[jboss-user] [Security & JAAS/JBoss] - Re: SOLVED: GenericHeaderBasedAuthentication

2009-03-03 Thread sfisque
"sfisque" wrote : it seems the fact that identity and the other attributes of AbstractServerLoginModule are private was causing me all sorts of headaches. | the above should read "UserPasswordLoginModule", not AbstractServerLoginModule. sorry for the confusion. [they r

[jboss-user] [Security & JAAS/JBoss] - SOLVED: GenericHeaderBasedAuthentication

2009-03-03 Thread sfisque
basically, i tried subclassing UserPasswordLoginModule and this proved fruitless. i eventually just subclassed AbstractServerLoginModule. it seems the fact that identity and the other attributes of AbstractServerLoginModule are private was causing me all sorts of headaches. i would suggest ei

[jboss-user] [Security & JAAS/JBoss] - Followup: GenericHeaderBasedAuthentication

2009-03-03 Thread sfisque
so now i have a custom LoginModule that subclasses the GenericHeader module that is included in jboss-as 4.2.3. the module successfully extracts the user_id from the header, sets super.loginOk to true and puts the created Principal into javax.security.auth.login.name. when i watch the TRACE me

[jboss-user] [Security & JAAS/JBoss] - Re: GenericHeaderBasedAuthentication

2009-02-27 Thread sfisque
i got the context.xml to load. for anyone going down this road, it appears the GenericHeader valve MUST have the session cookie pushed by Oblix. i'm going to have to subclass it and remove the dependency on the cookie, to fit the target environment. == stanton View the original post : http:

[jboss-user] [Security & JAAS/JBoss] - Followup: GenericHeaderBasedAuthentication

2009-02-27 Thread sfisque
i turned up the logging to get TRACE events from org.jboss.web.tomcat.security and i dont see any events coming from the GenericHeaderAuthenticator, which should be echoing to the log file. i double checked the syntax of the Valve tag in my context.xml file and it appears sane. besides deployi

[jboss-user] [Security & JAAS/JBoss] - Re: GenericHeaderBasedAuthentication

2009-02-27 Thread sfisque
"anil.saldh...@jboss.com" wrote : httpHeaderForSSOAuth="sm_ssoid,ct-remote-user,HTTP_OBLIX_UID" | | sessionCookieForSSOAuth="SMSESSION,CTSESSION,ObSSOCookie" | | The first value is basically what oblix will be sending as the username in the http header. The second one is what o

[jboss-user] [Security & JAAS/JBoss] - GenericHeaderBasedAuthentication

2009-02-24 Thread sfisque
using JBoss AS 4.2.3-GA on solaris, jdk 1.5.0 i'm trying to configure GenericHeaderBasedAuthentication for use with Oracle's OBLIX SSO solution. what i cannot figure out from the documentation is what the syntax of the values for "httpHeaderForSSOAuth" and "sessionCookieForSSOAuth" are. the e

[jboss-user] [Installation, Configuration & DEPLOYMENT] - per valve deployment

2009-02-17 Thread sfisque
greetings! using jboss as 4.2.3-GA, running on solaris 10, jdk 1.5.0 is there a way to selectively deploy webapps on a given protocol valve? what i'm trying to achieve is to have some webapps deployed only on the HTTP valve, and others deployed only on the HTTPS valve. TIA == stanton View

[jboss-user] [Management, JMX/JBoss] - Re: Best Way to Deploy JMX Classes

2008-11-06 Thread sfisque
you can package the mbean/impl classes in a ..SAR (its similar to an .EAR, check the docs) and either configure it internally with a jboss-service.xml or externally with a "-service.xml" file in the deploy directory. each way has its advantages. i did something similar to this, where the .SAR

[jboss-user] [Management, JMX/JBoss] - MBean exposing a HashMap

2008-11-06 Thread sfisque
i want to have a HashMap store some runtime settings for several session beans, and it seems the best way to expose this is via an MBean. my question, is how would i configure the hashmap in the deployment descriptor (-service.xml) so that key/value pairs are placed into the hashmap. the reaso

[jboss-user] [Management, JMX/JBoss] - Re: configure scheduling of mbean in .sar

2008-10-25 Thread sfisque
discovered the answer for anyone else who trips over this or a similar issue. the "external" mbean descriptor has to end with "-service.xml". i was assuming ".xml" was enough. == stanton View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4184644#4184644 Reply

