[JBossWS] - C# fat client using Windows Integrated Authentication over W
by kenshiro2000
I have a very complex architecture and I need some clarifications about the Windows Integrated Authentications and its capability.
I have fat C# client that needs to call an EJB3 in JBoss (on Linux) via WS. This is very easy to implement, but when I have to design the client authentication here is the problem. I don't want that my WS will be invoked by everyone!
I do not want the user re-insert their Windows logon credentials in their C# fat client, I think it is a big security issue because someone could rewrite a trojan fat client and logs all the users credentials!
So the question is how can I pass the Windows Principals over WS to JBoss and authenticate this Principals? Do I have to use JAAS and some PAM? is this possible in a JBoss on a Linux machine?
Some references could be very heplful for me.
P.S. this same post was posted in the MSDN forum. Sorry for the cross post but I need WS for interoperability so I think in this case cross-post should be allowed
View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=4237829#4237829
Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=4237829
17 years, 1 month
[Security & JAAS/JBoss] - C# fat client using Windows Integrated Authentication over W
by kenshiro2000
I have a very complex architecture and I need some clarifications about the Windows Integrated Authentications and its capability.
I have fat C# client that needs to call an EJB3 in JBoss (on Linux) via WS. This is very easy to implement, but when I have to design the client authentication here is the problem. I don't want that my WS will be invoked by everyone!
I do not want the user re-insert their Windows logon credentials in their C# fat client, I think it is a big security issue because someone could rewrite a trojan fat client and logs all the users credentials!
So the question is how can I pass the Windows Principals over WS to JBoss and authenticate this Principals? Do I have to use JAAS and some PAM? is this possible in a JBoss on a Linux machine?
Some references could be very heplful for me.
P.S. this same post was posted in the MSDN forum. Sorry for the cross post but I need WS for interoperability so I think in this case cross-post should be allowed
View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=4237827#4237827
Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=4237827
17 years, 1 month
[Management, JMX/JBoss] - Access another managed Bean (FacesContext)
by schlumsch
Hello everyone,
im developing Portlets using JBoss. I have 2 managed-Beans, one session and one request-scoped. In my request scoped bean i`m parsing the parameterMap. If the portlet is called with some specific parameters, id like to inject them into my session scoped bean. Searching for a solution for this task i found seveal methods at
http://balusc.blogspot.com/2006/06/communication-in-jsf.html#AccessingAno... None of them is working. Can someone help me?
my faces-config:
|
| <managed-bean>
| <managed-bean-name>e2e</managed-bean-name>
| <managed-bean-class>com.e2e.portal.ta.beans.BigBean</managed-bean-class>
| <managed-bean-scope>session</managed-bean-scope>
| </managed-bean>
|
| <managed-bean>
| <managed-bean-name>mailPlanning</managed-bean-name>
| <managed-bean-class>com.e2e.portal.ta.beans.MailPlanningBean</managed-bean-class>
| <managed-bean-scope>request</managed-bean-scope>
| </managed-bean>
|
part of mailPlanning:
|
| BigBean bB1 = (BigBean) FacesContext.getCurrentInstance().getExternalContext()
| .getSessionMap().get("e2e");
|
| Map sesMap = FacesContext.getCurrentInstance().getExternalContext().getSessionMap();
| Map reqMap = FacesContext.getCurrentInstance().getExternalContext().getRequestMap();
| FacesContextImpl context = (FacesContextImpl) (FacesContext.getCurrentInstance());
| BigBean bB = (BigBean) context.getELContext().getELResolver().getValue(context.getELContext(), null, "e2e");
|
|
View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=4237818#4237818
Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=4237818
17 years, 1 month
[Clustering/JBoss] - Clustering of the Seam-booking example
by steppi
Hey Guys,
Currently I'm writing a work for school about the JBoss AS and HA-Clustering.
I'm working with 2 Ubuntu VMs and everything is perfect up to this point.
Jboss is Version 5.1.0.GA.
Moreover I use the Seam Framework booking-example.
I started everything with the all-Config and Farming works perfect.
My problem now is to got to the booking application without choosing a server from client-side. How I can access both servers with one IP? How can I create redundancy if one node fails?
For now, if I create a user or a booking on server1, there is no change on server2?
HELP... the clustering guide doesn't help me, seems like it isn't really up to date :(
Better german Version of my text :
zitieren
Beitrag Verfasst: 15. Juni 2009 15:22
Hi Leute,... ich schreibe zur Zeit an ner Facharbeit über den JBoss AS und Hochverfügbarkeitskonzepte. Hab den Server auch am laufen und das Clustering funktioniert halbwegs. Soll heiÃen, ich habe 2 Ubuntu-VMs laufen, auf beiden ist der JBoss AS 5.1.0 GA mit der Standard "all"-Config (Node-IDs sind einizigartig bei beiden Servern).
Das Farming z.B. funktioniert erstklassig. Ich kann auch beide Server ansprechen über einen Client und die darauf laufenden Applikationen. Aus dem Seam Framework habe ich jetzt das Booking-Example genommen (wurde auf einem installiert, auf den anderem repliziert und läuft auf beiden).
