[Design of JBoss ESB] - Re: Web service security callbacks
by Kevin.Conner@jboss.com
Morning Heiko.
I have just been playing with the jmstransport unit test, trying to work out how JMS doesn't suffer from the issue we are seeing.
>From what I can see, the reason it does not suffer from our issue is that it is not trying to achieve the same thing. The JMS integration that currently exists appears to be exposing *MDBs* as a webservice and not exposing *webservices* over JMS. It is also exposing them as JAX-RPC endpoints instead of JAX-WS ones (hence avoiding the warning) . Is my correct or do I only have part of the puzzle?
.
What we are trying to achieve (at least in this instance) is to expose co-located *webservices* through the ESB without having to make an invocation over HTTP. We don't care whether the implementation of those webservices is 181, an MDB, JSE or otherwise. We are trying to act as an independent transport mechanism for jbossws.
This topic certainly needs more discussion but I do not feel that JBW is the appropriate place. Tom Fennelly has done the majority of this work and he should also be involved in these discussions.
View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4121485#4121485
Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4121485
18 years, 2 months
[Design of Security on JBoss] - Role generation and mapping
by anil.saldhana@jboss.com
Role Generation:
Historically, we have had role generation as part of the JAAS authentication process we do. The login modules populate the subject with a group called as "Roles". I want to provide RoleGeneration facilities at the security domain level. We will still maintain legacy role generation expectations as part of the Jaas layer.
Use case: User may perform authentication against the ldap server using a custom login module not inheriting from JBoss AbstractServerLoginModule. Then can use JBoss RoleGeneration modules specified at the security domain to generate the roles from a DB, LDAP server, properties file wherever.
Role Mapping:
Once the roles are generated and placed into the security context, the users can always apply mapping modules to the roles in the context.
Use case: As part of the security domain, for a particular principal, a set of roles are generated. The security domain is not dependent on a particular application or deployment. But an user may wish to apply specific mapping to roles based on the deployment or principal name or resource type etc.
I am looking for feedback mainly on the role generation part.
View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4121462#4121462
Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4121462
18 years, 2 months
[Design of Clustering on JBoss (Clusters/JBoss)] - Re: JBAS-4919 - ha singletons in heterogenous topologies
by bstansberry@jboss.com
Following your points;
1) +1. Please open a JIRA.
2) Better in createService() so the policy has it available in its own startService(). (The policy is injected into HASS, so it will go through create/start first). Keep doubting; if your gut keeps telling you it's wrong we can discuss more. If I decide it's wrong I won't flame you, as I've just now agreed. :)
The fact that this will be done should be documented in HASingletonSupport(MBean).setElectionPolicy().
3) That's ugly. That complexity is enough to convince me that the managedSingleton property should come out of HASingletonElectionPolicy.
4) Two semi-conflicting thoughts:
OTOH that's a lot of overhead. E.g. to run the testsuite we now need to have 3 IP addresses available, with multicast working between all 3. So, for now I'd say no, unless we can use mocks to simulate the cluster in the test driver's VM.
OTOH there's lots of other areas where this is useful. But, there's too much other stuff on our plates; if we can't do it in the test driver's VM. let's not do it at all for now.
View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4121451#4121451
Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4121451
18 years, 2 months