[jboss-user] [Management, JMX/JBoss] - Re: configure scheduling of mbean in .sar

2008-10-24 Thread sfisque
... or failing that, is there a way to get the scheduler mbean (if deployed from the .sar) to watch for a configuration file (similar to how .rar files are configured via external xml files). TIA == sfisque View the original post : http://www.jboss.com/index.html?module=bb&op=viewtop

[jboss-user] [Management, JMX/JBoss] - configure scheduling of mbean in .sar

2008-10-24 Thread sfisque
running jboss as 4.2.3-GA i have a .sar which contains an mbean, its interface, and the appropriate jboss-service.xml file. if i configure a scheduler in the jboss-service.xml file, it fires up correctly and everything is happy. if i remove the scheduling mbean block, and try to configure a sc

[jboss-user] [Persistence, JBoss/CMP, Hibernate, Database] - Re: ignoring columns for update detection

2008-10-20 Thread sfisque
except i want hibernate to update these columns. the trick is to have hibernate send and receive the target columns to/from the database when doing an UPDATE, but when it is asked to merge the pojo, ignore them for deciding if the updated object is "dirty". for the near term, i'm doing a brute

[jboss-user] [Persistence, JBoss/CMP, Hibernate, Database] - Re: ignoring columns for update detection

2008-10-17 Thread sfisque
how would one go about suggesting an enhancement to Hibernate (or JPA) to include a new annotation like @NotSignificant that would allow a developer to tag an attribute, similar to @Transient, so that the attribute would be persisted and retrieved "normally" but ignored for detecting "dirtiness"

[jboss-user] [Persistence, JBoss/CMP, Hibernate, Database] - ignoring columns for update detection

2008-10-17 Thread sfisque
i have a set of entities that have two "meta data" columns, namely, "editor" and "updated" which are a UID and a date. we are processing import files and persisting/merging the data that comes in. what i need, if it is possible, is a way to configure JPA (or hibernate directly) to ignore the "

[jboss-user] [Installation, Configuration & DEPLOYMENT] - Re: custom context for EJB deployment

2008-10-02 Thread sfisque
thank you both. your input has been illuminating. i'm sure these are just a case of RTFM, but given our aggressive dev cycle, i've had to cut corners on learning curve wrt to jboss specific details. thank you == stanton View the original post : http://www.jboss.com/index.html?module=bb&op=

[jboss-user] [Installation, Configuration & DEPLOYMENT] - web service endpoint context

2008-10-02 Thread sfisque
i have a web service deployed trivially via ejb3 jax-ws (a SLSB annotated with @WebService). i have had to make use of two jboss specific annotations: @SecurityDomain() @WebContext() my question is, is there a way to duplicate that functionality using xml descriptors, so that i can remove thes

[jboss-user] [Installation, Configuration & DEPLOYMENT] - Re: custom context for EJB deployment

2008-10-02 Thread sfisque
nm, after surfing the jndi using the sun browser, i noticed that the context does not affect the jndi binding. thus i do not need to worry about the jar or ear name. sorry for the confusion. == stanton View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4180119

[jboss-user] [Installation, Configuration & DEPLOYMENT] - Re: custom context for EJB deployment

2008-10-02 Thread sfisque
one last thing. the examples i've seen thus far (of jboss.xml) seem to bind at the "default" location of "bean_name/local" or "bean_name/remote". none of them appear to be specifying the context of the binding. in order to do that, do i need to prepend the binding with a / so that jboss knows

[jboss-user] [Installation, Configuration & DEPLOYMENT] - Re: custom context for EJB deployment

2008-10-02 Thread sfisque
correction, jboss.xml, not ejb-jar.xml View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4180113#4180113 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4180113 ___ jboss-user mail

[jboss-user] [Installation, Configuration & DEPLOYMENT] - Re: custom context for EJB deployment

2008-10-02 Thread sfisque
does jboss support "partial descriptors", wherein, i can just put: | | MyBean | context_name/ejb_binding_name | | and jboss would do the expected ejb3 auto-deploy magic for the remainder of the attributes (injecting from the annotations or defaults), or is it "all or n

[jboss-user] [Installation, Configuration & DEPLOYMENT] - Re: custom context for EJB deployment

2008-10-02 Thread sfisque
that definitely has potential. i was hoping on something more configuration level (xml descriptor, etc.). my goal is to keep the java code container agnostic (all ORM level stuff is done via JPA, all EE bindings are against the sun interfaces, etc.) so, is there a way to do what appears in th

[jboss-user] [Installation, Configuration & DEPLOYMENT] - custom context for EJB deployment