Zu meinem Problem... ich kann beide Server jeweils über ihre IP ansprechen, wie bekomm ich das hin, dass die über eine Virtuelle IP laufen und damit quasi beide angesprochen werden (entweder mit verteilter Last od. als primär und sekundär Server) ?? Wenn ich auf Server1 in der Applikation z.Z. einen Nutzer anlege wird die Datenbank mit Server2 nicht synchronisiert. D.h. momentan sind beide Server doch noch irgendwie Standalone unterwegs.
Danke schonmal...
P.S. wenns hier falsch ist bitte verschieben. Wenn jemand ne gute deutsche JBoss-Community-Seite kennt immer her damit
DANKE
View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=4237816#4237816
Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=4237816
17 years, 1 month
[Installation, Configuration & DEPLOYMENT] - jboss.xml validation problem
by gcoleman
I'm having trouble getting an existing application to deploy on 5.1.0.GA. It deploys fine on 4.2.x.
I'm using ignore-dependency elements in jboss.xml to handle circular references and it's causing problems with descriptor validation (I can't use the annotation because the code has to be portable between app servers).
jboss.xml snippet looks like this:
| <?xml version="1.0" encoding="ISO-8859-1"?>
|
| <jboss>
|
| <security-domain>java:/jaas/server-login</security-domain>
| <enterprise-beans>
| <session>
| <ejb-name>Bingo</ejb-name>
| <local-jndi-name>ejb/local/Bingo</local-jndi-name>
| <resource-ref>
| <res-ref-name>jdbc/DataSource</res-ref-name>
| <jndi-name>java:/MainDS</jndi-name>
| </resource-ref>
| <!--
| Avoid circular dependency:
| -->
| <ignore-dependency>
| <injection-target>
| <injection-target-class>com.bingo.game.bingo.BingoBean</injection-target-class>
| <injection-target-name>gameFactory</injection-target-name>
| </injection-target>
| </ignore-dependency>
| </session>
| ...
|
And this error turns up on deployment:
| Caused by: org.jboss.xb.binding.JBossXBRuntimeException: ignore-dependency cannot appear in this position. Expected content of session is unordered_se
| quence: port-component? call-by-value? configuration-name? security-proxy? clustered? home-jndi-name? method-attributes? cluster-config? security-iden
| tity? local-jndi-name? ejb-name? local-home-jndi-name? timer-persistence? security-domain? ior-security-config? exception-on-rollback? jndi-name? ejb-
| timeout-identity? depends* invoker-bindings? {all descriptionGroup}? {unordered_sequence jndiEnvironmentRefsGroup}?
|
Ok, so I thought I'd add the schema bits as documented in docs\schema\jboss_5_1.xsd:
| <jboss xmlns="http://www.jboss.com/xml/ns/javaee"
| xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
| xsi:schemaLocation="http://www.jboss.com/xml/ns/javaee
| http://www.jboss.org/j2ee/schema/jboss_5_1.xsd"
| version="5.1">
| ...
| </jboss>
|
And now this error turns up:
| Caused by: org.jboss.xb.binding.JBossXBRuntimeException: {http://www.jboss.com/xml/ns/javaee}resource-ref cannot appear in this position. Expected content of {http://www.jboss.com/xml/ns/javaee}session is sequence: {sequence {http://www.jboss.com/xml/ns/javaee}descriptionGroup} {http://www.jboss.com/xml/ns/javaee}ejb-name {http://www.jboss.com/xml/ns/javaee}mapped-name? {sequence {http://www.jboss.com/xml/ns/javaee}jndiEnvironmentRefsGroup} {http://www.jboss.com/xml/ns/javaee}security-identity? {http://www.jboss.com/xml/ns/javaee}local-binding* {http://www.jboss.com/xml/ns/javaee}remote-binding* {http://www.jboss.com/xml/ns/javaee}business-local* {http://www.jboss.com/xml/ns/javaee}business-remote* {http://www.jboss.com/xml/ns/javaee}jndi-name? {http://www.jboss.com/xml/ns/javaee}home-jndi-name? {http://www.jboss.com/xml/ns/javaee}local-jndi-name? {http://www.jboss.com/xml/ns/javaee}local-home-jndi-name? {http://www.jboss.com/xml/ns/javaee}jndi-binding-policy? {http://www.jboss.com/xml/ns/javaee}clustered? {http://www.jboss.com/xml/ns/javaee}cluster-config? {http://www.jboss.com/xml/ns/javaee}security-domain? {http://www.jboss.com/xml/ns/javaee}method-attributes? {http://www.jboss.com/xml/ns/javaee}depends* {http://www.jboss.com/xml/ns/javaee}annotation* {http://www.jboss.com/xml/ns/javaee}ignore-dependency? {http://www.jboss.com/xml/ns/javaee}aop-domain-name? {http://www.jboss.com/xml/ns/javaee}cache-config? {http://www.jboss.com/xml/ns/javaee}pool-config? {http://www.jboss.com/xml/ns/javaee}concurrent? {http://www.jboss.com/xml/ns/javaee}jndi-ref* {http://www.jboss.com/xml/ns/javaee}port-component? {http://www.jboss.com/xml/ns/javaee}ejb-timeout-identity?
|
Any idea what's wrong with the deployment descriptor? Any clues how I get this application to deploy?
View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=4237810#4237810
Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=4237810
17 years, 1 month