Radoslaw Rodak wrote
Any authentication inside of AS7 ( this applies also to http logins
valves ) triggers JAAS login… see source code picketbox.
When doing authentication via a JASPIC (JSR 196) auth module the auth module
doesn't have to use a JAAS login module at all. Of course it's an option,
but not a requirement in any way. JASPIC does use the Subject class from
JAAS and the Callback and CallbackHandler interfaces, but that's about it
for the mandatory stuff.
Since JASPIC is a part of the Java EE spec, it's of course automatically an
option for authentication in AS 7.
View this message in context:
Sent from the JBoss AS7 Development mailing list archive at Nabble.com