[JBoss-user] [Security JAAS/JBoss] - Adding data to session after login

2006-06-07 Thread pander
Hi, Can anyone give me a best practice answer on adding information to the session immediately after successfully authenticating a user? I am currently using the DatabaseServerLoginModule and have my users and roles etc in a database. If the user has provided a valid username and password

[JBoss-user] [Persistence, JBoss/CMP, Hibernate, Database] - Accessing the session from DatabaseServerLoginModule

2006-06-07 Thread pander
Hi, Does anyone know to get at the session when there is no request object? I have subclassed the DatabaseServerLoginModule and overidden the login() method but I need to get access to the session so that I can put some data in it however, I cannot work out how to do this when there is no

[JBoss-user] [Beginners Corner] - Accessing the session from DatabaseServerLoginModule

2006-06-07 Thread pander
Hi, Does anyone know to get at the session when there is no request object? I have subclassed the DatabaseServerLoginModule and overidden the login() method but I need to get access to the session so that I can put some data in it however, I cannot work out how to do this when there is no

[JBoss-user] [JNDI/Naming/Network] - Accessing the session from DatabaseServerLoginModule

2006-06-07 Thread pander
Hi, Does anyone know to get at the session when there is no request object? I have subclassed the DatabaseServerLoginModule and overidden the login() method but I need to get access to the session so that I can put some data in it however, I cannot work out how to do this when there is no

[JBoss-user] [Security JAAS/JBoss] - Accessing the session from DatabaseServerLoginModule

2006-06-07 Thread pander
Hi, Does anyone know to get at the session when there is no request object? I have subclassed the DatabaseServerLoginModule and overidden the login() method but I need to get access to the session so that I can put some data in it however, I cannot work out how to do this when there is no

[JBoss-user] [Security JAAS/JBoss] - Re: Accessing the session from DatabaseServerLoginModule

2006-06-07 Thread pander
Hi, As usual junkie you da man!!! Perfect solution for me as the user would have logged in at the point I wanted to access the session it's basically a bit at the end of my overidden login() method that only gets executed if the user has logged in successfully. Cheers! Paul. View

[JBoss-user] [Beginners Corner] - Intercepting Request Cycle

2006-06-02 Thread pander
Hi, Does anyone know if there is a way to execute a piece of your own code every request that is made to the jboss application server? I'm guessing this would probably be in the form of a valve or filter... perhaps even a requestFilter if such a thing exists?? I want to perform an audit trail

[JBoss-user] [Security JAAS/JBoss] - Am I missing a trick?

2006-05-31 Thread pander
Hi, I am running jboss 4.04 and have implemented form based authentication using the DatabaseServerLoginModule. Everything is working fine. However, once my user has logged in I need to be able to access the user's username and password. I have checked through lots of the posts on here and

[JBoss-user] [Security JAAS/JBoss] - Re: Am I missing a trick?

2006-05-31 Thread pander
hi j2ee_junkie, Are you able to offer any further assistance? I am not exactly sure what I am looking for in the jmx-console... it's a little confusing. I can see there are some links under jboss.web that contain the word ExtendedFormAuthenticator and also my webapp name AMI The links are:

[JBoss-user] [Security JAAS/JBoss] - Re: Am I missing a trick?

2006-05-31 Thread pander
Ok, I found what you suggested to look for and there were 4 links there. jboss.web:type=Valve,name=JaccContextValve,path=/AMI,host=localhost jboss.web:type=Valve,name=ExtendedFormAuthenticator,path=/AMI,host=localhost

[JBoss-user] [Security JAAS/JBoss] - Re: Am I missing a trick?

2006-05-31 Thread pander
[org.jboss.web.tomcat.security.FormAuthenticator] Authenticating username 'pander' | 2006-05-31 17:35:52,687 DEBUG [org.jboss.security.plugins.JaasSecurityManager.AMIRealm] CallbackHandler: [EMAIL PROTECTED] | 2006-05-31 17:35:52,687 DEBUG

[JBoss-user] [Security JAAS/JBoss] - Re: Am I missing a trick?

2006-05-31 Thread pander
Anil, Thank you for you help unfortunately though I think it is not working correctly as I get a series of errors when starting my server to do with LOG4J. I think this is a known bug... it happens on a straight out the box download of jboss 4.04... which is what I am running. The error

[JBoss-user] [Security JAAS/JBoss] - Re: Am I missing a trick?

2006-05-31 Thread pander
Hi junkie, Sorry... didn't see your post with the 'a' and 'b' parts... So, are you saying then that the ExtendedFormAuthenticator will ONLY put j_username and j_password in the session if the user is redirected to the login error page? What is the point of that? That's not how I interpretted

[JBoss-user] [Security JAAS/JBoss] - Re: Am I missing a trick?

2006-05-31 Thread pander
Guys, This is starting to drive me crazy now, big time! (j2ee_junkie) - YES, I NEED A WAY TO ACCESS THE USERNAME AND PASSWORD AFTER A USER HAS SUCCESSFULLY LOGGED IN !! Here's the state of play I now have both the ExtendedFormAuthenticator and the FormAuthValve defined in my apps

[JBoss-user] [Security JAAS/JBoss] - Re: Am I missing a trick?

2006-05-31 Thread pander
wrote : 2006-05-31 22:33:10,843 DEBUG [org.jboss.web.tomcat.security.FormAuthenticator] Authenticating username 'pander' | 2006-05-31 22:33:10,843 TRACE [org.jboss.web.tomcat.security.JBossSecurityMgrRealm] Begin authenticate, username=pander | 2006-05-31 22:33:11,359 DEBUG

[JBoss-user] [Security JAAS/JBoss] - Accessing j_username and j_password

2006-05-30 Thread pander
Hi, I have read through most of the posts on this forum concerning how one would go about getting access to the j_username and j_password values of a logged in user. I followed the instructions here: http://wiki.jboss.org/wiki/Wiki.jsp?page=ExtendedFormAuthenticator An example of how I am

[JBoss-user] [Security JAAS/JBoss] - Re: Accessing j_username and j_password

2006-05-30 Thread pander
Forgot to mention, I am also running JBOSS 4.03 SP1 if that makes a difference. :-) View the original post : http://www.jboss.com/index.html?module=bbop=viewtopicp=3947577#3947577 Reply to the post : http://www.jboss.com/index.html?module=bbop=postingmode=replyp=3947577

[JBoss-user] [Security JAAS/JBoss] - Re: Setup Configuration of JBOSS (HTTPS)

2006-05-26 Thread pander
Thanks a lot, Got it working no probs! Cheers ;-) View the original post : http://www.jboss.com/index.html?module=bbop=viewtopicp=3946835#3946835 Reply to the post : http://www.jboss.com/index.html?module=bbop=postingmode=replyp=3946835

[JBoss-user] [Security JAAS/JBoss] - Setup Configuration of JBOSS (HTTPS)

2006-05-25 Thread pander
Hi all, Does anybody know if there is a step by step guide on exactly how to setup JBOSS with HTTPS instead of the standard HTTP? Kind Regards, Paul. View the original post : http://www.jboss.com/index.html?module=bbop=viewtopicp=3946646#3946646 Reply to the post :