[JBoss-user] [Security & JAAS/JBoss] - Re: In valve getRemoteUser value returned as NULL always

2005-08-23 Thread juserp
Scott, I realised that JBossGenericPrincipal class is a private class.How could I set my principal to this type? In current LoginModules like UserRoles etc , I see that the prinicipal is added to subject as SimplePrincipal. Where in JBOSS code do we set it to type JBossGenericPrincipal ? F

[JBoss-user] [Security & JAAS/JBoss] - Re: JBOSS basic auth login popped even after using only Cust

2005-08-22 Thread juserp
my loginmodule code is: /* * Test OSSO LoginModule */ package my.sso; import java.security.Principal; import java.util.Map; import java.security.Principal; import java.security.acl.Group; import javax.security.auth.Subject; import javax.security.auth.callback.Callback; import javax.security.a

[JBoss-user] [Security & JAAS/JBoss] - Re: In valve getRemoteUser value returned as NULL always

2005-08-22 Thread juserp
Pointers to do this would be really helpful. Thanks, View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=3891036#3891036 Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=3891036 -

[JBoss-user] [Security & JAAS/JBoss] - Re: JBOSS basic auth login popped even after using only Cust

2005-08-22 Thread juserp
Since the AuthenticatorBase was invoking the BASIC logging, I tried setting the request.userPrincipal in my valve. After doing this I now do not get the login prompt, however it fails with following exception: 2005-08-22 19:14:57,688 DEBUG [org.apache.catalina.authenticator.AuthenticatorBase] S

[JBoss-user] [Security & JAAS/JBoss] - JBOSS basic auth login popped even after using only Custom L

2005-08-21 Thread juserp
Hello, I have implemented a Custom loginModule that sets the Subject with Principal and roles. In config file, for the security domain used by the application I have set only this Login Module and it's set to REQUIRED. However, after returning from my Login module I do not get direct access to

[JBoss-user] [Security & JAAS/JBoss] - Re: Exception thrown whil using CustomLoginModule

2005-08-19 Thread juserp
Thanks, However, am using JVM1.4.2 . this doesn't seam to be the problem. Any other pointers/help is appreciated. View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=3890735#3890735 Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=re

[JBoss-user] [Security & JAAS/JBoss] - Re: Exception thrown whil using CustomLoginModule

2005-08-16 Thread juserp
Can any one help me by suggesting as to what could be going wrong here? View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=3890148#3890148 Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=3890148 -

[JBoss-user] [Security & JAAS/JBoss] - Exception thrown whil using CustomLoginModule

2005-08-11 Thread juserp
I programmed a custom login module for JBoss (it extends org.jboss.security.auth.spi.AbstractServerLoginModule) and defined in login-config.xml: the flow here is: I have valve: 1. reads REMOTE_USER 2. OSSOUsernameHandler handler = new OSSOUsernameHandler

[JBoss-user] [Security & JAAS/JBoss] - Re: In valve getRemoteUser value returned as NULL always

2005-08-10 Thread juserp
JBOSS Verison: jboss-4.0.2 release for the J2EE? 1.4 codebase embedded tomcat version: 5.5.9 Stack Trace is: 16:00:34,759 ERROR [CoyoteAdapter] An exception or error occurred in the container during the request processing java.lang.NullPointerException at org.jboss.web.tomcat.security.JB

[JBoss-user] [Security & JAAS/JBoss] - Re: In valve getRemoteUser value returned as NULL always

2005-08-10 Thread juserp
I set tomcatAuthentication=false, and able to get the REMOTE_USER value. However , get NULL pointer exception at org.jboss.web.tomcat.security.JBossSecurityMgrRealm.hasRole. Could any one provide pointers , how to handle authorization in this case.What would be a workaround to set roles so that

[JBoss-user] [Security & JAAS/JBoss] - In valve getRemoteUser value returned as NULL always

2005-08-09 Thread juserp
I have JBOSs apllication first imtercepted by a Apache auth module that does external authentication and sets Remote User. I have written a valve that would check for this , so that based on this value I can further decide that Authentication flow.However the valve always returns NULL value. Any

[JBoss-user] [Security & JAAS/JBoss] - Acheive SSO between external Application and JBOSS Applicati

2005-08-02 Thread juserp
I have a requirement where in the JBOSS application should be able to look for a header variable[This would contain the username of the authenticated user by th external system ], trust this user and not prompt for re-authentication. If the HEADER-VAR is not present the authentication should be