[jboss-dev-forums] [Design of Security on JBoss] - Customized login module

[jdsignature]

Login security data needed: username, password, client IP Adress 

One custmized loginModule named XYZLoginModule has been created, here is what I am thinking:

1. collect the userid, password, and client ip address via new PassiveCallbackHandler(userid, password, clientIP) ; Then pass the callbackhandler to LoginContext via new LoginContext(config, passiveCallbackHandler). 

2. per step 1, all the code will be handled in the application code, are there a way to have the JBOSS container handle this? can somebody point out a way on how to all of these, for instance, the sample login-config, jboss.xml, web.xml, 

thanks in advance for any clue?

View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4095447#4095447

Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4095447