[JBoss-user] [Security & JAAS/JBoss] - Re: JaasSecurityManager and caching of X509Certificate chain

2004-08-04 Thread RolfArne
Thanks. Yes that works correctly with X509Certificate arrays. View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=3844116#3844116 Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=3844116 ---

[JBoss-user] [Security & JAAS/JBoss] - Re: JaasSecurityManager and caching of X509Certificate chain

2004-08-04 Thread RolfArne
I've submitted a patch for this, see https://sourceforge.net/tracker/index.php?func=detail&aid=1003258&group_id=22866&atid=376687 View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=3844104#3844104 Reply to the post : http://www.jboss.org/index.html?module=bb&o

[JBoss-user] [Security & JAAS/JBoss] - JaasSecurityManager and caching of X509Certificate chains

2004-08-03 Thread RolfArne
Hi, I have a Login module that I use with SSL client certificates. The log from the module suggests that it is invoked by the JaasSecurityManager on every client call, even when the client (and principal) is previously authenticated, and the principal is in the cache. Other username/password ba

[JBoss-user] [Security & JAAS/JBoss] - Setting CertificatePrincipal in JBoss 3.2.5

2004-08-03 Thread RolfArne
Hi, I wonder how I can set the certificatePrincipal attribute on the JBossSecurityMgrRealm used for web applications in Jboss 3.2.5. I've tried to add a Realm element inside both the Engine and Host element to the server.xml-file in jbossweb-tomcat50.sar, but no luck. That is, an instance of th

[JBoss-user] [Security & JAAS/JBoss] - Re: Custom Login using SSL

2004-05-13 Thread RolfArne
Here is a method you could use inside a login module. It assumes you extend the AbstractServerLoginModule. | private Object[] getLoginInfo() throws LoginException { | | if (callbackHandler == null) { | log.warn("No callbackHandler available"); | throw n

[JBoss-user] [Security & JAAS/JBoss] - Re: SSL configuration

2004-04-18 Thread RolfArne
A related question: Can I configure a HttpInvoker to use SSL? View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=3831303#3831303 Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=3831303 ---