Probably just not with standalone Tomcat. I'm running Jetty/JBoss 
integrated with LDAP auth. If I were running standalone I'd have spoken up.

I think that the best way to accomplish what you're after would be to 
run Tomcat embedded in another JBoss instance. Just strip out all (most) 
of the other JBoss services - strip down jboss.jcml to the bare bones. 
Any ejb-refs in your web app will be mapped to JNDI names like 
"jnp://otherhost:1099/TheBeanJNDINameFromJBoss.xml". You'd then set up 
auth.conf and your jboss-web.xml just as you would when running 
integrated mode (the auth.conf files on the two boxes would be 
identical, most likely).

The advantage of this is that JBoss security stuff should take care of 
all propagation of security tokens, etc. That'd be a real problem using 
the Tomcat LDAP LoginModule.

On the other hand, using JBoss' LoginModule with tomcat might work for 
authentication, although group mappings probably wouldn't work.

Like I said, I'm running integrated, haven't even Tried this at Home to 
date.

hth,
danch

Emerson Cargnin - MSA wrote:
> Haven't anyone used ldap with jboss-tomcat?
> 
>     ----- Original Message -----
> 
>     *From:* Emerson Cargnin - MSA <mailto:[EMAIL PROTECTED]>
> 
>     *To:* [EMAIL PROTECTED]
>     <mailto:[EMAIL PROTECTED]>
> 
>     *Sent:* Thursday, May 23, 2002 5:26 PM
> 
>     *Subject:* [JBoss-user] LDap example
> 
> 
>     ANyone can help me with that?
> 
>      
> 
>     I need to make use of JAAS using ldap as subjects storages, but i
>     need to use tomcat standalone as the web container.
> 
>     What's the better way to accomplish this?
> 
>     1- Using tomcat own ldap LoginModule to make the authentication? and
>     afterwards use the subject gotten by tomcat in ejb invocations?
> 
>     2- Using jboss ldap LoginModule to make the authentication and
>     autorization ?
> 
>      
> 
>     if there's any other approaches to do this, i'd be pleased to know.
> 
>      
> 
>     And if someone has any working example of any of this or other
>     approaches, please send me a link to it : )
> 
>      
> 
>     Thanks in advance
> 
>      
> 
>     Emerson Cargnin - MSA
>     SICREDI - Ramal 3358-4860
> 



-- 

=========================================================================
Disclaimer:
All statements are my own, personal opinions and have nothing to do
with the opinions of employer, wife, or cat. They may not have anything
to do with objective reality, as a matter of fact. Your Milage May Vary, 
Excludes Delivery Charges, etc.
=========================================================================


_______________________________________________________________

Don't miss the 2002 Sprint PCS Application Developer's Conference
August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm

_______________________________________________
JBoss-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/jboss-user

Reply via email to