[JBoss-user] [Security & JAAS/JBoss] - Re: Client Certificate Authentication

2005-06-22 Thread nothingman
"rpa_rio" wrote : "nothingman" wrote : "[EMAIL PROTECTED]" wrote : See the verifier attribute of BaseCertLoginModule: | | | | | | http://wiki.jboss.org/wiki/Wiki.jsp?page=BaseCertLoginModule | | | | | Thanx I'll try today. |

[JBoss-user] [Security & JAAS/JBoss] - Re: Client Certificate Authentication

2005-06-17 Thread nothingman
"rpa_rio" wrote : Have you followed the topics: "2 - Client authentication" and "2 - Client authentication with self-signed server cert" to make work as you need? | Yes but I really cannot have the client certificate on the server. We already have a repository with all the users data (name,

[JBoss-user] [Security & JAAS/JBoss] - Re: Client Certificate Authentication

2005-06-17 Thread nothingman
"[EMAIL PROTECTED]" wrote : See the verifier attribute of BaseCertLoginModule: | | http://wiki.jboss.org/wiki/Wiki.jsp?page=BaseCertLoginModule | Thanx I'll try today. -- Nothingman View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p

[JBoss-user] [Security & JAAS/JBoss] - Re: jaas identity replaced

2005-06-17 Thread nothingman
"rpa_rio" wrote : Have you found the way to do it nothingman? No, I'm newbie about jaas and I dind't yet undenderstand how to do it... View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=3881886#3881886 Reply to the post : http://www

[JBoss-user] [Security & JAAS/JBoss] - Re: jaas identity replaced

2005-06-16 Thread nothingman
"amdonov" wrote : I have a custom login module that uses client certificates. It sets the identity to a SimplePrincipal with the CN portion of the certificate. However, in my servlet calls to request.getUserPrincipal().getName() return the entire subject DN. I checked, and the principal is a

[JBoss-user] [Security & JAAS/JBoss] - Client Certificate Authentication

2005-06-16 Thread nothingman
Hi, I've read the ssl how-to http://www.jboss.org/wiki/Wiki.jsp?page=SSLSetup and it seams that, in order to do client authentication, you need to import all the clients certificates on the server. Is it correct ? In our environment we already have users data and credentials stored on a db and