[ https://issues.jboss.org/browse/AS7-2801?page=com.atlassian.jira.plugin.s... ] Yves Peter edited comment on AS7-2801 at 11/27/11 7:24 AM: ----------------------------------------------------------- One way of solving this would be to make use of a the principal mapping-modules inside the JBossWebRealm. Mapping modules for this already exist: http://anonsvn.jboss.org/repos/picketbox/trunk/security-jboss-sx/jbosssx/... http://anonsvn.jboss.org/repos/picketbox/trunk/security-jboss-sx/jbosssx/... I think the mapping should happen before any authentication modules are run, so you can use the mapped principal in the modules. This solution and the modules could also be used for remote ejb authentication, so it works the same way for both cases. was (Author: yves.p): One way of solving this would be to make use of a the principal mapping-modules inside the JBossWebRealm. Mapping modules for this already exist: http://anonsvn.jboss.org/repos/picketbox/trunk/security-jboss-sx/jbosssx/... and http://anonsvn.jboss.org/repos/picketbox/trunk/security-jboss-sx/jbosssx/... I think the mapping should happen before any authentication modules are run, so you can use the mapped principal in the modules. This solution and the modules could also be used for remote ejb authentication, so it works the same way for both cases. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.jboss.org/secure/ContactAdministrators!default.jspa For more information on JIRA, see: http://www.atlassian.com/software/jira

[ https://issues.jboss.org/browse/AS7-2801?page=com.atlassian.jira.plugin.s... ] Yves Peter updated AS7-2801: ---------------------------- Description: In JBoss 7 it is no longer possible to configure how a certificate is mapped to a principal using client-cert authentication. The dynamic code was removed in JBoss 7 in the JBossWebRealm and is now hard coded to use the SubjectDNMapping: http://grepcode.com/file/repository.jboss.org/nexus/content/repositories/... http://grepcode.com/file/repository.jboss.org/nexus/content/repositories/... Also the JBossWebRealm does only consider role- but no principal-mapping modules. We use this to authenticate users against an ldap server where the dn of the user doesn't match the dn in the ldap server. Also it's useful for display purpose in an application. An example and some further information is in the linked user form thread. was: In JBoss 7 it is no longer possible to configure how a certificate is mapped to a principal using client-cert authentication. The dynamic code was removed in JBoss 7 in the JBossWebRealm and is now hard coded to use the SubjectDNMapping: http://grepcode.com/file/repository.jboss.org/nexus/content/repositories/... http://grepcode.com/file/repository.jboss.org/nexus/content/repositories/... Also the JBossWebRealm does only consider role- but no principal-mapping modules. We use this for authentication of users against an ldap server where the dn of the user doesn't match the dn in the ldap server. Also it's useful for display purpose in an application. An example and some further information is in the linked user form thread. Forum Reference: http://community.jboss.org/message/636824 (was: http://community.jboss.org/message/636824) -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.jboss.org/secure/ContactAdministrators!default.jspa For more information on JIRA, see: http://www.atlassian.com/software/jira

[ https://issues.jboss.org/browse/AS7-2801?page=com.atlassian.jira.plugin.s... ] SBS JIRA Integration updated AS7-2801: -------------------------------------- Forum Reference: https://community.jboss.org/message/635503#635503, http://community.jboss.org/message/636824 (was: http://community.jboss.org/message/636824) -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.jboss.org/secure/ContactAdministrators!default.jspa For more information on JIRA, see: http://www.atlassian.com/software/jira