[Security & JAAS/JBoss] - Re: webapp login in a virual host
by hawkis
Excerpt from the <JBOSS_ROOT>/server/default/deploy/jbossweb-tomcat55.sar/server.xml:
| <Engine name="jboss.web" defaultHost="newhost">
|
| <!-- Removed most of the comments -->
| <Realm className="org.jboss.web.tomcat.security.JBossSecurityMgrRealm"
| certificatePrincipal="org.jboss.security.auth.certs.SubjectDNMapping"
| allRolesMode="authOnly"
| />
|
| <Host name="newhost"
| autodeploy="true"
| deployOnStartup="true"
| deployXML="true"
| appBase="app">
| <Valve className="org.apache.catalina.valves.AccessLogValve"
| directory="applog"
| suffix=".log"
| pattern="combined"/>
| <DefaultContext crossContext="true" reloadable="true" />
| <Context path="" docBase="app.war" />
| </Host>
|
| <Host name="localhost"
| autoDeploy="false" deployOnStartup="false" deployXML="false"
| configClass="org.jboss.web.tomcat.security.config.JBossContextConfig"
| >
| <!-- only comments here -->
| </Host>
|
View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4025213#4025213
Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4025213
19Â years, 1Â month
[Beginners Corner] - ldap
by philpriest
I have installed jboss-portal-2.4.1, I have a need to auth against a ldap server. from the wiki i have done this:
I have updated $JBOSS_HOME\server\default\deploy\jboss-portal.sar\conf\login-config.xml:
<?xml version='1.0'?>
<!--~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~ JBoss, a division of Red Hat ~
~ Copyright 2006, Red Hat Middleware, LLC, and individual ~
~ contributors as indicated by the @authors tag. See the ~
~ copyright.txt in the distribution for a full listing of ~
~ individual contributors. ~
~ ~
~ This is free software; you can redistribute it and/or modify it ~
~ under the terms of the GNU Lesser General Public License as ~
~ published by the Free Software Foundation; either version 2.1 of ~
~ the License, or (at your option) any later version. ~
~ ~
~ This software is distributed in the hope that it will be useful, ~
~ but WITHOUT ANY WARRANTY; without even the implied warranty of ~
~ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU ~
~ Lesser General Public License for more details. ~
~ ~
~ You should have received a copy of the GNU Lesser General Public ~
~ License along with this software; if not, write to the Free ~
~ Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA ~
~ 02110-1301 USA, or see the FSF site: http://www.fsf.org. ~
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~-->
<!DOCTYPE policy PUBLIC
"-//JBoss//DTD JBOSS Security Config 3.0//EN"
"http://www.jboss.org/j2ee/dtd/security_config.dtd">
<!-- For the JCR CMS -->
<application-policy name="cms">
<login-module code="org.apache.jackrabbit.core.security.SimpleLoginModule" flag="required"/>
</application-policy>
<application-policy name="portal">
<login-module code="org.jboss.portal.identity.auth.IdentityLoginModule" flag="sufficient">
<module-option name="unauthenticatedIdentity">guest</module-option>
<module-option name="userModuleJNDIName">java:/portal/UserModule</module-option>
<module-option name="roleModuleJNDIName">java:/portal/RoleModule</module-option>
<module-option name="additionalRole">Authenticated</module-option>
<module-option name="password-stacking">useFirstPass</module-option>
</login-module>
<login-module code="org.jboss.security.auth.spi.LdapExtLoginModule" flag="required" >
<module-option name="java.naming.factory.initial">
com.sun.jndi.ldap.LdapCtxFactory
</module-option>
<module-option name="java.naming.provider.url">
ldap://localhost:389/
</module-option>
<module-option name="java.naming.security.authentication">
simple
</module-option>
<module-option name="baseCtxDN">ou=People,o=ITS</module-option>
<module-option name="baseFilter">(uid={0})</module-option>
<module-option name="rolesCtxDN">ou=Groups,o=ITS</module-option>
<module-option name="roleFilter">(member={1})</module-option>
<module-option name="roleAttributeID">member</module-option>
<module-option name="roleRecursion">-1</module-option>
<module-option name="roleNameAttributeID">cn</module-option>
<module-option name="roleAttributeIsDN">true</module-option>
<module-option name="searchTimeLimit">5000</module-option>
<module-option name="searchScope">SUBTREE_SCOPE</module-option>
</login-module>
</application-policy>
How do i go about testing that i can auth against the ldap server? i can do a
ldapsearch -x from one of my clients and see the db.
thanks
Phil
View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4025212#4025212
Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4025212
19Â years, 1Â month
[JBoss jBPM] - Best way to debug my BPEL processes in JBPM?
by meghanai_99
Hello,
I have deployed my BPEL process calling external webservice successfully. Now I am sending SOAP request to it using SOAP UI. I get this message on the console -
| 11:50:08,182 INFO [ServiceEndpointManager] WebService started: http://HQ02022:8
| 080/NewHire/newhire
| 12:16:30,891 WARN [ProxyWarnLog] Narrowing proxy to class org.jbpm.bpel.graph.d
| ef.CompositeActivity - this operation breaks ==
|
and exception in the server.log
| 2007-03-05 12:17:23,978 DEBUG [org.jbpm.bpel.graph.scope.FaultActionHandler] handling fault: org.jbpm.bpel.graph.exe.ScopeInstance@1641f43[name=<null>,token=/,state=performingPrimaryActivity,id=0]
| org.jbpm.bpel.graph.exe.BpelFaultException: org.jbpm.bpel.graph.exe.FaultInstance@7f923d[name={http://schemas.xmlsoap.org/ws/2004/03/business-process/}selectionFailure,id=0]
| at org.jbpm.bpel.sublang.xpath.XPathEvaluator.getSingleNode(XPathEvaluator.java:175)
| at org.jbpm.bpel.sublang.xpath.XPathQueryEvaluator.evaluate(XPathQueryEvaluator.java:57)
| at org.jbpm.bpel.graph.basic.assign.FromVariable.extract(FromVariable.java:57)
|
>From the error message it is clear that it cannot find node at some xpath or finds multiple nodes. But it does not print the 'assign' node index or xpath. Most probably it has failed in very first xpath but going forward what is the best way to debug what went wrong?
The only way I can think of right now is to build jbpm-bpel locally. If I want to debug the source code, which port of 'localhost' I should attach the eclipse debugger with?
Thank you,
Meghana
View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4025197#4025197
Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4025197
19Â years, 1Â month