<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<html>
<body link="#355491" alink="#4262a1" vlink="#355491" style="background: #e2e2e2; margin: 0; padding: 20px;">
<div>
<table cellpadding="0" bgcolor="#FFFFFF" border="0" cellspacing="0" style="border: 1px solid #dadada; margin-bottom: 30px; width: 100%; -moz-border-radius: 6px; -webkit-border-radius: 6px;">
<tbody>
<tr>
<td>
<table border="0" cellpadding="0" cellspacing="0" bgcolor="#FFFFFF" style="border: solid 2px #ccc; background: #dadada; width: 100%; -moz-border-radius: 6px; -webkit-border-radius: 6px;">
<tbody>
<tr>
<td bgcolor="#000000" valign="middle" height="58px" style="border-bottom: 1px solid #ccc; padding: 20px; -moz-border-radius-topleft: 3px; -moz-border-radius-topright: 3px; -webkit-border-top-right-radius: 5px; -webkit-border-top-left-radius: 5px;">
<h1 style="color: #333333; font: bold 22px Arial, Helvetica, sans-serif; margin: 0; display: block !important;">
<!-- To have a header image/logo replace the name below with your img tag -->
<!-- Email clients will render the images when the message is read so any image -->
<!-- must be made available on a public server, so that all recipients can load the image. -->
<a href="https://community.jboss.org/index.jspa" style="text-decoration: none; color: #E1E1E1">JBoss Community</a></h1>
</td>
</tr>
<tr>
<td bgcolor="#FFFFFF" style="font: normal 12px Arial, Helvetica, sans-serif; color:#333333; padding: 20px; -moz-border-radius-bottomleft: 4px; -moz-border-radius-bottomright: 4px; -webkit-border-bottom-right-radius: 5px; -webkit-border-bottom-left-radius: 5px;"><h3 style="margin: 10px 0 5px; font-size: 17px; font-weight: normal;">
JBoss AS7: Enabling JASPI Authentication for Web Applications
</h3>
<span style="margin-bottom: 10px;">
new comment by <a href="https://community.jboss.org/people/atijms">arjan tijms</a> <a href="https://community.jboss.org/docs/DOC-17782#comment-10019">View all comments on this document</a>
</span>
<hr style="margin: 20px 0; border: none; background-color: #dadada; height: 1px;">
<div class="jive-rendered-content"><blockquote class="jive-quote"><p>Anil Saldhana wrote:</p>
                        <p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><div class="jive-rendered-content"><blockquote class="jive-quote"><p>Unless we see widespread adoption of JSR 196 usage, we will not make it the default.</p></blockquote></div><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p>
                    </blockquote><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p>Ok, thanks for explaining that. Adoption surely seems to be an issue, but does that really matter if JBoss uses this API for "internal" purposes? The current JASPI auth modules that ship with JBoss seem to be using JBoss/Tomcat APIs for their implementation, and thus can't be used with any other AS anyway.</p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p>So one thing I'm still wondering about is what the intended use case is for modules like "org.jboss.as.web.security.jaspi.modules.HTTPBasicServerAuthModule".</p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p>Those are not the default (and as you just explained, will probably not become default anytime soon), but the user can activate them. Since the same functionality is also provided by the traditional modules, why would a user want to use "org.jboss.as.web.security.jaspi.modules.HTTPBasicServerAuthModule"?</p></div>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
</div>
</body>
</html>