[jboss-user] [Security & JAAS/JBoss] - Need help with DynamicLoginConfig
Hi.
I am trying to configure a very simple LDAP security domain for testing purposes.
This is my login-conig.xml file:
| <?xml version='1.0'?>
| <!DOCTYPE policy PUBLIC
| "-//JBoss//DTD JBOSS Security Config 3.0//EN"
| "http://www.jboss.org/j2ee/dtd/security_config.dtd">
|
| <policy>
| <application-policy name="ldapTest">
| <authentication>
| <login-module
code="org.jboss.security.auth.spi.LdapLoginModule"
| flag="required">
| <module-option name="java.naming.factory.initial">
| com.sun.jndi.ldap.LdapCtxFactory
| </module-option>
| <module-option name="java.naming.provider.url">
| ldap://ldapserver:389/
| </module-option>
| <module-option
name="java.naming.security.authentication">
| simple
| </module-option>
| <module-option
name="principalDNPrefix">uid=</module-option>
| <module-option name="principalDNSuffix">
| ,ou=People,dc=domain,dc=net
| </module-option>
|
| <module-option name="rolesCtxDN">
| ou=NetGroup,dc=domain,dc=net
| </module-option>
| <module-option
name="uidAttributeID">uniqueMember</module-option>
| <module-option
name="matchOnUserDN">true</module-option>
| <module-option
name="roleAttributeID">cn</module-option>
| <module-option name="roleAttributeIsDN">false
</module-option>
| </login-module>
| </authentication>
| </application-policy>
| </policy>
|
I have tried placing this file in META-INF, but jboss only finds the security domain when
it is defined in the global login-config.xml file.
I know that the answer to the problem is to configure DynamicLoginConfig to look for my
login-config.xml file. The problem is that I can not DynamicLoginConfig working
properly.
I created a jboss-service.xml file in META-INF with the following contents:
| <server>
|
| <mbean code="org.jboss.security.auth.login.DynamicLoginConfig"
| name="jboss:service=DynamicLoginConfig">
| <attribute
name="AuthConfig">META-INF/login-config.xml</attribute>
|
| <depends optional-attribute-name="LoginConfigService">
| jboss.security:service=XMLLoginConfig
| </depends>
|
| <depends optional-attribute-name="SecurityManagerService">
| jboss.security:service=JaasSecurityManager
| </depends>
| </mbean>
|
| </server>
|
|
However, Jboss still will not load the login-config.xml file as expected.
I then continued my search on this issue, and discovered that I needed a jboss-app.xml
file to load the jboss-service.xml I created. I created one like so:
| <?xml version="1.0" encoding="UTF-8"?>
| <jboss-app>
| <module>
| <service>META-INF/jboss-service.xml</service>
| </module>
| </jboss-app>
|
I have tried deploying this package with jboss-app.xml file in both META-INF and in the
root of the package, and either way, I can not get Jboss to load the package specific
login-config.xml file.
Am I missing anything else?
Any assistance will be greatly appreciated.
Thank you in advance for any help you can offer.
View the original post :
http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4042931#...
Reply to the post :
http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...