[jboss-user] [Security & JAAS/JBoss] - Migration from Bea Weblogic => Security roles, users and gro

altes-kind do-not-reply at jboss.com
Mon Nov 17 09:28:02 EST 2008


I'm currently migrating an application from BEA WebLogic 8.1 to JBoss AS 4.2.1.

This applications consists of several web apps with configured roles in weblogic.xml and web.xml. For example the HostAccess web app:

weblogic.xml
<!DOCTYPE weblogic-web-app PUBLIC "-//BEA
  | Systems, Inc.//DTD Web Application 8.1//EN"
  | "http://www.bea.com/servers/wls810/dtd/weblogic810-web-jar.dtd">
  | <weblogic-web-app>
  | 	<security-role-assignment>
  | 		<role-name>hostaccessrole</role-name>
  | 		<principal-name>HostAccessUsers</principal-name>
  | 	</security-role-assignment>
  | </weblogic-web-app>
web.xml
<?xml version="1.0" encoding="ISO-8859-1" ?> 
  | <!DOCTYPE web-app PUBLIC "-//Sun Microsystems, Inc.//DTD Web Application 2.3//EN" "http://java.sun.com/dtd/web-app_2_3.dtd">
  | <web-app>
  | 	<display-name>HostAccess</display-name> 
  | 	<session-config>
  | 		<session-timeout>60</session-timeout> 
  | 	</session-config>
  | 	<security-constraint>
  | 		<web-resource-collection>
  | 			<web-resource-name>HostAccess</web-resource-name> 
  | 			<url-pattern>/HostAccess/*</url-pattern> 
  | 			<http-method>GET</http-method> 
  | 			<http-method>POST</http-method> 
  | 		</web-resource-collection>
  | 		<auth-constraint>
  | 			<role-name>hostaccessrole</role-name> 
  | 		</auth-constraint>
  | 		<user-data-constraint>
  | 			<transport-guarantee>NONE</transport-guarantee> 
  | 		</user-data-constraint>
  | 	</security-constraint>
  | 	<login-config>
  | 		<auth-method>BASIC</auth-method> 
  | 	</login-config>
  | 	<security-role>
  | 		<role-name>hostaccessrole</role-name> 
  | 	</security-role>
  | </web-app>

Weblogic Server Console
In Weblogic Server Console there is a configured security realm with several users and groups (e.g. HostAccessUsers). See screenshot: http://i35.tinypic.com/1roy2o.png

What steps do I have to do in JBoss AS to get the same configuration as in Weblogic?
a) As there is no Server Console in JBoss, how do I configure users and groups in JBoss AS?
b) How do I have to change the weblogic.xml to use it in JBoss AS?

Thank you very much!!!!!!
altes-kind

View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4189811#4189811

Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4189811



More information about the jboss-user mailing list