If I'm reading the documentation correctly, I cannot write any java apps that access my bean in a secure context. In other words, I can not set any security on my bean or my client will never be able to access it as it cannot be authenticated. The documentation i refer to is in the JOnAS Installation guide:
 
"JOnAS relies on Tomcat for the identification and authentication of the user. Thus, security is available only if the client of the EJB is a servlet in Tomcat which has been configured to be secured"
 
So what am I suppossed to do? I wish I were good enough to write such a feature for JOnAS, but I'm about 2 good years away from that (and besides I have a job and don't have the time for that). I like JOnAS, but if this is true, then I believe we may have to part ways and I'll have to find another server, because I have a few projects where i need a security context to my EJBs from java applications NOT from servlets.
 
Does anyone have a solution? Am I wrong about JOnAS's capabilities?
 
Thanks,
Robert

Reply via email to