August 2006 - jboss-dev-forums - Jboss List Archives

[Design of Security on JBoss] - Re: Negotiate with Kerberos

by anil.saldhana＠jboss.com

Does anyone read the Security FAQ? http://wiki.jboss.org/wiki/Wiki.jsp?page=SecurityFAQ Q13 talk of getting the servlet request. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3966801#3966801 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3966801

18 years, 1 month

1
0
0 / 0

[Design of Security on JBoss] - Re: Providing Auditing Capabilities

by anil.saldhana＠jboss.com

http://jira.jboss.com/jira/browse/JBAS-2738 has been implemented in HEAD. The default Audit Provider is a logging provider that basically takes advantage of logging configuration provided by the logging framework to send the log to a particular sink (file, database, jms etc) and provide rolling features. A piece that is missing is the configuration of the audit providers at the security domain level. Currently the web layer (JBossWebRealm) and the EJB Security Interceptor do the audit logging for authentication and authorization attempts. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3966800#3966800 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3966800

18 years, 1 month

1
0
0 / 0

[Design of POJO Server] - Re: Behavior with AbstractKernelController

by scott.stark＠jboss.org

Right. I'll go through the jmx tests in the MC_VDF_WORK branch and create one that represents what needs to happen for this usage to be able to talk about what needs to be changed. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3966798#3966798 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3966798

18 years, 1 month

1
0
0 / 0

[Design of Security on JBoss] - Re: Negotiate with Kerberos

by cdelashmutt

Thanks, Scott! That eliminates the need for replacing the specialized callback handler altogether. I'll try to get that worked in asap. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3966797#3966797 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3966797

18 years, 1 month

1
0
0 / 0

[Design of Security on JBoss] - Re: Negotiate with Kerberos

by scott.stark＠jboss.org

The WebCallbackHandler is not the way to get the http request. See: http://wiki.jboss.org/wiki/Wiki.jsp?page=AccessingServletRequestForAuthen... View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3966794#3966794 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3966794

18 years, 1 month

1
0
0 / 0

[Design of JBoss Eclipse IDE (dev)] - Re: xdoclet eclipse The currently displayed page contains in

by king_kaos

to all those who have the same problem: this bug seems to be a JBoss Eclipse IDE 1.6.0 problem. i kicked my 1.6.0 and just installed the 2.0.0 Alpha - the error is gone! probably downloading a bundled version of jboss ide and eclipse will do it, too, and you have no alpha... peace, king_kaos. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3966781#3966781 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3966781

18 years, 1 month

1
0
0 / 0

[Design of JBoss Eclipse IDE (dev)] - Re: xdoclet eclipse The currently displayed page contains in

by king_kaos

this bug still seems to be present. i just set up a linux machine and installed the current version of eclipse(3.2.0) and JBoss Eclipse IDE (1.6.0 GA). when i try to access the xdoclet properties of my project, i get the same error. that so sad :( - i just wanted to evaluate JBoss, and i cannot even setup a project. i hope this is getting fixed soon - it's a real major blocker. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3966778#3966778 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3966778

18 years, 1 month

1
0
0 / 0

[Design of JBoss ESB] - Re: Registry Design

by tfennelly

Thanks Kev. I think we're clear on the fact that we're trying to define an interface here and that issues such as clustering will very likely not effect that interface. All that said, I can't see any harm in talking around these topics a little here in the forum. As far as this interface is concerned, we've been thinking that we really just need an Inquiry interface along the lines of that defined in the UDDI spec. So the next questions I have in my head are: 1. Do we need the same level of capability, or can we do with something more basic in the short term? I'd hope we can! 2. How does this interface compare with the equivalent interfaces in the other reg specs? View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3966774#3966774 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3966774

18 years, 1 month

1
0
0 / 0

[Design of JBoss jBPM] - Re: Web App Error - No ManagedConnections available

by falazar

Sorry, I looked at your post too quickly, didnt see the first line there. Will check for that in logs. James View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3966771#3966771 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3966771

18 years, 1 month

1
0
0 / 0

[Design of Security on JBoss] - session timeout does not invalidate the SSO

by mtolbert

I am using JBoss SSO on an application that consists of multiple WAR's and the application needs to track when a users session (SSO) is created and destroyed. I have implemented an HttpListener and defined it in web.xml. Unfortunately, when one webapp (WAR) session invalidates/times out it doesn't necessarily mean that all sessions in all webapps have been invalidated for that user. Therefore, this approach doesn't accomplish what I need, which is track when a users SSO gets created and destroyed. It would be nice if there was some sort of SSOListener that could be implemented. This SSOListener might be invoked when the SSO is created and destroyed, and have methods like ssoCreated() and ssoDestroyed(). Is there a hook to tell when a SSO gets created and destroyed? FYI- This is my SSO configuration for JBoss -- server.xml -- turned on valve: org.apache.catalina.authenticator.SingleSignOn -- jboss-service.xml -- Disabled SSO caching by setting DefaultCacheTimeout and DefaultCacheResolution to 0. Any assistance would be appreciated. -Mike View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3966770#3966770 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3966770

18 years, 1 month

1
0
0 / 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

jboss-dev-forums August 2006