[Security & JAAS/JBoss] - Container based authentication, user name based authorizatio
by manzikki
Hello.
somehow I did not find examples of this in the forums or documentation.
I've set up a box where the users are required to authenticate using LDAP.
Practically, in in jboss/server/default/login-config.xml there is a policy like
<application-policy name = "LDAP">
<login-module code="org.jboss.security.auth.spi.LdapLoginModule"
flag="required">
...
and in the application's jboss-web.xml
<security-domain>java:/jaas/LDAP</security-domain>
and in the application's web.xml
<security-constraint>
<web-resource-collection>
<web-resource-name>SECURITY_DOMAIN</web-resource-name>
<url-pattern>/foo</url-pattern>
<url-pattern>/bar</url-pattern>
</web-resource-collection>
<auth-constraint><role-name>*</role-name> </auth-constraint>
</security-constraint>
<login-config>
<auth-method>BASIC</auth-method>
<realm-name>TEST</realm-name>
</login-config>
It works: the users that can authenticate themselves with LDAP have an access to the application. However, of these I'd like only _some_ to be able to access the application and role names are not too usable in our organisation.
Is there a way to define a list of accepted user names in auth-constraint or something of the same effect?
-man
View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3977777#3977777
Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3977777
19 years, 7 months
[Installation, Configuration & Deployment] - HTTP Request statistics
by chrismalan
I have a webapplication running (www.lessonsite.com.au) and managed to get Tomcat to generate request logs. Webalizer then reads these logs and generates very nice request statistics.
However, the request log grows big very quickly and needs to be rotated. I used logrotate for that. Unfortunately webalizer needs the same log file to read from every time - request_log_2006_10_08.log and request_log_2006_10_09.log won't do. Pity. Rotating the log while the server runs results in an invalid new log. The docs say stop the web server, rotate the logs, restart the web server. With Apache that is quick, but with JBoss restarting takes the best part of a minute.
The logs grow so big quite quickly that webalizer takes more than 10 seconds to do its thing. Once that crashed the server. Resources are limited.
Does anyone know a way past this? I am thinking of running JBoss behind Apache which then generates the request logs. That way only Apache needs to be restarted. According to the Tomcat website the performance advantage of Apache over Tomcat 5 is no longer a factor. So, I am loathe to do this.
This will be an issue for anyone running JBoss who wants request statistics.
Any ideas?
As an aside, I signed up with Google analytics to get the same statistics. The figures differ. For 11 October Google says the site got 63 visits (not hits) and webalizers says 85 visits. All the Google code is where it should be in the web pages.
View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3977774#3977774
Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3977774
19 years, 7 months
[JBoss Seam] - Re: Seam with Jbpm - Operation not allowed.
by rhino0314
This is my solution:
1. Edit org.jboss.seam.jsf.SeamApplication, add following line for jsf 1.2:
//------------------- methods for jsf 1.2 -------------------------
public ResourceBundle getResourceBundle(FacesContext ctx, String name) {
return application.getResourceBundle(ctx, name);
}
public void addELResolver(ELResolver resolver) {
application.addELResolver(resolver);
}
public ELResolver getELResolver() {
return application.getELResolver();
}
public UIComponent createComponent(ValueExpression componentExpression,
FacesContext context,
String componentType)
throws FacesException {
return application.createComponent(componentExpression, context, componentType);
}
public ExpressionFactory getExpressionFactory() {
return application.getExpressionFactory();
}
public void addELContextListener(ELContextListener listener) {
application.addELContextListener(listener);
}
public void removeELContextListener(ELContextListener listener) {
application.removeELContextListener(listener);
}
public ELContextListener [] getELContextListeners() {
return application.getELContextListeners();
}
2. Rebuild jboss-seam;
3. Rebuild your app with new jboss-seam.jar
View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3977770#3977770
Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3977770
19 years, 7 months