[jboss-jira] [JBoss JIRA] (JBWEB-228) Globally configure an Authenticator Valve for the whole JBoss.

[karin k (JIRA)]

    [ https://issues.jboss.org/browse/JBWEB-228?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12665387#comment-12665387 ] 

karin k commented on JBWEB-228:
-------------------------------

This would not solve the requirement of making the authenticator globally available (and manageable by means of DMR).

Our approach is to install JBoss runtimes in a most suitable way for our customers and take the burden from them to know the insights of JBoss in details. 
Formerly with JBoss 4.2.3 we have enhanced JBoss Web to know our Authenticator (in some intrusive way). Afterwards enabling the Authenticator was just using it in the auth-method (which was easy and handy).
Using your proposed approach would mean that the developer or application deployer has to know how configure the valve, where to get the classes from. From my point of view this sounds tricky and not easy at all.

You might say that we could still enhance JBoss Web as we did before. This is correct. But our intent is to switch from the Community Version towards the EAP version. And I'm not sure if we are allowed to do such hacks in the EAP version.

                
> Globally configure an Authenticator Valve for the whole JBoss.
> --------------------------------------------------------------
>
>                 Key: JBWEB-228
>                 URL: https://issues.jboss.org/browse/JBWEB-228
>             Project: JBoss Web
>          Issue Type: Feature Request
>      Security Level: Public(Everyone can see) 
>    Affects Versions: JBossWeb-7.0.0.GA, JBossWeb-7.0.1.GA , JBossWeb-7.0.2.GA, JBossWeb-7.0.9.GA
>            Reporter: Mo Zo
>            Assignee: Remy Maucherat
>
> Please add an option to set and configure an Authenticator (Valve) globally for all applications in a JBoss by using standard JBoss mechanisms like domain.xml, standalone.xml and DMR, so that it would be possible to reference an Authenticator like this:
> web.xml
> <login-config>
>      <auth-method>CUSTOM</auth-method>
> </login-config>
> To achieve this I had to modify:
> ...\modules\org\jboss\as\web\main\jbossweb-7.0.X.Final.jar\org\apache\catalina\startup\Authenticators.properties
> CUSTOM=<full qualified authenticator class name>
> which certainly is not a good way.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira