<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<html>
<body link="#355491" alink="#4262a1" vlink="#355491" style="background: #e2e2e2; margin: 0; padding: 20px;">
<div>
<table cellpadding="0" bgcolor="#FFFFFF" border="0" cellspacing="0" style="border: 1px solid #dadada; margin-bottom: 30px; width: 100%; -moz-border-radius: 6px; -webkit-border-radius: 6px;">
<tbody>
<tr>
<td>
<table border="0" cellpadding="0" cellspacing="0" bgcolor="#FFFFFF" style="border: solid 2px #ccc; background: #dadada; width: 100%; -moz-border-radius: 6px; -webkit-border-radius: 6px;">
<tbody>
<tr>
<td bgcolor="#000000" valign="middle" height="58px" style="border-bottom: 1px solid #ccc; padding: 20px; -moz-border-radius-topleft: 3px; -moz-border-radius-topright: 3px; -webkit-border-top-right-radius: 5px; -webkit-border-top-left-radius: 5px;">
<h1 style="color: #333333; font: bold 22px Arial, Helvetica, sans-serif; margin: 0; display: block !important;">
<!-- To have a header image/logo replace the name below with your img tag -->
<!-- Email clients will render the images when the message is read so any image -->
<!-- must be made available on a public server, so that all recipients can load the image. -->
<a href="http://community.jboss.org/index.jspa" style="text-decoration: none; color: #E1E1E1">JBoss Community</a></h1>
</td>
</tr>
<tr>
<td bgcolor="#FFFFFF" style="font: normal 12px Arial, Helvetica, sans-serif; color:#333333; padding: 20px; -moz-border-radius-bottomleft: 4px; -moz-border-radius-bottomright: 4px; -webkit-border-bottom-right-radius: 5px; -webkit-border-bottom-left-radius: 5px;"><h3 style="margin: 10px 0 5px; font-size: 17px; font-weight: normal;">
jboss a7 JAAS custom login sso
</h3>
<span style="margin-bottom: 10px;">
created by <a href="http://community.jboss.org/people/abiya">abiya</a> in <i>JBoss AS 7 Development</i> - <a href="http://community.jboss.org/message/645381#645381">View the full discussion</a>
</span>
<hr style="margin: 20px 0; border: none; background-color: #dadada; height: 1px;">
<div class="jive-rendered-content"><p>Hi,</p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p>I have an exisitng application which has JAAS security enabled and CasssoFilter for SSO working fine in weblogic. I am trying to get it work in jboss as7 and am not very clear on the security configuration to be done. Below is the list of what I have configured so far and I get the Principal value as null when I login.</p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p>My configurations:</p><p><div><span style="font-size: 10pt;">  <p align="left"><jboss-web></p><p align="left"><security-domain flushOnSessionInvalidation="true"><span style="text-decoration: underline;">metreo</span></security-domain></p><p></jboss-web></p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p>standalone.xml</p><p>-----------------------</p></span></div></p><p><span style="font-size: 10pt;"><p>        <subsystem xmlns="urn:jboss:domain:security:1.0"></p><p>            <security-domains></p><p>                <security-domain name="other" cache-type="default"></p><p>                    <authentication></p><p>                        <login-module code="Disabled" flag="required"/></p><p>                    </authentication></p><p>                </security-domain></p><p>                <security-domain name="metreo"></p><p>                    <authentication></p><p>                        <login-module code="com.metreo.platform.security.jboss.jboss600.jaas.jdbc.DatabaseServerLoginModule" flag="required"></p><p>                            <module-option name="dsJndiName" value="java:jboss/datasources/weblogic.jdbc.jts.demopool"/></p><p>                            <module-option name="principalsQuery" value="select password from m_user where m_user_name=? and m_user_status=1"/></p><p>                            <module-option name="rolesQuery" value="select userRoles, 'Roles' from UserRoles where username=?"/></p><p>                            <module-option name="userPrincipalForUserQuery" value="select m_user_id, m_org_id from m_user where m_user_name = ? and m_user_status = ?"/></p><p>                            <module-option name="metreoRolesQuery" value="select grp.m_group_name, grp.m_group_id, grp.m_group_type from m_group grp,m_user usr, m_user_group usrgrp where usrgrp.m_user_id = ? and usrgrp.m_group_id = grp.m_group_id and usr.m_user_name = ?"/></p><p>                            <module-option name="hashAlgorithm" value="MD5"/></p><p>                            <module-option name="hashEncoding" value="base64"/></p><p>                            <module-option name="unauthenticatedIdentity" value="guest"/></p><p>                        </login-module></p><p>                    </authentication></p><p>                </security-domain></p><p>            </security-domains></p><p>        </subsystem></p><p><span style="font-size: 10pt;"></span></p><p><span style="font-size: 10pt;"></span>.DatabaseServerLoginModule.java</p><p><span style="font-size: 10pt;"></span>------------------------------------------------</p><p><span style="font-size: 10pt;"></span></p><p><span style="font-size: 10pt;"></span><div><strong style="color: #7f0055; font-size: 10pt;"><p><div><strong style="color: #7f0055; font-size: 10pt;"><strong style="color: #7f0055; font-size: 10pt;"><strong style="color: #7f0055; font-size: 10pt;"><p>public</p></strong></strong></strong></div></p></strong></div></p><strong><p><strong style="color: #7f0055; font-size: 10pt;"><strong style="color: #7f0055; font-size: 10pt;">class</strong></strong><span style="color: #000000; font-size: 10pt;"> JDBCLoginModule </span><strong style="color: #7f0055; font-size: 10pt;"><strong style="color: #7f0055; font-size: 10pt;">extends</strong></strong><span style="color: #000000; font-size: 10pt;"> <span style="text-decoration: underline;">DatabaseServerLoginModule</span> {</span></p></strong><p><span style="font-size: 10pt;"><strong style=": ; color: #000000; font-size: 10pt;"></strong></span></p><p>16:00:19,638 TRACE [org.jboss.as.web.security.SecurityContextAssociationValve] (http--127.0.0.1-7001-2) Begin invoke, caller=null</p><p>16:00:19,648 TRACE [org.jboss.as.web.security.SecurityContextAssociationValve] (http--127.0.0.1-7001-2) End invoke, caller=null</p><p>16:00:19,648 TRACE [org.jboss.as.web.security.SecurityContextAssociationValve] (http--127.0.0.1-7001-2) Begin invoke, caller=null</p><p>16:00:19,658 DEBUG [org.apache.catalina.core.ContainerBase.[jboss.web].[default-host].[/metreoSSO].[jsp]] (http--127.0.0.1-7001-2)  Disabling the response for futher output</p><p>16:00:19,658 TRACE [org.jboss.as.web.security.SecurityContextAssociationValve] (http--127.0.0.1-7001-2) End invoke, caller=null</p><p>16:00:19,698 TRACE [org.jboss.as.web.security.SecurityContextAssociationValve] (http--127.0.0.1-7001-2) Begin invoke, caller=null</p><p><span style="font-size: 10pt;"><p align="left"><strong style="color: #7f0055; font-size: 10pt;"><strong style="color: #7f0055; font-size: 10pt;">public</strong></strong><span style="font-size: 10pt;"> </span><strong style="color: #7f0055; font-size: 10pt;"><strong style="color: #7f0055; font-size: 10pt;">void</strong></strong><div align="left"><span style="font-size: 10pt;"> initialize(Subject a_subject,</span></div></p></span></p><p align="left"><p><span style="color: #7f0055; font-size: 10pt;"><p align="left" style="min-height: 8pt; height: 8pt; padding: 0px;"> </p></span></p></p><p align="left" style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p align="left" style="min-height: 8pt; height: 8pt; padding: 0px;"><span style="text-decoration: underline;"></span> </p><p align="left" style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p align="left" style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p align="left" style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p align="left" style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p align="left" style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p align="left"><div align="left"><span style="font-size: 10pt;"><p><span style="font-size: 10pt;"><p align="left">CallbackHandler a_callbackHandler, <span style="text-decoration: underline;">Map</span> a_sharedState, <span style="text-decoration: underline;">Map</span> a_options) {</p><p align="left" style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><span style="font-size: 10pt;"><p align="left"><strong style="text-decoration: underline;"><strong style=": ; color: #7f0055; font-size: 10pt; text-decoration: underline;"><strong style=": ; color: #7f0055; font-size: 10pt; text-decoration: underline;">super</strong></strong></strong><div align="left"><span style="font-size: 10pt;">.initialize(a_subject, a_callbackHandler, a_sharedState, a_options);</span></div></p></span></span><span style="font-size: 10pt;"><p align="left"><strong style="color: #7f0055; font-size: 10pt;"><strong style="color: #7f0055; font-size: 10pt;">this</strong></strong><span style="font-size: 10pt;">.</span><span style="color: #0000c0; font-size: 10pt;">m_subject</span><div align="left"><span style="font-size: 10pt;"> = a_subject;</span></div></p></span><span style="font-size: 10pt;"><p align="left"><strong style="color: #7f0055; font-size: 10pt;"><strong style="color: #7f0055; font-size: 10pt;">try</strong></strong><div align="left"><span style="font-size: 10pt;"> {</span></div></p></span><span style="font-size: 10pt;"><p align="left"><em style="color: #0000c0; font-size: 10pt;"><em style="color: #0000c0; font-size: 10pt;">m_userPrincipalForUserQuery</em></em><div align="left"><span style="font-size: 10pt;"> = (String) a_options</span></div></p></span><span style="font-size: 10pt;"><p align="left">.get(<em style="color: #0000c0; font-size: 10pt;"><em style="color: #0000c0; font-size: 10pt;">USER_PRINCIPALS_QUERY</em></em><div align="left"><span style="font-size: 10pt;">);</span></div></p></span><span style="font-size: 10pt;"><p align="left"><em style="color: #0000c0; font-size: 10pt;"><em style="color: #0000c0; font-size: 10pt;">m_metreoRolesQuery</em></em><span style="font-size: 10pt;"> = (String)a_options.get(</span><em style="color: #0000c0; font-size: 10pt;"><em style="color: #0000c0; font-size: 10pt;">METREO_ROLES_QUERY</em></em><div align="left"><span style="font-size: 10pt;">);</span></div></p></span><span style="font-size: 10pt;"><p align="left">} <strong style="color: #7f0055; font-size: 10pt;"><strong style="color: #7f0055; font-size: 10pt;">catch</strong></strong><div align="left"><span style="font-size: 10pt;"> (Exception ex) {</span></div></p></span><span style="font-size: 10pt;"><p align="left">ex.printStackTrace();</p><span style="font-size: 10pt;"><p align="left"><strong style="color: #7f0055; font-size: 10pt;"><strong style="color: #7f0055; font-size: 10pt;">throw</strong></strong><span style="font-size: 10pt;"> </span><strong style="color: #7f0055; font-size: 10pt;"><strong style="color: #7f0055; font-size: 10pt;">new</strong></strong><div align="left"><span style="font-size: 10pt;"> RuntimeException(ex);</span></div></p></span></span><strong style="color: #7f0055; font-size: 10pt;"><strong style="color: #7f0055; font-size: 10pt;"><p align="left">public</p></strong></strong><strong style="color: #7f0055; font-size: 10pt;"><strong style="color: #7f0055; font-size: 10pt;">boolean</strong></strong><span style="color: #000000; font-size: 10pt;"> login() </span><strong style="color: #7f0055; font-size: 10pt;"><strong style="color: #7f0055; font-size: 10pt;">throws</strong></strong><p align="left"><div align="left"><span style="color: #000000; font-size: 10pt;">LoginException {</span></div></p><span style="font-size: 10pt;"><p align="left" style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p align="left" style="min-height: 8pt; height: 8pt; padding: 0px;"> </p></span><strong style="color: #7f0055; font-size: 10pt;"><strong style="color: #7f0055; font-size: 10pt;">try</strong></strong><p align="left"><div align="left"><span style="font-size: 10pt;">{</span></div></p><span style="font-size: 10pt;"><p align="left" style="min-height: 8pt; height: 8pt; padding: 0px;"> </p></span><span style="color: #0000c0; font-size: 