Community

Hi,

I am still stuck with the authentication stuff. Is there any document to understand how authentication works? Or the actual code (Class name and how to find it?).

I am now trying to map the jboss-service.xml with the weblogic security stuff. Can you please help? Actually it is taking time because I am new to the Jboss and Weblogic security mechanism. Any reference would work.

I think this whole,

<mbean code="org.jboss.security.auth.login.DynamicLoginConfig" name="org.jbpm:service=LoginConfig">
    <attribute name="PolicyConfig" serialDataType="jbxb">
      <jaas:policy xsi:schemaLocation="urn:jboss:security-config:4.1 resource:security-config_4_1.xsd" xmlns:jaas="urn:jboss:security-config:4.1"
                   xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
        <jaas:application-policy name="jbpm-console">
          <jaas:authentication>
            <!-- Authenticate against the Identiy database -->
            <jaas:login-module code="org.jboss.security.auth.spi.DatabaseServerLoginModule" flag="required">
              <jaas:module-option name="dsJndiName">java:/JbpmDS</jaas:module-option>
              <jaas:module-option name="principalsQuery"> SELECT PASSWORD_ FROM JBPM4_ID_USER WHERE ID_=? </jaas:module-option>
              <jaas:module-option name="rolesQuery">
                SELECT g.NAME_ ,'Roles' FROM JBPM4_ID_USER u, JBPM4_ID_MEMBERSHIP m, JBPM4_ID_GROUP g
                WHERE g.TYPE_='security-role' AND m.GROUP_ = g.DBID_ AND m.USER_ = u.DBID_ AND u.ID_=? </jaas:module-option>
            </jaas:login-module>
          </jaas:authentication>
        </jaas:application-policy>
      </jaas:policy>
    </attribute>
    <depends optional-attribute-name="LoginConfigService"> jboss.security:service=XMLLoginConfig</depends>
    <depends optional-attribute-name="SecurityManagerService"> jboss.security:service=JaasSecurityManager</depends>
  </mbean>

part should be mapped with weblogic specific settings.