[jboss-user] [Security] - Re: Caller unauthorized on using a ejb3 statetlesssessionbea

[Wolfgang Knauf]

Hi,

I think I get it now. Your JAASLoginInterceptor should perform a login using the class "org.jboss.web.tomcat.security.login.WebAuthentication": http://www.jboss.org/community/wiki/WebAuthentication
This way, your authentication will be propagated to the security layer.

I don't know your class "LoginFacade", but I assume that you don't use "WebAuthentication" there?

Hope this helps

Wolfgang


View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=4258331#4258331

Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=4258331