[jboss-jira] [JBoss JIRA] Updated: (JBAS-4410) JaasSecurityDomain settings need to be sent to SecurityConfiguration

JaasSecurityDomain settings need to be sent to SecurityConfiguration -------------------------------------------------------------------- Key: JBAS-4410 URL: http://jira.jboss.com/jira/browse/JBAS-4410 Project: JBoss Application Server Issue Type: Task Security Level: Public(Everyone can see) Components: Security Affects Versions: JBossAS-5.0.0.Beta2 Reporter: Anil Saldhana Assigned To: Anil Saldhana Fix For: JBossAS-5.0.0.CR1 SECURITY-26 has a need for the MBean services and other security related integration aspects for the JBAS to get back into the AS workspace. I see an issue with the Ldapxxx login modules having a reliance on the DecodeAction privileged action, that internally used to call the JaasSecurityDomain mbean service to decode a b64 string. Now since the JaasSecurityDomain mbean service was the central source of the various jsse/crypto settings, we need to get away from this model and use the static SecurityConfiguration as the sink for the security settings. This static SecurityConfiguration can be populated from JaasSecurityDomain Mbean service, the security deployer or wherever. There certainly has to be a better way than the static SecuriytConfiguration. For now, it is sufficient.