[JBoss-user] [Security & JAAS/JBoss] - Re: JAAS and permission roles in EJB

[pedrosalazar]

OK, I think I understand how it works now:

We add 2 levels of authentication: a certificate login module or a login role module.
The first level of authentication would be the certificate login module, and after 
that, using  the user/password already authenticated ("useFirstPass"), it will match 
the role associated in the roles.properties.

That's just fine. I was supposing that the certificate login module could handled also 
the roles, but it never can do that because it was never designed for that. It must 
work in collaboration with a specific role login modle.

Thanks,
Pedro Salazar.


View the original post : 
http://www.jboss.org/index.html?module=bb&op=viewtopic&p=3840596#3840596

Reply to the post : 
http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=3840596


---
This SF.Net email sponsored by Black Hat Briefings & Training.
Attend Black Hat Briefings & Training, Las Vegas July 24-29 - 
digital self defense, top technical experts, no vendor pitches, 
unmatched networking opportunities. Visit www.blackhat.com
___
JBoss-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/jboss-user

[JBoss-user] [Security & JAAS/JBoss] - Re: JAAS and permission roles in EJB

[cbrettin]

You will simply have a different login module. Roles are treated exactly the same. You 
can use a module that does its own role loading (such as  CertRolesLoginModule and 
DatabaseCertLoginModule) or stack a role loading module after the authentication 
module as is done in the wiki example:

http://www.jboss.org/wiki/Wiki.jsp?page=BaseCertLoginModule


View the original post : 
http://www.jboss.org/index.html?module=bb&op=viewtopic&p=3840557#3840557

Reply to the post : 
http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=3840557


---
This SF.Net email sponsored by Black Hat Briefings & Training.
Attend Black Hat Briefings & Training, Las Vegas July 24-29 - 
digital self defense, top technical experts, no vendor pitches, 
unmatched networking opportunities. Visit www.blackhat.com
___
JBoss-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/jboss-user