[jboss-user] [Security & JAAS/JBoss] - Re: Trust association and subject building for SSO

2008-10-30 Thread [EMAIL PROTECTED]
Use the callback handler to get access to the values. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4185800#4185800 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4185800 ___ j

[jboss-user] [Security & JAAS/JBoss] - Re: Trust association and subject building for SSO

2008-10-28 Thread noorarshad
Anil, While the GenericHeaderbasedAuthenticator can get the UserID/Password from the Request header, how does the CustomLoginModule get access to those values? I'm not seeing the connection. Within a portlet or a servlet, its easy to get at those values (they're in the RenderRequest or Serv

[jboss-user] [Security & JAAS/JBoss] - Re: Trust association and subject building for SSO

2007-11-22 Thread RoshanDawrani
Hi Ganesh, Can you please share how you resolved the authentication issues at web layer as well as the ejb layer in your scenario? I also have to something similar. I have to use a custom SSO solution that sends the authenticated user's name and role as cookies and with that I have to satisfy my

[jboss-user] [Security & JAAS/JBoss] - Re: Trust association and subject building for SSO

2007-01-10 Thread [EMAIL PROTECTED]
You will know whether a particular was needs form or basic auth. Right? In that particular war, under WEB-INF/context.xml, provide an authenticator that extends FormAuthenticator or BasicAuthenticator. http://lists.jboss.org/pipermail/jboss-cvs-commits/2006-September/006921.html That is all you

[jboss-user] [Security & JAAS/JBoss] - Re: Trust association and subject building for SSO

2007-01-10 Thread ganesh_asha
Hi Anil, Thanks a lot for instant reply and your interest. Firstly queries about your first reply Anil: You have talked about web layer and ejb layer. Well yes we do have separate interceptors for both layer but if I use form based authentication for web layer then the same user information is p

[jboss-user] [Security & JAAS/JBoss] - Re: Trust association and subject building for SSO

2007-01-09 Thread [EMAIL PROTECTED]
For the web layer, you can header based authentication. You will need some form of an authenticator. Look here for guidance: http://wiki.jboss.org/wiki/Wiki.jsp?page=GenericHeaderBasedAuthentication Once the login module is invoked, then the JBoss security layer takes care of the subject/cachi

[jboss-user] [Security & JAAS/JBoss] - Re: Trust association and subject building for SSO

2007-01-09 Thread [EMAIL PROTECTED]
Ganesh, let me think on your usecase scenario a bit and suggest something. I have been thinking about the scenario where in users want to plug in Tivoli Access Manager to interoperate with JBoss security infrastructure. So your description is quiet descriptive. If I need some specific details, I