1:10 a.m.
Hello,
I have couple of web applications other than Guvnor deployed in JBoss.
I use jboss single sign on [1] for authentication. But guvnor does not
seem to be working. I believe there are some issues with JBoss Seam
and JBoss SSO. But is there any work around to integrate JBoss SSO
with Guvnor? Please help.
1. http://www.jboss.org/community/wiki/JBossWebSingleSignOn
Thanks in advance,
--
Sahid.
Argue with idiots, and you become an idiot. - PG
7:05 p.m.
It's very easy to create a custom authentication module for Seam. In my
organization, we've created a simple module which will check the session for
an existing user object. Just have to put it on your classpath and edit the
components.xml to use your class as its authenticator. Perhaps something
like this will work for you?
Cheers,
Paul
import org.jboss.seam.security.Identity;
import org.jboss.seam.annotations.Name;
import org.jboss.seam.contexts.Contexts;
@Name("customAuthenticator")
public class CustomAuthenticator {
public boolean authenticate() {
User userBean = (User) Contexts.getSessionContext()
.get("SESSIONID");
if (userBean == null || userBean.getUsername() == null) {
log.info( "No Session" );
return false;
} else {
log.info( "Setting username to " + userBean.getUsername() );
Identity.instance().getCredentials().setUsername(
userBean.getUsername() );
return true;
}
}
}
2009/12/9 Sahid Khan (সাহিদ) <sahidkhn(a)gmail.com>
Hello,
I have couple of web applications other than Guvnor deployed in JBoss.
I use jboss single sign on [1] for authentication. But guvnor does not
seem to be working. I believe there are some issues with JBoss Seam
and JBoss SSO. But is there any work around to integrate JBoss SSO
with Guvnor? Please help.
1. http://www.jboss.org/community/wiki/JBossWebSingleSignOn
Thanks in advance,
--
Sahid.
Argue with idiots, and you become an idiot. - PG
_______________________________________________
rules-users mailing list
rules-users(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/rules-users
5:12 a.m.
2009/12/10 Paul R. <reverselogic(a)gmail.com>:
It's very easy to create a custom authentication module for Seam.
In my
organization, we've created a simple module which will check the session for
an existing user object. Just have to put it on your classpath and edit the
components.xml to use your class as its authenticator. Perhaps something
like this will work for you?
Thank you. However this is not working. I have created a custom
authenticator as you said and put in WEB-INF/classes, but that is not
getting invoked. I was just going through the Guvnor web.xml file, I
don't see any security-constraints there. So that means Guvnor does
not use standard JAAS security for authentication. Is that the reason,
the custom authenticator is not getting invoked?
Thanks,
--
S.
Argue with idiots, and you become an idiot. - PG
5:29 a.m.
Did you also edit your drools-guvnor.war\WEB-INF\components.xml to point to
your authenticator?
<security:identity
authenticate-method="#{customAuthenticator.authenticate}"/>
2009/12/10 Sahid Khan (সাহিদ) <sahidkhn(a)gmail.com>
2009/12/10 Paul R. <reverselogic(a)gmail.com>:
> It's very easy to create a custom authentication module for Seam. In my
> organization, we've created a simple module which will check the session
for
> an existing user object. Just have to put it on your classpath and edit
the
> components.xml to use your class as its authenticator. Perhaps something
> like this will work for you?
>
Thank you. However this is not working. I have created a custom
authenticator as you said and put in WEB-INF/classes, but that is not
getting invoked. I was just going through the Guvnor web.xml file, I
don't see any security-constraints there. So that means Guvnor does
not use standard JAAS security for authentication. Is that the reason,
the custom authenticator is not getting invoked?
Thanks,
--
S.
Argue with idiots, and you become an idiot. - PG
_______________________________________________
rules-users mailing list
rules-users(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/rules-users
5:56 a.m.
2009/12/10 Paul R. <reverselogic(a)gmail.com>:
Did you also edit your drools-guvnor.war\WEB-INF\components.xml to
point to
your authenticator?
<security:identity
authenticate-method="#{customAuthenticator.authenticate}"/>
Yes I did. It fails with the following message in the console:
15:12:49,760 INFO [STDOUT] ERROR 10-12 15:12:49,759
(SecurityServiceImpl.java:login:73)
javax.security.auth.login.LoginException: Login Failure: all modules
ignored
Does that give any clue?
--
S.
Argue with idiots, and you become an idiot. - PG
5249
days inactive
5250
days old
4 comments
2 participants
participants (2)
-
Paul R. -
Sahid Khan (সাহিদ)