[jboss-user] [Security & JAAS/JBoss] - Re: Single Sign On with LDAP Examples

[yyovkov]

Hi salaboy21, 

here is my security-config.xml
--- cut ---
<?xml version='1.0'?>
<!DOCTYPE policy PUBLIC
      "-//JBoss//DTD JBOSS Security Config 3.0//EN"
      "http://www.jboss.org/j2ee/dtd/security_config.dtd">

<!-- The JAAS login configuration file for the java:/jaas/jbossweb-form-auth
security domain used by the security-spec test case
-->

    <application-policy name="jboss-sso">
       
         <login-module code="org.jboss.security.idm.UsernameAndPasswordLoginModule" flag="sufficient">
            <module-option name="unauthenticatedIdentity">guest</module-option>
            <module-option name="password-stacking">useFirstPass</module-option>
            <!--module-option name="hashAlgorithm">MD5</module-option>
            <module-option name="hashEncoding">HEX</module-option-->

            <module-option name="hashUserPassword">true</module-option>
            <module-option name="hashStorePassword">false</module-option>

            <module-option name="authenticatedRoles">Authenticated,RegisteredUsers</module-option>
         </login-module>
         <login-module code="org.jboss.security.idm.UsernameAndPasswordLoginModule" flag="sufficient">
            <module-option name="unauthenticatedIdentity">guest</module-option>
            <module-option name="password-stacking">useFirstPass</module-option>
            <module-option name="authenticatedRoles">Authenticated,RegisteredUsers</module-option>
         </login-module>
      
    </application-policy>

--- cut ---

I am still not able to connect to FedoraDS. I have also tried to connect to OpenLDAP server,  but with changed password of the user to be MD5 hashed, not playntext. It also did not work.

View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4143566#4143566

Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4143566