[Security & JAAS/JBoss] - Re: Negotiate with Kerberos
by AndiWausS
Hey,
what I described yesterday was crap. The exceptions were not root of the problem, they happen with 4.0.3, too (TRACE).
The problem happens due to the new tomcat way of authorization in
public class JBossSecurityMgrRealm extends RealmBase implements Realm
| ...
| public boolean hasResourcePermission(Request request, Response response,
| SecurityConstraint[] constraints, org.apache.catalina.Context context)
| ...
|
There he receives a principal without the roles which was OK at that time, now they are needed to be passed by the valve.
I just solved the issue by changing the HttpServletRequestResponseValve in the negotiate-src.jar - just pass the principal instead of creating a new one without roles:
// If we got a good principal back from the realm, then make sure it
| // gets set on the Request object
|
| if (principal != null)
| {
| // Also make sure the good principal doesn´t loose his roles on the way to the realm..
| ((Request)httpRequest.get()).setUserPrincipal(principal);
| //new SimplePrincipal(principal.getName()));
| }
I assume the author did intentionally pass a serializable one and I now don´t...
I still wonder if someone from JBoss might take care of the negotiate-thing, like integrating it in a clean way...? I guess I did what I could do here and in the wiki..
Am I allowed to create a JIRA request myself for that or can someone do that for me?
View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3990053#3990053
Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3990053
19Â years
[JBoss Seam] - <s:link> and JavaScript
by dahm
Hello,
I've got a problem using the <s:link> tag. I'm using it in a data table
just like in the examples
| <h:dataTable var="v" value="#{mydata}">
| ...
| <h:column>
| <s:link value="Delete" action="#{listAction.delete" linkStyle="button"
| onclick="javascript:return confirm('Do you really want to do this?');"/>
| </h:column>
| ...
|
However, the code never ends up in the output, i.e. the HTML code.
Instead, Seam puts its own code there.
| <input type="button"onclick="location.href='/iv/listData.seam?actionMethod=listData.delete&dataModelSelection=mydata%5B0%5D'" value="Delete" />
|
Is this impossible or can the Seam code and mine somehow live together in harmony :-)
Cheers
Markus
View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3990034#3990034
Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3990034
19Â years