[jboss-user] [JBoss Seam] - Re: JAAS login with JBoss Seam

[msduk]

It might be true now but I had configuration hell...



  | <?xml version="1.0" encoding="UTF-8"?>
  | <!DOCTYPE jboss-web PUBLIC "-//JBoss//DTD Web Application 2.3//EN" "http://www.jboss.org/j2ee/dtd/jboss-web_3_0.dtd">
  | 
  | <jboss-web>
  | 
  |    <security-domain>java:/jaas/fooSecurityPolicy</security-domain>
  | 
  |    <!-- Resource Environment References -->
  | 
  |    <!-- Resource references -->
  | 
  |    <!-- EJB References -->
  | 
  | </jboss-web>
  | 
  | <?xml version='1.0'?>
  | <!DOCTYPE policy PUBLIC
  |           "-//JBoss//DTD JBOSS Security Config 3.0//EN"
  |           "http://www.jboss.org/j2ee/dtd/security_config.dtd">
  | <policy>
  | 	<application-policy name="fooSecurityPolicy">
  | 		<authentication>            
  | 	        <login-module code="org.jboss.security.auth.spi.DatabaseServerLoginModule" flag="required"> 
  | 	            <module-option name="dsJndiName">
  | 	            	java:/fooDatasource
  | 	            </module-option> 
  | 	            <module-option name="principalsQuery">   
  | 	                SELECT password FROM user WHERE userId=?; 
  | 	            </module-option> 
  | 	            <module-option name="rolesQuery"> 
  | 	                SELECT role, 'Roles' FROM role r
  | 	                INNER JOIN user u ON u.userID = r.userID
  | 	                WHERE u.userId=?
  | 	            </module-option> 
  | 	            <module-option name="ignorePasswordCase">true</module-option>
  |       				<module-option name="hashCharset">UTF-8</module-option>
  |       				<module-option name="hashEncoding">hex</module-option>
  |       				<module-option name="hashAlgorithm">MD5</module-option>
  | 	        </login-module> 
  |     	</authentication>
  | 	</application-policy>
  | </policy>
  | 
  | <?xml version="1.0" encoding="UTF-8"?>
  | <server>
  |     <mbean code="org.jboss.security.auth.login.DynamicLoginConfig"
  |            name="foo:service=DynamicLoginConfig">
  |         <attribute name="AuthConfig">foo-login-config.xml</attribute>
  |         <depends optional-attribute-name="LoginConfigService">
  |             jboss.security:service=XMLLoginConfig
  |         </depends>
  |         <depends optional-attribute-name="SecurityManagerService">
  |             jboss.security:service=JaasSecurityManager
  |         </depends>
  |     </mbean>
  | </server> 
  | 
  | <security-constraint>
  | 		<web-resource-collection>
  | 			<web-resource-name>Secure Area</web-resource-name>
  | 			<description>Security for Protected Pages</description>
  | 			<url-pattern>/secure/*</url-pattern>
  | 			<http-method>POST</http-method>
  | 			<http-method>GET</http-method>
  | 		</web-resource-collection>
  | 		<auth-constraint>
  | 			<description>Only valid users can use the secure resources</description>
  | 			<role-name>fooUser</role-name>
  | 		</auth-constraint>
  | 		<user-data-constraint>
  |             <transport-guarantee>NONE</transport-guarantee>
  |         </user-data-constraint>
  | 	</security-constraint>
  | 	
  | 	<security-constraint>
  | 		<web-resource-collection>
  | 			<web-resource-name>Admin Area</web-resource-name>
  | 			<description>Administrator Protected Pages</description>
  | 			<url-pattern>/admin/*</url-pattern>
  | 			<http-method>POST</http-method>
  | 			<http-method>GET</http-method>
  | 		</web-resource-collection>
  | 		<auth-constraint>
  | 			<description>Only valid admin users can use the secure resources</description>
  | 			<role-name>fooAdmin</role-name>
  | 		</auth-constraint>
  | 		<user-data-constraint>
  |             <transport-guarantee>NONE</transport-guarantee>
  |         </user-data-constraint>
  | 	</security-constraint>
  | 	
  | 	<login-config>
  | 		<auth-method>FORM</auth-method>
  | 	    <realm-name>fooSecurityPolicy</realm-name>
  | 		<form-login-config>
  | 			<form-login-page>/login.seam</form-login-page>
  | 			<form-error-page>/loginError.seam</form-error-page>
  | 		</form-login-config>
  | 	</login-config>
  | 
  | 	<security-role>
  | 		<description>An foo system user</description>
  | 		<role-name>fooUser</role-name>
  | 	</security-role>
  | 	
  | 	<security-role>
  | 		<description>An foo admin user</description>
  | 		<role-name>fooAdmin</role-name>
  | 	</security-role>
  | 	
  | 	
  | 	<ejb-jar>
  |    <security-domain>java:/jaas/fooSecurityPolicy</security-domain>
  |    <assembly-descriptor>
  |       <interceptor-binding>
  |          <ejb-name>*</ejb-name>
  |          <interceptor-class>org.jboss.seam.ejb.SeamInterceptor</interceptor-class>
  |       </interceptor-binding>
  |    </assembly-descriptor>
  | </ejb-jar>
  | 
  | <jboss-app>
  | 	<module>
  |  		<service>foo-login-service.xml</service>
  |  	</module>
  |       <loader-repository> 
  |       seam.jboss.org:loader=foo
  |       </loader-repository> 
  | </jboss-app>
  | 

Personally I would use the simplified version if you can. I have always disliked JAAS.

View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4032124#4032124

Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4032124