[jboss-user] [Security & JAAS/JBoss] - Re: Using database for authorization ONLY?

2008-07-25 Thread sfisque
how did you achieve this? i am trying to do a similar thing: 1) attempt authentication via LDAP (using LdapExtLoginModule). 2) if failure, attempt authentication against the database (for "special case users" ) (using DatabaseServerLoginModule) 3) load the roles from the database regardless of

[jboss-user] [Security & JAAS/JBoss] - Re: Using database for authorization ONLY?

2008-02-22 Thread tresspicher
Thank you so much. You have been very helpful. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4131515#4131515 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4131515 ___ jboss-us

[jboss-user] [Security & JAAS/JBoss] - Re: Using database for authorization ONLY?

2008-02-22 Thread barramundi
If i remember well. when the LdapExtLoginModule flag = "optional" the login will not fail as long as your next login module works to return the roles. Of course your next module's flag need to be 'required' If you really have to modify the ldap login module, just modify the LdapExtLoginModule's

[jboss-user] [Security & JAAS/JBoss] - Re: Using database for authorization ONLY?

2008-02-21 Thread tresspicher
Thanks, that was very useful and exactly what I was looking for. Unfortunately, if I remove the Roles parameters from the LdapExtLoginModule configuration, the login fails. Is there any straightforward way to use LdapExtLoginModule for only the authentication portion of the login and to delegate

[jboss-user] [Security & JAAS/JBoss] - Re: Using database for authorization ONLY?

2008-02-17 Thread barramundi
Try to set under the database login module to bypass authentication useFirstPass If this doesn't work, then you've to modify the db login module to only lookup roles and skip authentication View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4130011#4130011 Reply