[jboss-user] [Security & JAAS/JBoss] - Re: Basic app client to app server authentication in J2EE

[Wolfgang Knauf]

Hi,

might be a misunderstanding: you still need the LoginContext on the client side. User/password are provided through the CallbackHandler interface:

AppCallbackHandler callbackHandler = new AppCallbackHandler(user, password.toCharArray() );
  |     LoginContext loginContext = new LoginContext ("logincontextname", callbackHandler);
  |     loginContext.login();
The "AppCallbackHandler" is a JBoss specific class, which contains user and password. There might be other implementations, which read user/password e.g. from user input.

The "logincontextname" must be declared in "auth.conf" and point to the client login module.

Best regards

Wolfgang

View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=4222291#4222291

Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=4222291