Hi
I've got a situation where the context-root of each of a number of web
applications should be used as part of the WHERE clause in the principalsQuery
of a database login module. Specifically, I have a number of web applications
that should share a single login module. But when the query to find the
principal is done, it should include part of the URI of the request that
triggered the query.
In this way, user names need not be unique across all deployed web
applications, even though these applications share a single login module and a
single authentications table. Note that all these applications access the same
EJBs.
There seem to me to be two possible routes here:
1. Have a different security-domain / application-policy for each application -
but would I have to edit login-config.xml and restart JBoss each time I added a
new application?
2. Write a custom login module - but how can this custom login module find the
URI of the original request? I've written and tested a sample module that
reproduces the behavior of the DatabaseServerLoginModule, but I can't see how
to access this information.
What's the most elegant solution here? I would very much appreciate any advice.
Bruno Beloff.
View the original post :
http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3908073#3908073
Reply to the post :
http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3908073
-------------------------------------------------------
This SF.Net email is sponsored by the JBoss Inc. Get Certified Today
Register for a JBoss Training Course. Free Certification Exam
for All Training Attendees Through End of 2005. For more info visit:
http://ads.osdn.com/?ad_id=7628&alloc_id=16845&op=click
_______________________________________________
JBoss-user mailing list
JBoss-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/jboss-user
