[jboss-user] [JBoss Portal] - Use Themes outside of actual portal.

2009-01-17 Thread clevelam
Is there a way to use portal themes outside of the actual portal. We plan on using the Portal as a gateway to our custom spring applications. We want the spring applications to take advantage of JBOSS themes without having to implement this as portals. Is this possible ? If so, how ?

[jboss-user] [Security JAAS/JBoss] - Re: LoginFilter vs. WebAuthenticator

2008-11-19 Thread clevelam
I don't have any EJBs. Question regarding the filter approach. The examples that I have seen online do login call, chain.doFilter (to call next filter or resource), then logout. The login / logout calls make database calls. This seems expensive to me to do login / logout on every resource

[jboss-user] [Security JAAS/JBoss] - Re: LoginFilter vs. WebAuthenticator

2008-11-19 Thread clevelam
Similiar to what you said. If a user shares his credentials with a friend. I do not want two sessions using the same credentials. View the original post : http://www.jboss.com/index.html?module=bbop=viewtopicp=4190612#4190612 Reply to the post :

[jboss-user] [Security JAAS/JBoss] - Re: LoginFilter vs. WebAuthenticator

2008-11-19 Thread clevelam
I think I get the idea. There is something I'm missing about what's described above. I'm assuming the Filter is called on every reguest. When the 1st user who stores his credentials in the servlet context.. goes to the next resource in the app... wouldnt the check be done... and reject

[jboss-user] [Security JAAS/JBoss] - Re: LoginFilter vs. WebAuthenticator

2008-11-19 Thread clevelam
Great. That sounds like it will work. Thanks for the pointers. View the original post : http://www.jboss.com/index.html?module=bbop=viewtopicp=4190663#4190663 Reply to the post : http://www.jboss.com/index.html?module=bbop=postingmode=replyp=4190663

[jboss-user] [Security JAAS/JBoss] - Prevent Multiple Authentication Sessions for a Single Accoun

2008-11-17 Thread clevelam
Hi, I'm trying to determine the best way to prevent multiple authenticated sessions for a single account. I'm using JBOSS's WebAuthentication class to do programmatic authentication. As well as having a custom login module on the other in. The login module verifies credentials as well as

[jboss-user] [Security JAAS/JBoss] - LoginFilter vs. WebAuthenticator

2008-11-17 Thread clevelam
In what situations would you implement a JAAS Login Filter vs. using JBOSS' WebAuthenticator class? I'm starting to feel like the filter approach greater flexibility. View the original post : http://www.jboss.com/index.html?module=bbop=viewtopicp=4189956#4189956 Reply to the post :

[jboss-user] [Security JAAS/JBoss] - Custom Principal with JBOSS NON Clustered SSO

2008-11-11 Thread clevelam
Should we be able to use a custom Principal with non clustered sso. I need to be able to login within one app and have the authentication known on another app within the same app server. When I move over to the next web app I get the following error: 17:00:08,656 ERROR [CoyoteAdapter] An

[jboss-user] [Security JAAS/JBoss] - Re: SimplePrincipal ClassCastException

2008-10-31 Thread clevelam
The extra module option was just experimination.A forum that I went to had principalClassName instead of principalClass. I was able to figure out my problem using the following URL: http://www.jboss.org/community/docs/DOC-12517 Group customGroup = new SimpleGroup(CallerPrincipal);

[jboss-user] [Security JAAS/JBoss] - Re: SimplePrincipal ClassCastException

2008-10-30 Thread clevelam
Moving my LoginModule to a seperate JAR still does not work. I have one correction. The classcastexception does not occur in the CustomLoginModule. It occurs in a servlet(spring controller) that has access to the httprequest object. The following calls:

[jboss-user] [Security JAAS/JBoss] - Re: SimplePrincipal ClassCastException

2008-10-29 Thread clevelam
I packaged my custom Principal, lets call it, MyCustomPrincipal and MyCustomLoginModule within the WAR file containing my web application. I figured as long as it's in the class path it should be fine. Within the MyCustomLoginModule when I call request.getPrincipal after authentication and

[jboss-user] [Security JAAS/JBoss] - Re: how jboss sso server work among different application se

2008-10-29 Thread clevelam
Is it possible to configuration jboss setup sso (federatoin server) to work between multiple application servers that sit on the same physical network domain. Or do I have to actually have seperate physical domains. I have multiple IP address but they are all on the same domain. Additionally,

[jboss-user] [Security JAAS/JBoss] - Re: single signe-on configuration with JAAS

2008-10-29 Thread clevelam
What tutorial are you using. View the original post : http://www.jboss.com/index.html?module=bbop=viewtopicp=4185476#4185476 Reply to the post : http://www.jboss.com/index.html?module=bbop=postingmode=replyp=4185476 ___ jboss-user mailing list

[jboss-user] [Security JAAS/JBoss] - SimplePrincipal ClassCastException

2008-10-27 Thread clevelam
I am trying to use a custom Princpal class with my custom JAAS LoginModule. I am doing programmatic authentication and thus using Jboss' WebAuthentication class. My LoginModule extends AbstractServerLoginModule. When declaring my login module within login-config.xml I added

[jboss-user] [Security JAAS/JBoss] - Re: How to authenticate to the JBoss server without FORM aut

2008-09-10 Thread clevelam
Did you ever find an answer to your problem. I'm experiencing the same exception with jboss 4.2.2 View the original post : http://www.jboss.com/index.html?module=bbop=viewtopicp=4175620#4175620 Reply to the post : http://www.jboss.com/index.html?module=bbop=postingmode=replyp=4175620