I think where are some good reasons for you to switch the protocol.
Where is no standard implementations and I think specification for RMI to
handle kerberos negotiation.
In addition I had couple of problems to get RMI working in cluster environment
behind LB.
Actually I didn't got it working..
Not sure this question is in scope of the forum.
Two things you need to describe in your web.xml:
1) Security constraint mapped to some url pattern and requires some role.
2) Role mapped to security domain.
So you need to configure your web.xml as following:
Two different security constraints map
"ruhe" wrote : Hi, alexanders.
|
| It's a good idea to use HTTP for rmi invocations to enable kerberized
authentication.
|
| If you have problems with HTTPInvoker, so here is my config:
|
| And you'll find in docs how to customize invoker for ejb.
|