[jboss-jira] [JBoss JIRA] Updated: (JBAS-4410) JaasSecurityDomain settings need to be sent to SecurityConfiguration

[Anil Saldhana (JIRA)]

     [ http://jira.jboss.com/jira/browse/JBAS-4410?page=all ]

Anil Saldhana updated JBAS-4410:
--------------------------------

    Fix Version/s: JBossAS-5.0.0.CR1
                       (was:  JBossAS-5.0.0.Beta3)

No API change. Moved to CR.

> JaasSecurityDomain settings need to be sent to SecurityConfiguration
> --------------------------------------------------------------------
>
>                 Key: JBAS-4410
>                 URL: http://jira.jboss.com/jira/browse/JBAS-4410
>             Project: JBoss Application Server
>          Issue Type: Task
>      Security Level: Public(Everyone can see) 
>          Components: Security
>    Affects Versions: JBossAS-5.0.0.Beta2
>            Reporter: Anil Saldhana
>         Assigned To: Anil Saldhana
>             Fix For: JBossAS-5.0.0.CR1
>
>
> SECURITY-26 has a need for the MBean services and other security related integration aspects for the JBAS to get back into the AS workspace. I see an issue with the Ldapxxx login modules having a reliance on the DecodeAction privileged action, that internally used to call the JaasSecurityDomain mbean service to decode a b64 string.  Now since the JaasSecurityDomain mbean service was the central source of the various jsse/crypto settings, we need to get away from this model and use the static SecurityConfiguration as the sink for the security settings.  This static SecurityConfiguration can be populated from JaasSecurityDomain Mbean service, the security deployer or wherever.
> There certainly has to be a better way than the static SecuriytConfiguration. For now, it is sufficient.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira