<div dir="ltr">Hi,<br><div class="gmail_extra"><br><div class="gmail_quote">On Mon, Jun 8, 2015 at 3:42 PM, Stefan Guilhen <span dir="ltr"><<a href="mailto:sguilhen@redhat.com" target="_blank">sguilhen@redhat.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000"><span class="">
<div>On 06/08/2015 07:08 AM, arjan tijms
wrote:<br>
</div>
<blockquote type="cite">
<div dir="ltr">
<div class="gmail_extra">
<div class="gmail_quote"><br>
<div>Theoretically, this is where JACC could come in
according to the Java EE standards. This would allow you
to implement your own (optimized if necessary) logic for
"is user/caller in role".</div>
<div><br>
</div>
<div>However despite being Java EE 7 certified, it seems
it's not actually possible to install a JACC provider on
JBoss. This is a bit of a spec hole, unfortunately. Most
of the code seems to be there in JBoss (WildFly), but
there's just no place where you can actually put your own
JACC provider.</div>
</div>
</div>
</div>
</blockquote>
<br></span>
Huh? We would not be certified if we didn't support custom providers
as the TCK requires the installation of its own provider. The
javax.security.jacc.PolicyConfigurationFactory.provider and
javax.security.jacc.policy.provider system properties are both
supported by WildFly.<br></div></blockquote><div><br></div><div>Indeed, you would say that. But I do know that a TCK can be lacking "a little", specifically where it concerns JASPIC and JACC, unfortunately. There are a few other major violations in various certified products. With JASPIC for instance it was possible to certify a product that just didn't implement the actual authentication, which is the core of the core of JASPIC :X</div><div><br></div><div>Those properties are of course supported, but where does one put the classes (or jar containing these classes)? I tried for hours at end and asked in the JBoss forum, but it never became clear. The documentation doesn't mention it either. See this for my question about this: <a href="https://developer.jboss.org/thread/254106">https://developer.jboss.org/thread/254106</a></div><div><br></div><div>Would be really cool if the location could become clear. Thanks!</div><div><br></div><div>Kind regards,</div><div>Arjan Tijms</div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div> </div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"><div bgcolor="#FFFFFF" text="#000000">
<br>
<blockquote type="cite">
<div dir="ltr">
<div class="gmail_extra">
<div class="gmail_quote">
<div><br>
</div>
<div>Kind regards,</div>
<div>Arjan Tijms</div>
</div>
</div>
</div><span class="">
<br>
<fieldset></fieldset>
<br>
<pre>_______________________________________________
wildfly-dev mailing list
<a href="mailto:wildfly-dev@lists.jboss.org" target="_blank">wildfly-dev@lists.jboss.org</a>
<a href="https://lists.jboss.org/mailman/listinfo/wildfly-dev" target="_blank">https://lists.jboss.org/mailman/listinfo/wildfly-dev</a></pre>
</span></blockquote>
<br>
</div>
<br>_______________________________________________<br>
wildfly-dev mailing list<br>
<a href="mailto:wildfly-dev@lists.jboss.org">wildfly-dev@lists.jboss.org</a><br>
<a href="https://lists.jboss.org/mailman/listinfo/wildfly-dev" target="_blank">https://lists.jboss.org/mailman/listinfo/wildfly-dev</a><br></blockquote></div><br></div></div>