[Security & JAAS/JBoss] - Re: JAAS security conversion from WebSphere to JBoss
by plscstx
"plscstx" wrote : Team --
| I am trying to convert an application using JAAS on WebSphere to be using JAAS on JBoss.
|
| I feel like I am still missing some things, not to mention that I keep typing in my correct password and it is not authenticating.
|
| I am not using an EJBs just base web authentication.
| jboss-web.xml =
| <?xml version="1.0"?>
| <jboss-web>
| <!-- All secured web content uses this security manager -->
| <security-domain>java:/jaas/mortgageAdmin</security-domain>
| </jboss-web>
|
| login-config.xml =
| <application-policy name = "mortgageAdmin">
|
| <login-module code = "org.jboss.security.auth.spi.LdapLoginModule" flag = "required">
| <module-option name="java.naming.factory.initial">com.sun.jndi.ldap.LdapCtxFactory</module-option>
| <module-option name="java.naming.provider.url">ldap://~~~~~</module-option>
| <module-option name="java.naming.security.authentication">simple</module-option>
| <module-option name="java.naming.security.principal">"d~~i\\"+username</module-option>
| <module-option name="java.naming.security.credentials">password</module-option>
|
| </login-module>
|
| </application-policy>
|
|
| Where I feel like I am still missing something is the fact that in WebSphere, we had to define an ibm-application-bnd.xmi file which looks like the below snippet. However, I am not sure where I would be putting this equivalent for the JBoss configuration.
|
| <?xml version="1.0" encoding="UTF-8"?>
| <applicationbnd:ApplicationBinding xmi:version="2.0" xmlns:xmi="http://www.omg.org/XMI" xmlns:applicationbnd="applicationbnd.xmi" xmi:id="ApplicationBinding_1103565947194">
| <authorizationTable xmi:id="AuthorizationTable_1103565947194">
| <authorizations xmi:id="RoleAssignment_1108662566127">
|
| <groups xmi:id="Group_1159457809140" name="App.Prod.Mortgage.~~~.LoanOfficer"/>
| <groups xmi:id="Group_1159457809141" name="App.Prod.Mortgage.~~~.LoanOfficer"/>
| <groups xmi:id="Group_1159457809142" name="App.Prod.Mortgage.~~~.LoanOfficer"/>
| ...
|
|
| Also, I am currently getting the following error and I know I am typing in my password correctly.
| The server log is reporting the following:
| 2008-02-06 15:11:58,537 TRACE [org.jboss.security.auth.login.XMLLoginConfigImpl] End getAppConfigurationEntry(mortgageAdmin), authInfo=AppConfigurationEntry[]:
| [0]
| LoginModule Class: org.jboss.security.auth.spi.LdapLoginModule
| ControlFlag: LoginModuleControlFlag: required
| Options:name=uidAttributeID, value=username
| name=java.naming.security.authentication, value=simple
| name=java.naming.factory.initial, value=com.sun.jndi.ldap.LdapCtxFactory
| name=java.naming.security.credentials, value=password
| name=java.naming.provider.url, value=ldap://~~~~~~
| name=java.naming.security.principal, value=username
| name=principalDNPrefix, value="d~~i\\"
| 2008-02-06 15:11:58,537 DEBUG [org.apache.catalina.loader.WebappClassLoader] loadClass(org.jboss.security.auth.spi.LdapLoginModule, false)
| 2008-02-06 15:11:58,537 DEBUG [org.apache.catalina.loader.WebappClassLoader] Searching local repositories
| 2008-02-06 15:11:58,537 DEBUG [org.apache.catalina.loader.WebappClassLoader] findClass(org.jboss.security.auth.spi.LdapLoginModule)
| 2008-02-06 15:11:58,537 DEBUG [org.apache.catalina.loader.WebappClassLoader] Delegating to parent classloader at end: java.net.FactoryURLClassLoader@260657
| 2008-02-06 15:11:58,553 DEBUG [org.apache.catalina.loader.WebappClassLoader] Loading class from parent
| 2008-02-06 15:11:58,553 TRACE [org.jboss.security.auth.spi.LdapLoginModule] initialize, instance=@26134959
| 2008-02-06 15:11:58,553 TRACE [org.jboss.security.auth.spi.LdapLoginModule] Security domain: mortgageAdmin
| 2008-02-06 15:11:58,553 TRACE [org.jboss.security.auth.spi.LdapLoginModule] login
| 2008-02-06 15:11:58,553 TRACE [org.jboss.security.auth.spi.LdapLoginModule] Logging into LDAP server, env={java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory, java.naming.provider.url=ldap://~~~~~~~~, jboss.security.security_domain=mortgageAdmin, uidAttributeID=username, principalDNPrefix="d~~i\\", java.naming.security.authentication=simple, java.naming.security.principal="d~~i\\"p~~~e, java.naming.security.credentials=***}
| 2008-02-06 15:11:58,553 DEBUG [org.apache.catalina.loader.WebappClassLoader] loadClass(com.sun.jndi.ldap.LdapCtxFactory, false)
| 2008-02-06 15:11:58,584 DEBUG [org.jboss.security.auth.spi.LdapLoginModule] Bad password for username=pcable
| javax.naming.AuthenticationException: [LDAP: error code 49 - 80090308: LdapErr: DSID-0C090334, comment: AcceptSecurityContext error, data 525
|
|
| Any ideas?
|
| Thanks
View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4127405#4127405
Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4127405
18 years, 2 months
[JBoss Messaging] - Re: Message priority does not seem to work
by ydzsidemiik
It occurred to me last night to, as you suggest, try SlowConsumers in conjunction with setting the priority on the MessageProducer. This morning, I find that it gives me exactly the behavior I desire.
So, it turns out this whole affair was all due to a failure to RTFM on my part. I could direct at Sun some impolite comments about the value of a javax.jms.Message.setJMSPriority(int) method which is specified to do nothing, but I was so sure that this wasn't my fault that I'll have to eat a lot of headwear to atone, so I better to get started.
My requirement was only that higher priority messages be processed reasonably promptly, not necessarily with any hard deadlines or strict ordering guarantees. I'm satisfied now that I have that, and my app isn't all that portable in the first place. ;)
Thanks for your helpful comments.
View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4127403#4127403
Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4127403
18 years, 2 months
[Installation, Configuration & DEPLOYMENT] - Re: separating Hibernate and Struts logs
by jaikiran
Yes it's possible. Something like this (just an example, the syntax and other stuff might be incorrect):
<appender name="HIB_APPENDER" class="org.apache.log4j.FileAppender">
| <param name="File" value="D:/log/HibernateLogs.log"/>
| <param name="Append" value="false"/>
|
| <layout class="org.apache.log4j.PatternLayout">
| <param name="ConversionPattern" value="%d{ISO8601} %-5p [%c] %m%n"/>
| </layout>
| </appender>
|
|
|
|
| <appender name="STRUTS_APPENDER" class="org.apache.log4j.FileAppender">
| <param name="File" value="D:/log/StrutsLogs.log"/>
| <param name="Append" value="false"/>
|
| <layout class="org.apache.log4j.PatternLayout">
| <param name="ConversionPattern" value="%d{ISO8601} %-5p [%c] %m%n"/>
| </layout>
| </appender>
|
| <category name="org.hibernate">
| <appender-ref ref="HIB_APPENDER"/>
| </category>
|
| <category name="org.apache.struts">
| <appender-ref ref="STRUTS_APPENDER"/>
| </category>
View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4127399#4127399
Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4127399
18 years, 2 months