I know there are some security implications on doing this...  But here is what I want 
to do:

1) Modify or subclass the LDAP LoginModule so that the password used to login is 
stored in a location that can be retrieved later on.
2) I would prefer to store the password in a location that only allows JBoss 
applications to have access to it.  (Possibly in JNDI)
3) When someone connects to my EJB retrieve the password that was used to login and 
use it to call another application. (The actual user & password is required to contact 
this second application.)

Note that the second application will most likely be a web service...  The web service 
may or may not be running within JBoss.  (But both of the applications will be 
authenticated against the same LDAP.)

Anyone have an example of doing something like this?  Or have any suggestions on 
where/how to store the password?

Thanks


View the original post : 
http://www.jboss.org/index.html?module=bb&op=viewtopic&p=3850573#3850573

Reply to the post : 
http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=3850573


-------------------------------------------------------
This SF.net email is sponsored by: IT Product Guide on ITManagersJournal
Use IT products in your business? Tell us what you think of them. Give us
Your Opinions, Get Free ThinkGeek Gift Certificates! Click to find out more
http://productguide.itmanagersjournal.com/guidepromo.tmpl
_______________________________________________
JBoss-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/jboss-user

Reply via email to