[jboss-user] [Security & JAAS/JBoss] - Re: Propagating Roles from Servlet Security Context to EJB3

[tnfink]

it works now.

The main problem was caused by the different configuration styles of the security-domain.

In jboss-web.xml it is

  | <jboss-web>
  |   <security-domain>java:/jaas/reisekosten</security-domain>
  | </jboss-web>
  | 

But in jboss.xml it is

  | <jboss>
  |   	<security-domain>reisekosten</security-domain>
  | </jboss>
  | 

Now everything works automagically as expected. My login configuration does even not need a client-login anymore:


  |     <application-policy name = "reisekosten">
  |        <authentication>
  |           <login-module code="org.jboss.security.auth.spi.UsersRolesLoginModule"
  |              flag = "required">
  |            <module-option name="usersProperties">props/reisekosten-users.properties</module-option>
  |            <module-option name="rolesProperties">props/reisekosten-roles.properties</module-option>
  |            <module-option name="password-stacking">useFirstPass</module-option>
  |           </login-module>
  |        </authentication>
  |     </application-policy>
  | 


-- Torsten

View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3999381#3999381

Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3999381