[JBoss-user] [Security JAAS/JBoss] - Re: SSL in JBoss

2005-10-24 Thread [EMAIL PROTECTED]
The best idea is to use Apache in front of Tomcat. The advantages : - ability to use just one SSL certificate to handle multiple sites ( apps ) using mod_proxy module http://httpd.apache.org/docs/2.0/mod/mod_proxy.html - ability to rewrite URLs in any way to archieve desired behaviour

[JBoss-user] [Security JAAS/JBoss] - Re: SSL in JBoss

2005-10-24 Thread awaisbajwa
it is great information if I use Apache.. thanks But please tell me, do I need to use Apache or Jboss's tomcat server would be sufficient? .. In case of Jboss, how can I achieve snme behaviour ? Thanks for understanding my problem .. looking forward.. Awais Bajwa View the original

[JBoss-user] [Security JAAS/JBoss] - Re: SSL in JBoss

2005-10-24 Thread [EMAIL PROTECTED]
About tomcat, I think, you should check current schema ( http or https ) and forward to some start page with desired schema . Maybe you can use filters for it. Use separate filter for login page that checks about http only. About other pages, use filter that accepts only https. In the case if

[JBoss-user] [Security JAAS/JBoss] - Re: SSL in JBoss

2005-10-23 Thread awaisbajwa
Hi Scott, Thanks for your reply, but you didnt understand my probelm. And there is no fruit in the link you sent me, as I've already completed steps iin the link suggested by you. Once again: I have installed SSl certificate successfully as provided in the wiki's link above. Now my site is

[JBoss-user] [Security JAAS/JBoss] - Re: SSL in JBoss

2005-10-22 Thread awaisbajwa
Any JBoss guru can answer this question ? it has become a bottle neck and i believe it is a tiny issue. regards View the original post : http://www.jboss.com/index.html?module=bbop=viewtopicp=3902730#3902730 Reply to the post :

[JBoss-user] [Security JAAS/JBoss] - Re: SSL in JBoss

2005-10-22 Thread [EMAIL PROTECTED]
http://wiki.jboss.org/wiki/Wiki.jsp?page=SSLSetup View the original post : http://www.jboss.com/index.html?module=bbop=viewtopicp=3902801#3902801 Reply to the post : http://www.jboss.com/index.html?module=bbop=postingmode=replyp=3902801 ---

[JBoss-user] [Security JAAS/JBoss] - Re: ssl in jboss 3.2.5 is broken

2004-07-21 Thread osf_lover
sorry to get back to you so late. In jboss 325, request.getUserPrincipal() returns Identity(members:user1) instead of user1. That's the reason my CustomRealm code failing to look for the user details. Now my questions are 1) request.getUserPrincipal should return user1 instead of Identity

[JBoss-user] [Security JAAS/JBoss] - Re: ssl in jboss 3.2.5 is broken

2004-07-08 Thread osf_lover
Have tried your jsp code, but that also does not work for me. Do i need to modify something in login-config.xml ? I have added following bits to the default login-config.xml !-- GDS Login Module -- login-module code = com.xxx.gds.jaas.GdsJBossLoginModule flag =

[JBoss-user] [Security JAAS/JBoss] - Re: ssl in jboss 3.2.5 is broken

2004-07-08 Thread [EMAIL PROTECTED]
You'll have to debug your custom GdsJBossLoginModule. There were some refactorings in the login module layer to support x509 cert based login modules so look into whether this broke your login module. View the original post :

[JBoss-user] [Security JAAS/JBoss] - Re: ssl in jboss 3.2.5 is broken

2004-07-08 Thread osf_lover
Infact its not refactoring. One of the class has changed! In jbosssx.jar, AbstractServerLoginModule.java class, CreateGroup method returns SimpleGroup if it didn't find one instead of NestableGroup. The change between AbstractServerLoginModule.java is 284c284 roles = new

[JBoss-user] [Security JAAS/JBoss] - Re: ssl in jboss 3.2.5 is broken

2004-07-08 Thread [EMAIL PROTECTED]
As stated in the release notes: Change the behavior of the base createGroup to use a SimpleGroup rather than a NestedGroup as the latter precludes the ability to combine roles across login modules. If that is the desired behavior the subclass would create its own NestedGroup instance. How does

[JBoss-user] [Security JAAS/JBoss] - Re: ssl in jboss 3.2.5 is broken

2004-07-07 Thread osf_lover
Hi, If the problem is in my code, it would not work in jboss 3.2.3 or jboss 3.2.4. But my same code is working with Jboss 3.2.3 and jboss 3.2.4 but NOT with jboss 3.2.5. Which leads to the conclusion, something has changed in Jboss 3.2.5 in ssl/authentication layer. The exception shows

[JBoss-user] [Security JAAS/JBoss] - Re: ssl in jboss 3.2.5 is broken

2004-07-07 Thread triathlon98
Maybe JBoss does something more correctly than before. Tell what you are doing and how this differs from what happened before. Maybe even show your code. There is no way anybody can help with an Exception you defined being thrown in your code without saying what is happening! Joachim View the

[JBoss-user] [Security JAAS/JBoss] - Re: ssl in jboss 3.2.5 is broken

2004-07-07 Thread osf_lover
Here is the code snippet/my test jsp page %@ page import = com.xxx.gds.security.* % %@ page import = java.util.* % %@ page import = java.lang.* % %@ page import = javax.naming.* % %@ page import=org.jboss.security.* % % GdsDAO dao =

[JBoss-user] [Security JAAS/JBoss] - Re: ssl in jboss 3.2.5 is broken

2004-07-07 Thread [EMAIL PROTECTED]
Here is a trivial jsp page that shows a principal with secured with basic auth using both ssl and non-ssl connections: | [EMAIL PROTECTED] import=java.io.*,javax.naming.*, | java.util.Date, | java.util.Enumeration, |

[JBoss-user] [Security JAAS/JBoss] - Re: ssl in jboss 3.2.5 is broken

2004-07-06 Thread triathlon98
Looks like a problem in your code somewhere. Maybe a problem with DNS caching ? Note that the JVM caches DNS entries when not told otherwise. Joachim View the original post : http://www.jboss.org/index.html?module=bbop=viewtopicp=3841129#3841129 Reply to the post :

[JBoss-user] [Security JAAS/JBoss] - Re: ssl in jboss 3.2.5 is broken

2004-07-06 Thread [EMAIL PROTECTED]
Explain how this exception relates to ssl. View the original post : http://www.jboss.org/index.html?module=bbop=viewtopicp=3841137#3841137 Reply to the post : http://www.jboss.org/index.html?module=bbop=postingmode=replyp=3841137 --- This