[jboss-user] [Security JAAS/JBoss] - Re: The neverending logout topic

2007-08-10 Thread chakotey07
Hi, Please post your config file and the location of the prop-files, too! Cheers, chakotey07 View the original post : http://www.jboss.com/index.html?module=bbop=viewtopicp=4072848#4072848 Reply to the post : http://www.jboss.com/index.html?module=bbop=postingmode=replyp=4072848

[jboss-user] [Security JAAS/JBoss] - Re: The neverending logout topic

2007-08-10 Thread nollie
chakotey07 I've managed to declare the properties files and run the aforementioned code to logout ... only I didn't really logout. In any case, I cannot maintain a flat file of usernames and passwords so I'm keen to learn how I can avoid the UsersRolesLoginModule all together. In my

[jboss-user] [Security JAAS/JBoss] - Re: The neverending logout topic

2007-08-09 Thread nollie
Dear unauthenticators Thanks to chakotey07 and everyone else for their posts. Using smi-smith's code I have gotten a hold of a LoginContext, but calling the logout method leads to this error: anonymous wrote : 18:53:28,234 ERROR [UsersRolesLoginModule] Failed to load users/passwords/role

[jboss-user] [Security JAAS/JBoss] - Re: The neverending logout topic

2007-04-24 Thread chakotey07
Ooooh yeah, this code... anonymous wrote : // get the current subject and its context within the security realm | final javax.security.auth.Subject subject = (javax.security.auth.Subject) new javax.naming.InitialContext().lookup(java:comp/env/security/subject); | final

[jboss-user] [Security JAAS/JBoss] - Re: The neverending logout topic

2007-04-24 Thread Vellmont
I think I've found the root of my problem. Basic Authentication. Not many references talk about it, but it would appear that one of the major architectural differences between basic, and form based authentication is that basic authentication has no concept of a logged in user. The browser

[jboss-user] [Security JAAS/JBoss] - Re: The neverending logout topic

2007-04-23 Thread nollie
Gentlemen I'm very interested in the issue of logging out as well. I have read many articles on the subject and nothing has worked so far. I'm authenticating with org.jboss.security.auth.spi.LdapExtLoginModule by redirecting users to /auth/portal/myPortal/myPage. This is working well. I

[jboss-user] [Security JAAS/JBoss] - Re: The neverending logout topic

2007-04-23 Thread sim-smith
If you are interested, I have an app where this is all working. I use FormAuthentication, and have a logout.jsp that we use for logging out: % // get the current subject and its context within the security realm final javax.security.auth.Subject subject = (javax.security.auth.Subject) new

[jboss-user] [Security JAAS/JBoss] - Re: The neverending logout topic

2007-04-19 Thread chakotey07
Hiho, Did you try the Basic or Form Authentication? With the Form Auth ist should work... View the original post : http://www.jboss.com/index.html?module=bbop=viewtopicp=4038720#4038720 Reply to the post : http://www.jboss.com/index.html?module=bbop=postingmode=replyp=4038720

[jboss-user] [Security JAAS/JBoss] - Re: The neverending logout topic

2007-04-18 Thread Vellmont
I've had similar problems with Jboss authentication I inherited from another developer. I'm very interested in the answers to this problem, as currently my webapp doesn't seem to have any kind of timeout on logins. Currently I stay logged into the website until I either close the brower, or

[jboss-user] [Security JAAS/JBoss] - Re: The neverending logout topic

2007-04-17 Thread chakotey07
Hi again, I solved Question 1 ... at least for me ... anonymous wrote : Thus, I switched to Form Auth (incl. j_security_check) ... session.invalidate does not work neither. Wrong ... it works, but the browser caches the credentials and performs itself a re-login (right?) I first used a JSF Web