Author: bdaw Date: 2007-02-20 08:08:08 -0500 (Tue, 20 Feb 2007) New Revision: 6353 Modified: trunk/core/src/resources/portal-core-sar/conf/login-config.xml Log: - move optional sufficient login module below the main one Modified: trunk/core/src/resources/portal-core-sar/conf/login-config.xml =================================================================== --- trunk/core/src/resources/portal-core-sar/conf/login-config.xml 2007-02-20 04:35:37 UTC (rev 6352) +++ trunk/core/src/resources/portal-core-sar/conf/login-config.xml 2007-02-20 13:08:08 UTC (rev 6353) @@ -35,6 +35,18 @@ <application-policy name="portal"> <authentication> + + <!--To configure LDAP support with IdentityLoginModule please check documentation on how to + configure portal identity modules for this--> + <login-module code="org.jboss.portal.identity.auth.IdentityLoginModule" flag="required"> + <module-option name="unauthenticatedIdentity">guest</module-option> + <module-option name="userModuleJNDIName">java:/portal/UserModule</module-option> + <module-option name="roleModuleJNDIName">java:/portal/RoleModule</module-option> + <module-option name="membershipModuleJNDIName">java:/portal/MembershipModule</module-option> + <module-option name="additionalRole">Authenticated</module-option> + <module-option name="password-stacking">useFirstPass</module-option> + </login-module> + <!--Uncomment this if you want to fall down to users kept in DB after LDAP authentication fails This may be usefull if you want to use Admin user provided with portal database schema--> <!--Note that this may lead to the security risk - with LDAP when storing user profile information @@ -50,7 +62,6 @@ <module-option name="additionalRole">Authenticated</module-option> </login-module>--> - <!--Use can use this module instead of IdentityLoginModule to bind to LDAP. It simply extends JBossSX LdapExtLoginModule so all configuration that can be applied to LdapExtLoginModule also can be applied here. For user that was authenticated successfully it will try to take identity modules from portal, check if such user (and roles it belongs to) @@ -85,18 +96,6 @@ <module-option name="searchScope">SUBTREE_SCOPE</module-option> <module-option name="allowEmptyPasswords">false</module-option> </login-module>--> - - - <!--To configure LDAP support with IdentityLoginModule please check documentation on how to - configure portal identity modules for this--> - <login-module code="org.jboss.portal.identity.auth.IdentityLoginModule" flag="required"> - <module-option name="unauthenticatedIdentity">guest</module-option> - <module-option name="userModuleJNDIName">java:/portal/UserModule</module-option> - <module-option name="roleModuleJNDIName">java:/portal/RoleModule</module-option> - <module-option name="membershipModuleJNDIName">java:/portal/MembershipModule</module-option> - <module-option name="additionalRole">Authenticated</module-option> - <module-option name="password-stacking">useFirstPass</module-option> - </login-module> </authentication> </application-policy> </policy>