[jboss-user] JBOSS LDAPS JAAS : Use it without role check ; JAAS to connect LDAPS serveur and do some tasks

xmarquis at genigraph.fr xmarquis at genigraph.fr
Mon Sep 8 11:18:54 EDT 2008


I'm a newbie in JBOSS, and JAAS.

I have followed some tutorials but I still cannot find a solution for 2

(1) In fact, my application internally manage role, and I don't want JAAS
to deal with it. So I'd like a system with login-config.xml and web.xml
<auth-contraints> <auth-role> tag, which permit to authentificate without
role check. (Anyway, there arent any role defined in the LDAP server for my
application, so I can't use role check.)

I've seen on the web that we can't put * to <auth-role> :
<auth-role>*</auth-role> doesn't work.

My login-config.xml application policy looks like that : 

    <application-policy name="ldap">
        <login-module code="contollers.security.MyLDAPLoginModule"
          <module-option name="bindCredential">******</module-option>
          <module-option name="baseCtxDN">c=fr</module-option>
          <module-option name="roleAttributeID">cn</module-option>
          <module-option name="roleRecursion">-1</module-option>

(2) Moreover, I'd like to use JAAS implemented classes and properties in
login-config.xml to connect to the LDAPS server and consult some
informations. I know I can do that with JNDI api, but is there a way to use
JAAS classes to do that.

(3) Another question : in my precedent implementation I still use JNDI  ; I
set up mannually into code the properties for LDAPS connection. I add also
SSL to protocol to prevent eventual ambiguity. However, my truststore seems
to be empty and my JBOSS server seems to be successful in LDAPS connexion
... If anyone has an idea ...

More information about the jboss-user mailing list