User: oleg
Date: 01/01/09 17:23:58
Modified: src/etc/conf/default auth.conf jboss.jcml
Added: src/etc/conf/default roles.properties users.properties
Log:
Package structure for security stuff improved.
Classes from "system" package moved to "security" package.
Added "security/plugins" and "security/plugins/samples" packages.
Added JaasServerLoginModule and AbstractServerLoginModule classes
by Edward Kenworthy <[EMAIL PROTECTED]>
(file based implementation for JAAS security).
Revision Changes Path
1.2 +19 -5 jboss/src/etc/conf/default/auth.conf
Index: auth.conf
===================================================================
RCS file: /products/cvs/ejboss/jboss/src/etc/conf/default/auth.conf,v
retrieving revision 1.1
retrieving revision 1.2
diff -u -r1.1 -r1.2
--- auth.conf 2000/10/27 09:52:46 1.1
+++ auth.conf 2001/01/10 01:23:57 1.2
@@ -1,16 +1,30 @@
// Put login modules providing authentication and realm mappings
// for specific beans here, for example:
// mybean {
-// org.jboss.security.DatabaseServerLoginModule required db="jdbc/DbJndiName"
table="UserTable" name="UserNameColumn" password="UserPswColumn";
+// org.jboss.security.plugins.DatabaseServerLoginModule required
db="jdbc/DbJndiName" table="UserTable" name="UserNameColumn" password="UserPswColumn";
// com.mycompany.MyRealmMappingLoginModule required param1="value1"
param2="value2";
-// }
+// };
+simple {
+ // Very simple login module:
+ // any user name is accepted.
+ // password should either coincide with user name or be null,
+ // all users have role "guest",
+ // users with non-null password also have role "user"
+ org.jboss.security.plugins.samples.SimpleServerLoginModule required;
+};
+
+// The default server login module
other {
- // Provides the default realm mapping
- org.jboss.security.SimpleServerLoginModule required;
+ // A realistic server login module, which can be used when the number
+ // of users is relatively small. It uses two properties files:
+ // users.properties, which holds users (key) and their password (value).
+ // roles.properties, which holds users (key) and a comma-separated list of
their roles (value).
+ org.jboss.security.plugins.samples.JaasServerLoginModule required;
// For database based authentication comment the line above,
// uncomment the line below and adjust the parameters in quotes
- // org.jboss.security.DatabaseServerLoginModule required db="jdbc/DbJndiName"
table="UserTable" name="UserNameColumn" password="UserPswColumn";
+ // Database server login module provides security manager only, no role mapping
+ // org.jboss.security.plugins.DatabaseServerLoginModule required
db="jdbc/DbJndiName" table="UserTable" name="UserNameColumn" password="UserPswColumn";
};
1.12 +6 -3 jboss/src/etc/conf/default/jboss.jcml
Index: jboss.jcml
===================================================================
RCS file: /products/cvs/ejboss/jboss/src/etc/conf/default/jboss.jcml,v
retrieving revision 1.11
retrieving revision 1.12
diff -u -r1.11 -r1.12
--- jboss.jcml 2000/12/29 21:03:28 1.11
+++ jboss.jcml 2001/01/10 01:23:57 1.12
@@ -23,11 +23,14 @@
</mbean>
<!-- Security -->
- <mbean code="org.jboss.security.JaasSecurityManagerService"
name="DefaultDomain:service=JaasSecurityManager" />
+ <!-- JAAS security manager and realm mapping -->
+ <mbean code="org.jboss.security.plugins.JaasSecurityManagerService"
name="DefaultDomain:service=JaasSecurityManager" />
- <mbean code="org.jboss.security.SimpleRealmMappingService"
name="DefaultDomain:service=SimpleRealmMappingFactory" />
+ <!-- Direct implementation of realm mapping (sample) -->
+ <mbean code="org.jboss.security.plugins.samples.SimpleRealmMappingService"
name="DefaultDomain:service=SimpleRealmMappingFactory" />
- <mbean code="org.jboss.security.EJBSecurityManagerService"
name="DefaultDomain:service=EJBSecurityManager" />
+ <!-- Direct implementation of security manager (sample) -->
+ <mbean code="org.jboss.security.plugins.samples.EJBSecurityManagerService"
name="DefaultDomain:service=EJBSecurityManager" />
<!-- JDBC -->
<mbean code="org.jboss.jdbc.JdbcProvider"
name="DefaultDomain:service=JdbcProvider">
1.1 jboss/src/etc/conf/default/roles.properties
Index: roles.properties
===================================================================
user1=role1,role2,role3
user2=role2
1.1 jboss/src/etc/conf/default/users.properties
Index: users.properties
===================================================================
user1=password1
user2=password2
