I'm using JBoss 4.00DR4 and I managed to get CLIENT-CERT to work with a servlet, roughtly following the config given in the wiki: http://www.jboss.org/wiki/Wiki.jsp?page=BaseCertLoginModule
Except that I've used CertRolesLoginModule in jbosssx from CVS and a dynamically loaded login configuration. I'm not currently using role based security on the EJBs but sessionContext.getCallerPrincipal() returns the principal so I assume a compatible login is occuring, but then I'm using Local invocations, so that may be the differnece. JbossSecurityMgrRealm simply interfaces tomcat the the JBoss security architecture (it just delegates to a jboss security manager specified in its local JNDI) even the class is not hardwired: it is configured via server.xml (Server/Service/Engine/Realm) in the tomcat sar (look in the deploy dir). BUT it is not a JBoss realm it is a Catalina one, so you probably don't want to change it (except possibly the certificate subject mapping class) Hope this helps View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=3840223#3840223 Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=3840223 ------------------------------------------------------- This SF.Net email sponsored by Black Hat Briefings & Training. Attend Black Hat Briefings & Training, Las Vegas July 24-29 - digital self defense, top technical experts, no vendor pitches, unmatched networking opportunities. Visit www.blackhat.com _______________________________________________ JBoss-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/jboss-user
