@ph...>]

Java Chap wrote:
> Hi Seth,
> 
> While i'm trying to run the app i'm getting the
> following exception.. can u guess what could be the
> problem??? I'm trying to run the app on Oracle.
> 
> 

I think the maven config is not including the Oracle jar file, so 
perhaps it might be a good idea to stick it in Tomcat's classpath 
(common/lib) or I can add it to the maven repository if the license 
allows for distribution. Other than that, check build.properties to be 
sure you're generating for Oracle and 
src/webapp/WEB-INF/conf/Torque.properties for errors.

Best,

Seth

> 2004-10-27 15:17:19,906 [http8080-Processor25] WARN 
> org.apache.torque.oid.IDBro
> ker - IDBroker is being used with db 'opentac2', which
> does not support transact
> ions. IDBroker attempts to use transactions to limit
> the possibility of duplicat
> e key generation.  Without transactions, duplicate key
> generation is possible if
>  multiple JVMs are used or other means are used to
> write to the database.
> 2004-10-27 15:17:20,187 [http8080-Processor25] DEBUG
> org.apache.torque.util.Tran
> saction - called safeRollback with null argument
> org.apache.torque.TorqueException:
> org.apache.commons.dbcp.SQLNestedException: C
> ould not retrieve connection info from pool, cause:
> Could not create a validated
>  object
>         at
> org.apache.torque.TorqueInstance.getConnection(TorqueInstance.java:71
> 7)
>         at
> org.apache.torque.Torque.getConnection(Torque.java:268)
>         at
> org.apache.torque.util.Transaction.beginOptional(Transaction.java:80)
> 
>         at
> org.apache.torque.util.BasePeer.doSelect(BasePeer.java:1192)
>         at
> edu.gmu.opentac2.om.BasePersonPeer.doSelectVillageRecords(BasePersonP
> eer.java:438)
>         at
> edu.gmu.opentac2.om.BasePersonPeer.doSelectVillageRecords(BasePersonP
> eer.java:390)
>         at
> edu.gmu.opentac2.om.BasePersonPeer.doSelect(BasePersonPeer.java:359)
>         at
> edu.gmu.opentac2.om.Person.getPersonByEmailOrSid(Person.java:150)
>         at
> edu.gmu.opentac2.webapp.SecurityRealm.booleanAuthenticate(SecurityRea
> lm.java:45)
>         at
> org.securityfilter.realm.SimpleSecurityRealmBase.authenticate(SimpleS
> ecurityRealmBase.java:107)
>         at
> org.securityfilter.authenticator.FormAuthenticator.processLogin(FormA
> uthenticator.java:178)
>         at
> org.securityfilter.filter.SecurityFilter.doFilter(SecurityFilter.java
> :138)
>         at
> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(Appl
> icationFilterChain.java:233)
>         at
> org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationF
> ilterChain.java:204)
>         at
> org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperV
> alve.java:257)
>         at
> org.apache.catalina.core.StandardValveContext.invokeNext(StandardValv
> eContext.java:151)
>         at
> org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.jav
> a:564)
>         at
> org.apache.catalina.core.StandardContextValve.invokeInternal(Standard
> ContextValve.java:245)
>         at
> org.apache.catalina.core.StandardContextValve.invoke(StandardContextV
> alve.java:199)
>         at
> org.apache.catalina.core.StandardValveContext.invokeNext(StandardValv
> eContext.java:151)
>         at
> org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.jav
> a:564)
>         at
> org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.j
> ava:195)
>         at
> org.apache.catalina.core.StandardValveContext.invokeNext(StandardValv
> eContext.java:151)
>         at
> org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.j
> ava:164)
>         at
> org.apache.catalina.core.StandardValveContext.invokeNext(StandardValv
> eContext.java:149)
>         at
> org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.jav
> a:564)
>         at
> org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineVal
> ve.java:156)
>         at
> org.apache.catalina.core.StandardValveContext.invokeNext(StandardValv
> eContext.java:151)
>         at
> org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.jav
> a:564)
>         at
> org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:972)
> 
>         at
> org.apache.coyote.tomcat5.CoyoteAdapter.service(CoyoteAdapter.java:20
> 6)
>         at
> org.apache.coyote.http11.Http11Processor.process(Http11Processor.java
> :828)
>         at
> org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.proce
> ssConnection(Http11Protocol.java:700)
>         at
> org.apache.tomcat.util.net.TcpWorkerThread.runIt(PoolTcpEndpoint.java
> :584)
>         at
> org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadP
> ool.java:683)
>         at java.lang.Thread.run(Thread.java:536)
> Caused by: org.apache.commons.dbcp.SQLNestedException:
> Could not retrieve connec
> tion info from pool, cause: Could not create a
> validated object
>         at
> org.apache.commons.dbcp.datasources.SharedPoolDataSource.getPooledCon
> nectionAndInfo(SharedPoolDataSource.java:217)
>         at
> org.apache.commons.dbcp.datasources.InstanceKeyDataSource.getConnecti
> on(InstanceKeyDataSource.java:676)
>         at
> org.apache.commons.dbcp.datasources.InstanceKeyDataSource.getConnecti
> on(InstanceKeyDataSource.java:660)
>         at
> org.apache.torque.TorqueInstance.getConnection(TorqueInstance.java:70
> 5)
>         ... 35 more
> Caused by: java.util.NoSuchElementException: Could not
> create a validated object
> 
>         at
> org.apache.commons.pool.impl.GenericKeyedObjectPool.borrowObject(Gene
> ricKeyedObjectPool.java:828)
>         at
> org.apache.commons.dbcp.datasources.SharedPoolDataSource.getPooledCon
> nectionAndInfo(SharedPoolDataSource.java:213)
>         ... 38 more
> 2004-10-27 15:17:20,234 [http8080-Processor25] INFO 
> edu.gmu.opentac2.webapp.Sec
> urityRealm - Retreiving Person for username  and
> security group => STUDENT Succe
> ss => false
> 
> ~Varma
> 
> 
> 		
> _______________________________
> Do you Yahoo!?
> Express yourself with Y! Messenger! Free. Download now. 
> http://messenger.yahoo.com
> 
> 
> -------------------------------------------------------
> This SF.Net email is sponsored by:
> Sybase ASE Linux Express Edition - download now for FREE
> LinuxWorld Reader's Choice Award Winner for best database on Linux.
> http://ads.osdn.com/?ad_id=5588&alloc_id=12065&op=click
> _______________________________________________
> Opentac2-developers mailing list
> Ope...@li...
> https://lists.sourceforge.net/lists/listinfo/opentac2-developers