[jboss-jira] [JBoss JIRA] Created: (JBAS-4095) Using LdapExtLoginModule with JConsole

[Galder Zamarreno (JIRA)]

Using LdapExtLoginModule with JConsole
--------------------------------------

                 Key: JBAS-4095
                 URL: http://jira.jboss.com/jira/browse/JBAS-4095
             Project: JBoss Application Server
          Issue Type: Feature Request
      Security Level: Public (Everyone can see)
          Components: Security
    Affects Versions: JBossAS-4.0.3 SP1
            Reporter: Galder Zamarreno
         Assigned To: Scott M Stark
            Priority: Minor


Customer wants to use LdapExtLoginModule as a login module for JConsole 
instead of the traditional role/password, role/access files.

"Configuring the proper JBoss classes into the ext classloader seems to be a 
bit of a challenge. So, just to test the concept I copied the LdapExtLoginModule 
to a new package and deployed just that (and the minimal dependencies 
which were also moved to a different package) to the JDK's ext directory. We 
are running JDK 5, so for now the build-in JDK LdapLoginModule is not an 
option. In this scenario, users are properly authenticated, but obviously we 
don't want to manage this code ourselves. So, I am wondering if there is either 
a manageable set of dependencies we could configure as extlibs, or if a more 
minimal standalone realm could be created that would just delegate to another 
JMX (or JNDI)-based realm. This minimal realm could then be deployed in the 
ext classpath."

The customer would prefer not to manage the package containing LdapExtLoginModule 
and the corresponding dependencies and to be provided this, or alternatively, 
create a minimal realm that can delegate via JMX or JNDI to another realm.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira