[jboss-user] [Security & JAAS/JBoss] - Re: JAAS Authentication from stand alone client

[ragavgomatam]

anonymous wrote : So aftre both these calls, server itself will create a jms message for audit and it will put in a queue and an MDB will pick the message and for processign this message MDB will try to call the secured EJB

JMS/MDB is asynchronous....JMS/MDB systems are meant for distributed enterprise messaging and they are asynchoronous  You are mis-using messaging for auditing...
So there is your problem Asynchronous nature of JMS/MDB.......Correct your flow...Also why use JMS/MDB for auditing ? Seems odd...Can you use 
a simple POJO ? May be you can have your flow as follows :- 

anonymous wrote : Java Client logs in --> calls jaas module --> calls secured ejb --> calls unsecured ejb --> calls a jms client --> break here, call POJO for auditing & return to client 



View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4175189#4175189

Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4175189