[JBoss-user] [Security & JAAS/JBoss] - Re: Container idependent JAAS Login Module
How about using javax.security.auth.spi.LoginModule this should make it possible to be used in any server its the interface implemented by JBoss AbstractServerLoginModule. hth SVen http://www.jboss.org/index.html?module=bb&op=viewtopic&p=3825038#3825038";>View the original post http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=3825038>Reply to the post --- This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CEO of GenToo technologies. Learn everything from fundamentals to system administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click ___ JBoss-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/jboss-user
[JBoss-user] [Connectors and JCA/JBoss] - Re: where to place dll so JBoss can find it
yes, that definitly worked thank you http://www.jboss.org/index.html?module=bb&op=viewtopic&p=3824696#3824696";>View the original post http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=3824696>Reply to the post --- This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CEO of GenToo technologies. Learn everything from fundamentals to system administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click ___ JBoss-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/jboss-user
[JBoss-user] [Security & JAAS/JBoss] - Re: custom loginmodule concurrent logins
Thank you for your very fast answer Scott! Is there any plan if /when it will be implemented? Thank you SVen http://www.jboss.org/index.html?module=bb&op=viewtopic&p=3823989#3823989";>View the original post http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=3823989>Reply to the post --- SF.Net is sponsored by: Speed Start Your Linux Apps Now. Build and deploy apps & Web services for Linux with a free DVD software kit from IBM. Click Now! http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click ___ JBoss-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/jboss-user
[JBoss-user] [Security & JAAS/JBoss] - custom loginmodule concurrent logins
Hi all I have the following problem/question and haven't been able to find an answer neither in the documententation (JBoss Administration and Development, Hands-on-Guide,...) nor the forums, nor google. I have successfully implemented my own custom LoginModule which subclasses org.jboss.security.auth.spi.AbstractServerLoginModule. The LoginModule uses some backendsystems (like SAP, a database, ...) to validate the user and to assign roles. Everything works fine so far. The only problem i am facing is that my LoginModul is unable to handle concurrent logins. So if I try to connect my secured EJB with, say, 10 users, all logins are performed one after another which is not very satisfying, because sometimes a validation takes up to 10 seconds and so it takes a very long time until the last client was authenticated. I guess it should be possible to run multiple instance of my LoginModule at the same time (because theire are running instance concurrently) but how can I configure JBoss/my loginModule? here is a sample (serverside-output) where you can see the method calls (remember both calls are send (almost) at the same time): | //first call is proceeded | [MyLoginModule 1] initialize() | [MyLoginModule 1] login() | [MyLoginModule 1] validation() | [MyLoginModule 1] commit() | [MyLoginModule 1] getIdentity() | [MyLoginModule 1] getRoleSets() | [MyLoginModule 1] createGroup() | [MyLoginModule 1] createGroup() | | //second call is proceeded | [MyLoginModule 2] initialize() | [MyLoginModule 2] login() | [MyLoginModule 2] validation() | [MyLoginModule 2] commit() | [MyLoginModule 2] getIdentity() | [MyLoginModule 2] getRoleSets() | [MyLoginModule 2] createGroup() | [MyLoginModule 2] createGroup() | | [MyLoginModule 1] logout() | [MyLoginModule 1] getIdentity() | [MyLoginModule 2] logout() | [MyLoginModule 2] getIdentity() | I am using JBoss 3.2.3 on Windons 2000 Professionel and J2SDK 1.4.2 If you need further information just ask. Thank you in advance SVen http://www.jboss.org/index.html?module=bb&op=viewtopic&p=3823955#3823955";>View the original post http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=3823955>Reply to the post --- SF.Net is sponsored by: Speed Start Your Linux Apps Now. Build and deploy apps & Web services for Linux with a free DVD software kit from IBM. Click Now! http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click ___ JBoss-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/jboss-user
[JBoss-user] [J2EE Compliance] - Re: ejb restrictions ignored by JBoss???
Thank you Scott so, if I understand it right this means: - by default JBoss doesn't care about any ejb-restricitions?! And if I want them to be considered i'd have to run a security manager for this purpose?! thank you SVen View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=3823749#3823749 Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=3823749 --- SF.Net is sponsored by: Speed Start Your Linux Apps Now. Build and deploy apps & Web services for Linux with a free DVD software kit from IBM. Click Now! http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click ___ JBoss-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/jboss-user
[JBoss-user] [J2EE Compliance] - Re: JBoss JAAS broken?
the URL doesn't link to any side can you please update it or post the topics name? thank you SVen View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=3823562#3823562 Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=3823562 --- SF.Net is sponsored by: Speed Start Your Linux Apps Now. Build and deploy apps & Web services for Linux with a free DVD software kit from IBM. Click Now! http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click ___ JBoss-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/jboss-user
[JBoss-user] [J2EE Compliance] - ejb restrictions ignored by JBoss???
Hello all
I have a question.
It is (among other things) a restriction of EJB that you are not allowed to access the
filesystem (to write, edit or delete files).
I guess that's right?!
So why can I delete a file?
I set in standardjboss.xml to true
and removed all entries from server.policy. But still I am able to delete a file from
inside an SFEJB.
| try
| {
| File f = new File("D:\\test.txt");
| f.delete();
| }catch(Exception e){System.out.println(e)}
|
if i try to run this from inside an EJB's interface method it should end in an
Exception?!
I am using JBoss (MX MicroKernel) [3.2.3 (build: CVSTag=JBoss_3
_2_3 date=200311301445)]
on Windows 2000 Professionel
Thank you in advance
SVen
View the original post :
http://www.jboss.org/index.html?module=bb&op=viewtopic&p=3823561#3823561
Reply to the post :
http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=3823561
---
SF.Net is sponsored by: Speed Start Your Linux Apps Now.
Build and deploy apps & Web services for Linux with
a free DVD software kit from IBM. Click Now!
http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click
___
JBoss-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/jboss-user
[JBoss-user] [Installation & Configuration] - Re: a very simple question needs an aswer
I suppose the problem is that you enabled the "QuickEdit-Mode" in your Dos-box, assumed you are sing windoze. If this is enabled and you marked something in the dos-box this will stop JBoss from processing your requests. Just hit the dosbox in your taskbar with the right mouse-button, properties, and their you will find a checkbox called "QuickEdit-Mode" deselect it and this phenomena should never appear again. Or make shure you didn't select anything within the Dos-box. hth SVen View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=3823560#3823560 Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=3823560 --- SF.Net is sponsored by: Speed Start Your Linux Apps Now. Build and deploy apps & Web services for Linux with a free DVD software kit from IBM. Click Now! http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click ___ JBoss-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/jboss-user
[JBoss-user] [EJB/JBoss] - ejb restriction
Hello all
I have a question.
It is (among other things) a restriction of EJB that you are not allowed to access the
filesystem (to write, edit or delete files).
I guess that's right?!
So why can I delete a file?
I set in standardjboss.xml to true
and removed all entries from server.policy. But still I am able to delete a file from
inside an SFEJB.
| try
| {
| File f = new File("D:\\test.txt");
| f.delete();
| }catch(Exception e){System.out.println(e)}
|
if i try to run this from inside an EJB's interface method it should end in an
Exception?!
I am using JBoss (MX MicroKernel) [3.2.3 (build: CVSTag=JBoss_3
_2_3 date=200311301445)]
on Windows 2000 Professionel
Thank you in advance
SVen
View the original post :
http://www.jboss.org/index.html?module=bb&op=viewtopic&p=3823092#3823092
Reply to the post :
http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=3823092
---
SF.Net is sponsored by: Speed Start Your Linux Apps Now.
Build and deploy apps & Web services for Linux with
a free DVD software kit from IBM. Click Now!
http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click
___
JBoss-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/jboss-user
[JBoss-user] [Security & JAAS/JBoss] - Re: Log-In-Problem using a LoginEJB and a Custom LoginModule
View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=3820935#3820935 Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=3820935 Thank you Scott I guess this was the fault. I thought JBoss looks for the subject which calls a secured Method and gets the roles from the subject. So I have to find another way. Thank you all for your help best regards SVen --- The SF.Net email is sponsored by EclipseCon 2004 Premiere Conference on Open Tools Development and Integration See the breadth of Eclipse activity. February 3-5 in Anaheim, CA. http://www.eclipsecon.org/osdn ___ JBoss-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/jboss-user
[JBoss-user] [Security & JAAS/JBoss] - Re: Log-In-Problem using a LoginEJB and a Custom LoginModule
View the original post :
http://www.jboss.org/index.html?module=bb&op=viewtopic&p=3820925#3820925
Reply to the post :
http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=3820925
I am calling the secured bean using this code:
// calling unsecured bean which does the login stuff
//now get the authenticated subject
Subject s = LoginBean.getSubject()
/**the getSubjectmethod returns LoginContext.getSubject()*/
Subject.doAs(s, new PrivilegedAction()
{
public Object run()
{
InitialContext ctx = new InitialContext()
HelloHome h = (HelloHome)ctx.lookup("Hello");
Hello he = h.create();
lblRes.setText(he.hello2());
}
});
Parameters of Subject.runAs(...):
subject - the Subject that the specified action will run as. This parameter may be
null.
action - the code to be run as the specified Subject.
Maybe I am totally wrong but this should call the secured Bean as the authenticated
Subject.
Regards,
SVen
---
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
http://www.eclipsecon.org/osdn
___
JBoss-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/jboss-user
