[Security & JAAS/JBoss] - Jboss is not calling my custom login module
by mqaiserm
Hi,
I am trying to write my own Login Module to execute some customization. I am extending class IdentityLoginModule and writing my own code to authenticate and authorize against LDAP. I don't want to use LDAPLoginModule because of some customization. So I wrote my own login module and compiled and now I am trying to use this in a web application but this module is not being executed. Any idea what is wrong?
I added my Realm setting in server/default/conf/login-config.xml:
<application-policy name = "QaiserRealm">
<login-module code = "com.ercot.jaas.plugin.ErcotLoginModule"
flag = "required">
</login-module>
</application-policy>
My jboss-web.xml is :
<?xml version='1.0' encoding='UTF-8' ?>
<!DOCTYPE jboss-web
PUBLIC "-//JBoss//DTD Web Application 2.3V2//EN"
"http://www.jboss.org/j2ee/dtd/jboss-web_3_2.dtd">
<jboss-web>
<security-domain>java:/jaas/QaiserRealm</security-domain>
<class-loading java2ClassLoadingCompliance="false">
<loader-repository>
log4j.test:loader=eTest.war
<loader-repository-config>java2ParentDelegation=false</loader-repository-config>
</loader-repository>
</class-loading>
</jboss-web>
And my web.xml is :
<?xml version="1.0"?>
<!DOCTYPE web-app PUBLIC
"-//Sun Microsystems, Inc.//DTD Web Application 2.3//EN"
"http://java.sun.com/dtd/web-app_2_3.dtd">
<web-app>
eTest
<security-constraint>
<web-resource-collection>
<web-resource-name>ercotTest</web-resource-name>
An example security config that only allows users with the
role JBossAdmin to access the HTML JMX console web application
<url-pattern>/protected/*</url-pattern>
<http-method>GET</http-method>
<http-method>POST</http-method>
</web-resource-collection>
<auth-constraint>
<role-name>TestRole</role-name>
</auth-constraint>
</security-constraint>
<security-role>
<role-name>TestRole</role-name>
</security-role>
</web-app>
This TestRole is comming from LDAP and I am setting this in LoginModule. Problem is my custom login class is not even being called. Any idea?
View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4096306#4096306
Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4096306
18Â years, 9Â months
[JBoss Seam] - Pageflow Best Practice: Navigate back to "calling" page
by jfrankman
I have an edit page that can be reached from two different list pages. When the user is finished with the edit page I want to display the page that the user navigated from. For example if I had two list pages ListPageA and listPageB and the user navigates to the edit page from listPageA, then I want to display the listPageA page once the user has exited the edit page. If the user navigates to the edit page from listPageB then I would want to the user returned to ListPageB.
I have studied the seam gen applications and see that they pass a parameter of the calling page "from" into the target page. Then on the target page it uses this "from" parameter to navigate back to the calling page. Other than sending the calling page as a parameter is there any other way to handle this type of situation?
View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4096305#4096305
Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4096305
18Â years, 9Â months