[jboss-user] [Security & JAAS/JBoss] - Re: Kerberos, ejb, rmi

2009-03-25 Thread alexanders
I think where are some good reasons for you to switch the protocol. Where is no standard implementations and I think specification for RMI to handle kerberos negotiation. In addition I had couple of problems to get RMI working in cluster environment behind LB. Actually I didn't got it working..

[jboss-user] [Security & JAAS/JBoss] - Re: Mixing CLIENT-CERT and BASIC authentication

2009-03-26 Thread alexanders
Not sure this question is in scope of the forum. Two things you need to describe in your web.xml: 1) Security constraint mapped to some url pattern and requires some role. 2) Role mapped to security domain. So you need to configure your web.xml as following: Two different security constraints map

[jboss-user] [Security & JAAS/JBoss] - Re: Kerberos, ejb, rmi

2009-03-26 Thread alexanders
"ruhe" wrote : Hi, alexanders. | | It's a good idea to use HTTP for rmi invocations to enable kerberized authentication. | | If you have problems with HTTPInvoker, so here is my config: | | And you'll find in docs how to customize invoker for ejb. |