Random "oracle.oc4j.rmi.OracleRemoteException" When Using Custom LoginModule (Doc ID 399154.1)

Last updated on NOVEMBER 05, 2016

Applies to:

Oracle Containers for J2EE - Version: 10.1.3.0.0 and later   [Release: AS10gR3 and later ]
Information in this document applies to any platform.

Symptoms


A J2EE Web application based on JSP/Servlets connecting to EJB through ORMI.
The application uses a custom LoginModule for authentication as described in the how to sample application How-To: Integrate a Custom JAAS Login Module in OC4J available at
http://www.oracle.com/technetwork/middleware/ias/howtocustomjaasprovider-084317.html

Method level access is defined for EJBs invocations.
While most of the time the authentication works ok, sometimes it fails with the exception

500 Internal Server Error
oracle.oc4j.rmi.OracleRemoteException: scott is not allowed to call this EJB
method, check your security settings
(method-permission in ejb-jar.xml and security-role-mapping in orion-application.xml).


Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms