[jboss-jira] [JBoss JIRA] (AS7-5047) Allow more control over authentication for server to server communication through remote-outbound-connection

Sat Oct 13 07:32:02 EDT 2012

    [ https://issues.jboss.org/browse/AS7-5047?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12726212#comment-12726212 ] 

Dennis Kieselhorst commented on AS7-5047:
-----------------------------------------

How will the solution be designed? Is it planned to support callback handlers like in [this example|https://github.com/jaikiran/quickstart/blob/client-login-module/ejb-remote/client/src/main/java/org/jboss/as/quickstarts/ejb/remote/client/callbackhandler/CustomServerLoginHandshakeCallbackHandler.java]?

> Allow more control over authentication for server to server communication through remote-outbound-connection
> ------------------------------------------------------------------------------------------------------------
>
>                 Key: AS7-5047
>                 URL: https://issues.jboss.org/browse/AS7-5047
>             Project: Application Server 7
>          Issue Type: Feature Request
>          Components: Remoting, Security
>    Affects Versions: 7.1.1.Final, 7.1.2.Final (EAP)
>            Reporter: jaikiran pai
>            Assignee: Darran Lofthouse
>             Fix For: 7.2.0.Alpha1
>
>
> Right now for server to server communication via a remote-outbound-connection, we expect a static username to be specified (along with the security realm). User applications which use this remote-outbound-connection, for example an EJB application, do not have much control over the user/pass information, since the username is static. This further acts a drawback since the username that's used to connect to the remote server will be used as the (application) user who invoked the EJB.
> It would be good to allow more control over the authentication for the remote-outbound-connection.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira