ANIL SALDHANA [http://community.jboss.org/people/anil.saldhana%40jboss.com] created the discussion "Re: Security Configuration in Domain Model - AS7" To view the discussion, visit: http://community.jboss.org/message/562240#562240 -------------------------------------------------------------- The domain model should also consider SSO into various containers.  It will be a sub element of the ejb, web domain language.  We are going to be pushing for the use of STS. -------------------------------------------------------------- Reply to this message by going to Community [http://community.jboss.org/message/562240#562240] Start a new discussion in PicketBox Development at Community [http://community.jboss.org/choose-container!input.jspa?contentType=1&...]

Marcus Moyses [http://community.jboss.org/people/mmoyses] created the discussion "Re: Security Configuration in Domain Model - AS7" To view the discussion, visit: http://community.jboss.org/message/590941#590941 -------------------------------------------------------------- Right now we are still using the same format we had in previous versions (except replacing application-policy for security-domain). We are not using FQCN for the login modules. We are using aliases for the class names mapped on the ModulesMap interface. Have in mind that this is likely to change when we finish separating authentication from role mapping in the JAAS login modules. -------------------------------------------------------------- Reply to this message by going to Community [http://community.jboss.org/message/590941#590941] Start a new discussion in PicketBox Development at Community [http://community.jboss.org/choose-container!input.jspa?contentType=1&...]

Marcus Moyses [http://community.jboss.org/people/mmoyses] created the discussion "Re: Security Configuration in Domain Model - AS7" To view the discussion, visit: http://community.jboss.org/message/590951#590951 -------------------------------------------------------------- Yes, we plan to have the new login modules ready for AS7 GA. The way security domains are configured will not change, only the login module's aliases (and implementations). -------------------------------------------------------------- Reply to this message by going to Community [http://community.jboss.org/message/590951#590951] Start a new discussion in PicketBox Development at Community [http://community.jboss.org/choose-container!input.jspa?contentType=1&...]

Marcus Moyses [http://community.jboss.org/people/mmoyses] created the discussion "Re: Security Configuration in Domain Model - AS7" To view the discussion, visit: http://community.jboss.org/message/590978#590978 -------------------------------------------------------------- I haven't put much thought into that. The idea of the map was to include the login modules (and other modules such as authorization, mapping, et cetera) that we provide as part of AS. Other login modules (customer's modules for instance) would be mapped using FQCN but before this can work we need to figure out how to load those classes with the new module classloader since LoginContext (part of JRE) will try and load the class using the TCCL. -------------------------------------------------------------- Reply to this message by going to Community [http://community.jboss.org/message/590978#590978] Start a new discussion in PicketBox Development at Community [http://community.jboss.org/choose-container!input.jspa?contentType=1&...]