[jboss-user] [Security & JAAS/JBoss] - JAAS configuration for remote EJB client

[alexg79]

I have an EJB client app and an EAR on the server, and the following snippet added to the server's login-config.xml:

  |     <application-policy name = "myapp">
  |        <authentication>
  |           <login-module code = "org.jboss.security.auth.spi.DatabaseServerLoginModule"
  |              flag = "required">
  |              <module-option name = "dsJndiName">java:/MyappDS</module-option>
  |              <module-option name = "principalsQuery">SELECT password FROM employee WHERE id=?</module-option>
  |              <module-option name = "rolesQuery">SELECT accessLevel, 'Roles' FROM employee WHERE id=?</module-option>
  |           </login-module>
  |        </authentication>
  |     </application-policy>
  | 
This works, but I don't like having to modify the server's configuration just to deploy an application. How can I accomplish the same thing with EAR level configuration? All the FAQs and examples only seem to cater for web apps. I don't know what to do.
I'm using JBoss 4.2.1GA.

View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4065707#4065707

Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4065707