[jboss-cvs] JBossAS SVN: r58948 - in trunk/testsuite/src/resources/test-configs: tomcat-sso/deployers/jbossweb.deployer tomcat-sso-cluster/deployers/jbossweb.deployer

[jboss-cvs-commits at lists.jboss.org]

Author: bstansberry at jboss.com
Date: 2006-12-08 23:13:42 -0500 (Fri, 08 Dec 2006)
New Revision: 58948

Modified:
   trunk/testsuite/src/resources/test-configs/tomcat-sso-cluster/deployers/jbossweb.deployer/server.xml
   trunk/testsuite/src/resources/test-configs/tomcat-sso/deployers/jbossweb.deployer/server.xml
Log:
Sync up w/ the current standard server.xml

Modified: trunk/testsuite/src/resources/test-configs/tomcat-sso/deployers/jbossweb.deployer/server.xml
===================================================================
--- trunk/testsuite/src/resources/test-configs/tomcat-sso/deployers/jbossweb.deployer/server.xml	2006-12-09 04:09:03 UTC (rev 58947)
+++ trunk/testsuite/src/resources/test-configs/tomcat-sso/deployers/jbossweb.deployer/server.xml	2006-12-09 04:13:42 UTC (rev 58948)
@@ -17,13 +17,22 @@
       <Engine name="jboss.web" defaultHost="localhost">
 
          <!-- The JAAS based authentication and authorization realm implementation
-            - certificatePrincipal : the class name of the
-            org.jboss.security.auth.certs.CertificatePrincipal impl
-            used for mapping X509[] cert chains to a Princpal.
+         that is compatible with the jboss 3.2.x realm implementation.
+         - certificatePrincipal : the class name of the
+         org.jboss.security.auth.certs.CertificatePrincipal impl
+         used for mapping X509[] cert chains to a Princpal.
+         - allRolesMode : how to handle an auth-constraint with a role-name=*,
+         one of strict, authOnly, strictAuthOnly
+           + strict = Use the strict servlet spec interpretation which requires
+           that the user have one of the web-app/security-role/role-name
+           + authOnly = Allow any authenticated user
+           + strictAuthOnly = Allow any authenticated user only if there are no
+           web-app/security-roles
          -->
-         <Realm className="org.jboss.web.tomcat.security.JBossSecurityMgrRealm"
+         <Realm className="org.jboss.web.tomcat.security.JBossWebRealm"
             certificatePrincipal="org.jboss.security.auth.certs.SubjectDNMapping"
-            />
+            allRolesMode="authOnly"/>
+ 
 
          <Host name="localhost"
             autoDeploy="false" deployOnStartup="false" deployXML="false">

Modified: trunk/testsuite/src/resources/test-configs/tomcat-sso-cluster/deployers/jbossweb.deployer/server.xml
===================================================================
--- trunk/testsuite/src/resources/test-configs/tomcat-sso-cluster/deployers/jbossweb.deployer/server.xml	2006-12-09 04:09:03 UTC (rev 58947)
+++ trunk/testsuite/src/resources/test-configs/tomcat-sso-cluster/deployers/jbossweb.deployer/server.xml	2006-12-09 04:13:42 UTC (rev 58948)
@@ -17,14 +17,22 @@
       <Engine name="jboss.web" defaultHost="localhost">
 
          <!-- The JAAS based authentication and authorization realm implementation
-            - certificatePrincipal : the class name of the
-            org.jboss.security.auth.certs.CertificatePrincipal impl
-            used for mapping X509[] cert chains to a Princpal.
+         that is compatible with the jboss 3.2.x realm implementation.
+         - certificatePrincipal : the class name of the
+         org.jboss.security.auth.certs.CertificatePrincipal impl
+         used for mapping X509[] cert chains to a Princpal.
+         - allRolesMode : how to handle an auth-constraint with a role-name=*,
+         one of strict, authOnly, strictAuthOnly
+           + strict = Use the strict servlet spec interpretation which requires
+           that the user have one of the web-app/security-role/role-name
+           + authOnly = Allow any authenticated user
+           + strictAuthOnly = Allow any authenticated user only if there are no
+           web-app/security-roles
          -->
-         <Realm className="org.jboss.web.tomcat.security.JBossSecurityMgrRealm"
+         <Realm className="org.jboss.web.tomcat.security.JBossWebRealm"
             certificatePrincipal="org.jboss.security.auth.certs.SubjectDNMapping"
-            />
-
+            allRolesMode="authOnly"/>
+            
          <Host name="localhost"
             autoDeploy="false" deployOnStartup="false" deployXML="false">