10pt;">m_success</span><span style="font-size: 10pt;"> = </span><strong style="text-decoration: underline;"><strong style=": ; color: #7f0055; font-size: 10pt; text-decoration: underline;"><strong style=": ; color: #7f0055; font-size: 10pt; text-decoration: underline;">super</strong></strong></strong><p align="left"><div align="left"><span style="font-size: 10pt;">.login();</span></div></p><span style="font-size: 10pt;"><p align="left" style="min-height: 8pt; height: 8pt; padding: 0px;"> </p></span><p align="left"><div align="left"><span style="color: #3f7f5f; font-size: 10pt;"><div align="left"><span style="color: #3f7f5f; font-size: 10pt;">// See if shared <span style="text-decoration: underline;">credentials</span> exist</span></div></span></div></p><span style="font-size: 10pt;"><p align="left" style="min-height: 8pt; height: 8pt; padding: 0px;"> </p></span><strong style="color: #7f0055; font-size: 10pt;"><strong style="color: #7f0055; font-size: 10pt;">if</strong></strong><span style="font-size: 10pt;"> (</span><span style="color: #0000c0; font-size: 10pt;">m_success</span><span style="font-size: 10pt;"> == </span><strong style="color: #7f0055; font-size: 10pt;"><strong style="color: #7f0055; font-size: 10pt;">true</strong></strong><p align="left"><div align="left"><span style="font-size: 10pt;">) {</span></div></p><span style="font-size: 10pt;"><p align="left" style="min-height: 8pt; height: 8pt; padding: 0px;"> </p></span><p align="left"><div align="left"><span style="color: #3f7f5f; font-size: 10pt;"><div align="left"><span style="color: #3f7f5f; font-size: 10pt;">// Setup our view of the user</span></div></span></div></p><span style="font-size: 10pt;"><p align="left">Object username =<div align="left"><span style="text-decoration: underline;">sharedState</span></div></p><p align="left">.get(</p></span><span style="color: #2a00ff; font-size: 10pt;">"javax.security.auth.login.name"</span><p align="left"><div align="left"><span style="font-size: 10pt;">);</span></div></p><span style="font-size: 10pt;"><p align="left">String name = username.toString();</p><p align="left" style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p align="left">Object password =<div align="left"><span style="text-decoration: underline;">sharedState</span></div></p><p align="left">.get(</p></span><span style="color: #2a00ff; font-size: 10pt;">"javax.security.auth.login.password"</span><p align="left"><div align="left"><span style="font-size: 10pt;">);</span></div></p><span style="font-size: 10pt;"><p align="left">MetreoJAASUser metreoUser = getUserPncplForUser(name);</p><p align="left" style="min-height: 8pt; height: 8pt; padding: 0px;"> </p></span><span style="text-decoration: underline;"><span style="color: #0000c0; font-size: 10pt;">m_tempPrincipals</span><span style="font-size: 10pt; text-decoration: underline;">.add(metreoUser)</span></span>;</p></span></div></p><span style="font-size: 10pt;"><p align="left">setupUserRoles(<span style="color: #0000c0; font-size: 10pt;">m_tempPrincipals</span><div align="left"><span style="font-size: 10pt;">, metreoUser);</span></div></p></span><span style="font-size: 10pt;"><p align="left" style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p align="left">} <strong style="color: #7f0055; font-size: 10pt;"><strong style="color: #7f0055; font-size: 10pt;">else</strong></strong><div align="left"><span style="font-size: 10pt;"> {</span></div></p></span><span style="font-size: 10pt;"><p align="left"><strong style="color: #7f0055; font-size: 10pt;"><strong style="color: #7f0055; font-size: 10pt;">throw</strong></strong><span style="font-size: 10pt;"> </span><strong style="color: #7f0055; font-size: 10pt;"><strong style="color: #7f0055; font-size: 10pt;">new</strong></strong><span style="font-size: 10pt;"> LoginException(</span><span style="color: #2a00ff; font-size: 10pt;">"Authentication failed"</span><div align="left"><span style="font-size: 10pt;">);</span></div></p></span><span style="font-size: 10pt;"><p align="left">}</p><p align="left" style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p