2008-10-01 Thread sfisque
i am deploying a standalone EJB3 service (some SLSBs and SFSBs) as a .jar file using the autodeploy mechanism. what i want to do is change the context the beans are bound to, without changing the jar name. i have looked at repacking it as an .ear file, but, once again, the deployment context i

[jboss-user] [JCA/JBoss] - JCA File stream writer

2008-08-14 Thread sfisque
i've been googling around and cannot find a good tutorial for building a JCA adapter. basically, i need to implement some form of adapter for my beans to generate export files. since EJB frowns upon beans gaining access to "arbitrary" file system resources, i foresee a need to write a JCA that

[jboss-user] [Security & JAAS/JBoss] - Re: To grant access to JBOSS for web client not on the local

2008-07-30 Thread sfisque
when you launched jboss with run.sh, did you give it a bind address via the -b command flag? otherwise it only binds to the loopback (127.0.0.1) and wont be accessible to the outside world. try launching jboss with the following extra parameter: -b [your hostname or external facing ip address]

[jboss-user] [Security & JAAS/JBoss] - Re: JBOSS LDAP Authentification

2008-07-28 Thread sfisque
looks like the principal and credentials for the bind are not set up properly. check the config for login-config.xml for the specific module you are using. == stanton View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4167117#4167117 Reply to the post : http://

[jboss-user] [Security & JAAS/JBoss] - Re: Using database for authorization ONLY?

2008-07-25 Thread sfisque
how did you achieve this? i am trying to do a similar thing: 1) attempt authentication via LDAP (using LdapExtLoginModule). 2) if failure, attempt authentication against the database (for "special case users" ) (using DatabaseServerLoginModule) 3) load the roles from the database regardless of

[jboss-user] [Security & JAAS/JBoss] - Re: JBOSS LDAP Integration

2008-07-25 Thread sfisque
does the jboss-web.xml inside the jmx-console.war have a reference to the security domain? e.g. java:/jaas/ldap-security note the java:/jaas/ in front of the name you gave it in the login-config.xml == stanton View the original post : http://www.jboss.com/index.html?module=bb&op=viewt

[jboss-user] [Security & JAAS/JBoss] - Re: JBOSS LDAP Integration

2008-07-25 Thread sfisque
is this a web app or a web service? if it is a webapp, have you connected the security handler ( in your code, "ldap-security") with the security-constraints in your app. there is documentation for doing this so i will not repeat it here. if it is a web service, make sure the end point knows

[jboss-user] [JBossWS] - standard BASIC AUTH

2008-07-22 Thread sfisque
i am trying to deploy a pojo endpoint webservice facade to an ORM library in JBoss 4.2.2. on Solaris 10. i have the entities deploying fine, and the facades and webservice endpoint are deploying fine as well. all of this is in a .JAR file with no WEB-INF or other webapp kruft. i have been able

[jboss-user] [EJB/JBoss] - Re: persist entity ignores the

2008-07-10 Thread sfisque
posting this so that anyone else searching on this will find what i found: if you have an object with a composite key object, e.g: | @Entity | @IdClass( ThingPK.class ) | @Table( name="Thing" ) | public class Thing | implements Serializable | { | @Id | private String keyO

[jboss-user] [EJB/JBoss] - persist entity ignores the

2008-07-10 Thread sfisque
i'm having an issue with: JBoss 4.2.2-GA Oracle 10g ( 10.2.0.2 - Solaris ) i have a bean that has an attribute: @Id @Column( name= "TAXONOMY_DETAIL", nullable = false ) private String taxonomyDetail; when i go to persist an object of this type, the i get a slew of exceptions in the server.log

[jboss-user] [EJB/JBoss] - Re: ORA-00904 Error while running CMP EJB

2008-07-10 Thread sfisque
i am having a similar issue. i appears that the "name" attribute of my @Column annotation is being ignored and the query is being constructed using the attribute's name and not the name assigned from the annotation. is there a common reason why JPA/Hibernate would ignore the annotation's name

[jboss-user] [JBoss jBPM] - Appfuse db-drop and JBPM

2007-04-25 Thread sfisque
we recently upgraded from 3.1.2 to 3.1.3 and the "db-drop" ant target in AppFuse stopped working. the error centers around the exception: C:\PROJECT\choreo\build.xml:1113: Schema text failed: Could not parse mapping document from file C:\PROJECT\choreo\lib\jbpm-3.1.3\src\bin\org\jbpm\context\e