Hi, I'm trying hard to come to a viable solution for the security authentication we want to use. I have just started to look at jetspeed portal and i really am lost.
Right now the JSP portlets can be deployed without any problem into the portal space. The problem lies with the authentication. We have a RMI server running which is internally using JAAS to authenticate users. Now as a ad-hoc workaround i modified the action class for the login to first authenticate with our rmi server..if it fails there i declare the whole logon attempt as a failure. If authentication works then i let the jetspeed authentication take over...which currently is looking at the hypersonic database to validate. I want to make the authentication to be taken place in only place. I do not want this two step approach. Meaning when the user logs in i do not want the RMI server to authenticate separately from jetspeed. Is there a good solution that will combine the JAAS authentication with jetspeed authentication? Any help in this matter is appreciated. I really am pressed for time to come up with something. If i do not get a response..in the short time that i have i may have to go for the two step approach...which frankly speaking i do not like at all. Thanks, Archana