<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<html>
<body link="#355491" alink="#4262a1" vlink="#355491" style="background: #e2e2e2; margin: 0; padding: 20px;">
<div>
<table cellpadding="0" bgcolor="#FFFFFF" border="0" cellspacing="0" style="border: 1px solid #dadada; margin-bottom: 30px; width: 100%; -moz-border-radius: 6px; -webkit-border-radius: 6px;">
<tbody>
<tr>
<td>
<table border="0" cellpadding="0" cellspacing="0" bgcolor="#FFFFFF" style="border: solid 2px #ccc; background: #dadada; width: 100%; -moz-border-radius: 6px; -webkit-border-radius: 6px;">
<tbody>
<tr>
<td bgcolor="#000000" valign="middle" height="58px" style="border-bottom: 1px solid #ccc; padding: 20px; -moz-border-radius-topleft: 3px; -moz-border-radius-topright: 3px; -webkit-border-top-right-radius: 5px; -webkit-border-top-left-radius: 5px;">
<h1 style="color: #333333; font: bold 22px Arial, Helvetica, sans-serif; margin: 0; display: block !important;">
<!-- To have a header image/logo replace the name below with your img tag -->
<!-- Email clients will render the images when the message is read so any image -->
<!-- must be made available on a public server, so that all recipients can load the image. -->
<a href="https://community.jboss.org/index.jspa" style="text-decoration: none; color: #E1E1E1">JBoss Community</a></h1>
</td>
</tr>
<tr>
<td bgcolor="#FFFFFF" style="font: normal 12px Arial, Helvetica, sans-serif; color:#333333; padding: 20px; -moz-border-radius-bottomleft: 4px; -moz-border-radius-bottomright: 4px; -webkit-border-bottom-right-radius: 5px; -webkit-border-bottom-left-radius: 5px;"><h3 style="margin: 10px 0 5px; font-size: 17px; font-weight: normal;">
Re: ClientLoginModule support
</h3>
<span style="margin-bottom: 10px;">
created by <a href="https://community.jboss.org/people/thammoud">Tarek Hammoud</a> in <i>JBoss AS 7 Development</i> - <a href="https://community.jboss.org/message/753027#753027">View the full discussion</a>
</span>
<hr style="margin: 20px 0; border: none; background-color: #dadada; height: 1px;">
<div class="jive-rendered-content"><p>Excuse me for misstating the real issue. We do not care about the JNDI lookup not being hardcoded with  security details. We want the freedom to invoke the EJB using the ClientLoginModule. It looks like Sasl Client setup does not take the credentials as set by ClientLoginModule into account. Is this supported? This worked just fine in 4.x and 6.x. I saw remote.connection.default.callback.handler.class property but could not find a CallBackHandler to  simply read what was setup by ClientLoginModule. I must be missing something. </p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><pre><p>public class TestRemoteReference {</p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p>    public static void main(String[] args) {</p><p>        try {</p><p>           Properties jndiProps = new Properties();</p><p>           jndiProps.put(Context.PROVIDER_URL,"remote://localhost:4447");</p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p>           jndiProps.put(Context.SECURITY_PRINCIPAL,   "username");</p><p>           jndiProps.put(Context.SECURITY_CREDENTIALS, "password");                      </p><p>           jndiProps.put(Context.URL_PKG_PREFIXES, "org.jboss.ejb.client.naming");</p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p>           Context ctx = new InitialContext(jndiProps);</p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p>           Properties clientProp = new Properties();</p><p>           clientProp.put("remote.connectionprovider.create.options.org.xnio.Options.SSL_ENABLED", "false");</p><p>           clientProp.put("remote.connections", "default");</p><p>           clientProp.put("remote.connection.default.port", "4447");</p><p>           clientProp.put("remote.connection.default.host", "localhost");</p><p>//           clientProp.put("remote.connection.default.username", "username");</p><p>//           clientProp.put("remote.connection.default.password", "password");</p><p>           clientProp.put("remote.connection.default.connect.options.org.xnio.Options.SASL_POLICY_NOANONYMOUS", "false");</p><p>           clientProp.put("remote.connection.default.connect.options.org.xnio.Options.SASL_DISALLOWED_MECHANISMS", "JBOSS-LOCAL-USER");</p><p>           clientProp.put("remote.connection.default.callback.handler.class", "org.jboss.security.auth.callback.JASPICallbackHandler");</p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p>           EJBClientConfiguration cc = new PropertiesBasedEJBClientConfiguration(clientProp);</p><p>           ContextSelector<EJBClientContext> selector = new ConfigBasedEJBClientContextSelector(cc);</p><p>           EJBClientContext.setSelector(selector);                                 </p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p>           Service service = (Service) ctx.lookup("XXX"); // No issues here</p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p>           // Local login as another user. Hoping that SASL will somehow pick these</p><p>           // credentials up before invocation</p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p>           // Client login module gets called and sets up the </p><p>           // the correct principal in SecurityAssociationActions.</p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p>           LoginContext c = SecurityUtils.login("client-login", "username2", "password2");</p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p>           // Fails witht he dreaded "No EJB receiver available" but the real exception is a security </p><p>           // Exception. If we uncomment the security info in the remote connection properties, it works fine</p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p>           Object result = service.doSomething()</p><p>        }</p><p>        catch(Throwable ex) {</p><p>            ex.printStackTrace();            </p><p>        }</p><p>    }</p><p>}</p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p>login.conf</p><p>client-login {</p><p>   org.jboss.security.ClientLoginModule  required</p><p>          ;</p><p>};</p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p></pre></div>
<div style="background-color: #f4f4f4; padding: 10px; margin-top: 20px;">
<p style="margin: 0;">Reply to this message by <a href="https://community.jboss.org/message/753027#753027">going to Community</a></p>
<p style="margin: 0;">Start a new discussion in JBoss AS 7 Development at <a href="https://community.jboss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2225">Community</a></p>
</div></td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
</div>
</body>
</html>