[jboss-user] [Security & JAAS/JBoss] - Map LDAP Roles to Application Roles in XML

[jej2003]

I am attempting to map a Role in LDAP (admin) to a role in my application (Administrators).  I had thought that I could accomplish this using the following


  | <?xml version="1.0" encoding="ASCII"?>
  | <ejb-jar xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://java.sun.com/xml/ns/javaee" xmlns:ejb="http://java.sun.com/xml/ns/javaee/ejb-jar_3_0.xsd" xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/ejb-jar_3_0.xsd" version="3.0">
  |   <display-name>SecuredEchoEnterpriseApplicationEJB</display-name>
  |   <enterprise-beans>
  |   	<session>
  |   		<ejb-name>EchoBean</ejb-name>
  |   		<security-role-ref>
  |   			<role-name>Administrators</role-name>
  |   			<role-link>admin</role-link>
  |   		</security-role-ref>
  |   	</session>
  |   </enterprise-beans>
  |   
  |   
  |    <assembly-descriptor>
  |    	
  |    	<security-role>
  |    		<role-name>admin</role-name>
  |    	</security-role>
  |    	<security-role>
  |    		<role-name>Users</role-name>
  |    	</security-role>
  |    </assembly-descriptor>
  | </ejb-jar>
  | 
  | 

However when I run with this I get 

  | ERROR [RoleBasedAuthorizationInterceptor] Insufficient permissions, principal=jjohnson, requiredRoles=[Administrators], principalRoles=[admin]
  | 

How can I map this LDAP group admin to my Application group Administrators?

View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4185200#4185200

Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4185200