[JBoss-user] JBoss Security

2005-12-09 Thread Luis Correia
Hi to you all !  I have to check if the security settings of a JBoss server are appropriated. Can anyone please tell me where should I start?  Is there a security check list ?   Please fell free to send me any documentation that you think it might help. I also have to analyse the security sett

[JBoss-user] JBoss Security + IDS Issue

2004-11-07 Thread Edgar Ankiewsky
Hi Folks... I am with a trouble with org.jboss.security.auth.spi.LdapLoginModule, I am trying to do an authentication and authorization at IDS Server I made de configuration in login-config.xml from my Realm, I Think that all configurations are ok, however I coudn´t to connect due to this erro

[JBoss-user] JBoss Security with IDS (LDAP) problems with ROLES

2004-11-07 Thread Edgar Ankiewsky
Hi Folks... I am with a trouble with org.jboss.security.auth.spi.LdapLoginModule, I am trying to do an authentication and authorization at IDS Server I made de configuration in login-config.xml from my Realm, I Think that all configurations are ok, however I coudn´t to connect due to this erro

[JBoss-user] Jboss Security Issue - With Jetty and TomCat

2002-12-18 Thread Dhiraj Ramakrishnan
Hi all,    I am trying to implement a secured web application in Jboss. I first tried configuring with LDAP ..    but failed . Now i am trying for a simple authentication based on UsersRolesLoginModule.   a)     I have created the users.properties  and roles.properties fil

[JBoss-user] Jboss security with databaselogin module

2002-01-21 Thread wlp
Hi, I'm using JBoss and Tomcat for my web application. I have two stateful session ejbs: InsegnamentiEJB and MatDidEJB. The MatDidEJB is restricted to a security domain, but the other is not. So I did not specify any method permission in the ejb-jar.xml for the first bean, but only for th

[JBoss-user] Jboss security Messages

2001-10-10 Thread Gerry Duhig
When running secured applications under the combined JBoss-Tomcat, the console is full of messages of the form: John Doe is authorised John Doe is authenticated How do I get rid of these, or at least pass them off to a file. Gerry ___ JBos

Re: [JBoss-user] JBoss security

2001-07-23 Thread Wei-ju Wu
Hi, I think that does not quite fit the problem because the client says that the authentication WAS successful, and the server also says that it was successful but the user is NULL ! This is what I cannot understand, somehow the user information is lost Wei-ju > Taken from http://www.jbos

Re: [JBoss-user] JBoss security

2001-07-23 Thread Wei-ju Wu
This seems not to fit the problem. My client tells me that authentication is ok, the container also tells me that authentication is ok, but with user "null". This is what I don't understand, the user information seems to be lost somehow. Wei-ju > Taken from http://www.jboss.org/documentation/H

RE: [JBoss-user] JBoss security

2001-07-23 Thread Maraya Michael
: Sunday, July 22, 2001 12:43 PM > To: [EMAIL PROTECTED] > Subject: Re: [JBoss-user] JBoss security > > I had the some problem, seems there may be a way around it, but i never > figured it out. > > ivan > - Original Message - > From: "Wei-ju Wu

Re: [JBoss-user] JBoss security

2001-07-22 Thread Ivan Novick
I had the some problem, seems there may be a way around it, but i never figured it out. ivan - Original Message - From: "Wei-ju Wu" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Saturday, July 21, 2001 11:43 PM Subject: [JBoss-user] JBoss security > Hi, >

[JBoss-user] JBoss security

2001-07-21 Thread Wei-ju Wu
Hi, I played around with the security in JBoss and did the following (as in the JBoss-JAAS documentation): 1. added this line to the jboss.xml of my beans java:/jaas/hades 2. created a user.properties file admin=admin develop=develop 3. created a roles.properties file admin=administrator

[JBoss-user] Jboss Security Howto example

2001-07-18 Thread Faisal Abdallah
hi dear jboss users In Scott's jass security example I could not access the secureServlet.All what I get is this: [EmbeddedTomcatSX] Bad password for username=null [EmbeddedTomcatSX] LoginException: Password Incorrect/Password Required [EmbeddedTomcatSX] User: null is NOT authenticated then nothi

RE: [JBoss-user] Jboss Security Tutorial

2001-07-12 Thread Nick Taylor
IL PROTECTED] > Subject: Re: [JBoss-user] Jboss Security Tutorial > > > >>>>> "NT" == Nick Taylor <[EMAIL PROTECTED]> writes: > > NT> looks like your client is failing to find > NT> %JBOSS_HOME%\client\auth.conf which is the client login config

Re: [JBoss-user] Jboss Security Tutorial

2001-07-12 Thread Nicolai P Guba
> "NT" == Nick Taylor <[EMAIL PROTECTED]> writes: NT> looks like your client is failing to find NT> %JBOSS_HOME%\client\auth.conf which is the client login config NT> file. i thought the tutorial examples set this but you could try NT> passing the client something like NT> -Djava.security.aut

RE: [JBoss-user] Jboss Security Tutorial

2001-07-12 Thread Nick Taylor
; From: Nicolai P Guba [mailto:[EMAIL PROTECTED]] > Sent: Wednesday, July 11, 2001 6:20 PM > To: [EMAIL PROTECTED] > Subject: [JBoss-user] Jboss Security Tutorial > > > Hmmm, I'm running the security tutorial and I get this exception. Any > ideas as to why? > > +

[JBoss-user] Jboss Security Tutorial

2001-07-11 Thread Nicolai P Guba
Hmmm, I'm running the security tutorial and I get this exception. Any ideas as to why? +++ Running SessionClient with username=scott, password=echoman, example=example1 Exception in thread "main" java.lang.SecurityException: Unable to locate a login configuration at com.sun.security.

Re: [JBoss-user] JBoss security question

2001-05-16 Thread Scott M Stark
; <[EMAIL PROTECTED]> Sent: Monday, May 14, 2001 4:09 AM Subject: [JBoss-user] JBoss security question > Hi there, > I have a question about security in jboss. > When I want to invoke a method on my bean, I get an Illegal access > Exception, because I have not set a in my >

SV: [JBoss-user] JBoss security question

2001-05-15 Thread Lennart Petersson
Message - From: Ralf Metzger <[EMAIL PROTECTED]> To: JBOSS-User List <[EMAIL PROTECTED]> Sent: Monday, May 14, 2001 1:09 PM Subject: [JBoss-user] JBoss security question > Do I > have to code for every method in my ejb-jar.xml?

[JBoss-user] JBoss security question

2001-05-14 Thread Ralf Metzger
Hi there, I have a question about security in jboss. When I want to invoke a method on my bean, I get an Illegal access Exception, because I have not set a in my ejb-jar.xml. I found a posting in the archive, which is saying, that I need for every method I want to access, but I could not find an