[jboss-user] [Security & JAAS/JBoss] - Flash Remoting and jaas authentication, with credential prop

[kistler59]

Does anyone have any experience deploying flash remoting in jboss's tomcat environment and authenticating invocation with jaas?

We are developing an application which uses a flash ui, that communicates with our slsb deployed on jboss via the flash remoting service deployed in the tomcat environment as a servlet.  We wish to be able to apply security constraints to the service which i have done by adding 

anonymous wrote : 
  | 	<security-constraint>
  | 		<web-resource-collection>
  | 			<web-resource-name>All resources</web-resource-name>
  | 			Protects all resources
  | 			<url-pattern>/*</url-pattern>
  | 		</web-resource-collection>
  | 		<auth-constraint>
  | 			<role-name>FlashRole</role-name>
  | 		</auth-constraint>
  | 	</security-constraint>
  |    
  | 	<security-role>
  | 		<role-name>FlashRole</role-name>
  | 	</security-role>
  |       
  | 	<login-config>
  | 		<auth-method>BASIC</auth-method>
  | 		<realm-name>Test Realm</realm-name>
  | 	</login-config>
  | 

to the web.xml file and setting the security domain in jboss-web.xml

When accessing the service via a web browser it prompts the user for a username and password.  However we having some difficulty connecting to flashremoting.

Has anybody done this successfully or is this possible?

And will authenticating this connection with flash remoting result in the propogation of credentials from flash remoting to our slsb?

Thanks in advance.
-Keith

View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3962541#3962541

Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3962541