[jboss-dev-forums] [Design of Security on JBoss] - Re: SRP and SASL

[anil.saldhana@jboss.com]

"david.lloyd at jboss.com" wrote : I don't see any Callbacks within JSR-196 that specifically look like they can handle the type of verifier values that are needed by SRP.  But if there is (and I'm just missing it), it should be trivial to add.
  | 
  | Otherwise it should be easy for someone to write a bridge between the two.

JSR-196 has abstract MessageInfo construct and JAAS callback to do the needful. I will take a look at what you have after a few days and then see if JSR-196 makes sense. 

View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4099524#4099524

Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4099524