align="left"><strong style="color: #7f0055; font-size: 10pt;"><strong style="color: #7f0055; font-size: 10pt;">return</strong></strong><span style="font-size: 10pt;"> (</span><strong style="color: #7f0055; font-size: 10pt;"><strong style="color: #7f0055; font-size: 10pt;">true</strong></strong><div align="left"><span style="font-size: 10pt;">);</span></div></p></span><span style="font-size: 10pt;"><p align="left" style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p align="left">} <strong style="color: #7f0055; font-size: 10pt;"><strong style="color: #7f0055; font-size: 10pt;">catch</strong></strong><div align="left"><span style="font-size: 10pt;"> (LoginException ex) {</span></div></p></span><span style="font-size: 10pt;"><p align="left"><strong style="color: #7f0055; font-size: 10pt;"><strong style="color: #7f0055; font-size: 10pt;">throw</strong></strong><div align="left"><span style="font-size: 10pt;"> ex;</span></div></p></span><span style="font-size: 10pt;"><p align="left">} <strong style="color: #7f0055; font-size: 10pt;"><strong style="color: #7f0055; font-size: 10pt;">catch</strong></strong><div align="left"><span style="font-size: 10pt;"> (Exception ex) {</span></div></p></span><span style="font-size: 10pt;"><p align="left"><span style="color: #0000c0; font-size: 10pt;">m_success</span><span style="font-size: 10pt;"> = </span><strong style="color: #7f0055; font-size: 10pt;"><strong style="color: #7f0055; font-size: 10pt;">false</strong></strong><div align="left"><span style="font-size: 10pt;">;</span></div></p></span><span style="font-size: 10pt;"><p align="left"><strong style="color: #7f0055; font-size: 10pt;"><strong style="color: #7f0055; font-size: 10pt;">throw</strong></strong><span style="font-size: 10pt;"> </span><strong style="color: #7f0055; font-size: 10pt;"><strong style="color: #7f0055; font-size: 10pt;">new</strong></strong><span style="font-size: 10pt;"> LoginException(ex.getMessage</span><div align="left"><span style="font-size: 10pt;">());</span></div></p></span><span style="font-size: 10pt;"><p align="left">}</p><p>}</p></span><p><span style="font-size: 10pt;">// My other methods</span></p><p><span style="font-size: 10pt;">}</span></p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p>log stacktrace:</p><p>-------------------</p></span></p><p>I enabled trace level debug and got to see the following,</p><p>16:00:19,638 TRACE [org.jboss.as.web.security.SecurityContextAssociationValve] (http--127.0.0.1-7001-2) Begin invoke, caller=null</p><p>16:00:19,648 TRACE [org.jboss.as.web.security.SecurityContextAssociationValve] (http--127.0.0.1-7001-2) End invoke, caller=null</p><p>16:00:19,648 TRACE [org.jboss.as.web.security.SecurityContextAssociationValve] (http--127.0.0.1-7001-2) Begin invoke, caller=null</p><p>16:00:19,658 DEBUG [org.apache.catalina.core.ContainerBase.[jboss.web].[default-host].[/metreoSSO].[jsp]] (http--127.0.0.1-7001-2)  Disabling the response for futher output</p><p>16:00:19,658 TRACE [org.jboss.as.web.security.SecurityContextAssociationValve] (http--127.0.0.1-7001-2) End invoke, caller=null</p><p>16:00:19,698 TRACE [org.jboss.as.web.security.SecurityContextAssociationValve] (http--127.0.0.1-7001-2) Begin invoke, caller=null</p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p><p><span style="font-size: 10pt;">Please let me know what else should I configure.</span></p><p><span style="font-size: 10pt;"></span></p><p><span style="font-size: 10pt;">Thanks,</span></p><p><span style="font-size: 10pt;"></span>Abiya</p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p></p></div>
<div style="background-color: #f4f4f4; padding: 10px; margin-top: 20px;">
<p style="margin: 0;">Reply to this message by <a href="http://community.jboss.org/message/645381#645381">going to Community</a></p>
<p style="margin: 0;">Start a new discussion in JBoss AS 7 Development at <a href="http://community.jboss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2225">Community</a></p>
</div></td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
</div>
</body>
</html>