Re: [JBoss-user] security question: logging out properly - I havea test case

2003-06-05 Thread jfc
Scott M Stark wrote: Send it to me, [EMAIL PROTECTED] Scott Stark Chief Technology Officer JBoss Group, LLC On Tuesday, June 3, 2003, at 08:28 AM, jfc wrote: Hi, I am still trying to find the answer to my previous post to do with why my logged-o

Re: [JBoss-user] security question: logging out properly - I have a test case

2003-06-04 Thread Scott M Stark
Send it to me, [EMAIL PROTECTED] Scott Stark Chief Technology Officer JBoss Group, LLC On Tuesday, June 3, 2003, at 08:28 AM, jfc wrote: Hi, I am still trying to find the answer to my previous post to do with why my logged-out-user requests to a

Re: [JBoss-user] security question: flushed authentication cachere-appearing

2003-06-02 Thread jfc
jfc wrote: jfc wrote: Scott M Stark wrote: From the 3.0.7 release notes: comments: Add a flushAuthenticationCache(String securityDomain, Principal user) operation to allow a single user to be flushed from the authentication cache. Scott Stark Chief Technology Officer JBo

Re: [JBoss-user] security question: removing an individual user fromauthent cache

2003-06-02 Thread jfc
jfc wrote: Scott M Stark wrote: From the 3.0.7 release notes: comments: Add a flushAuthenticationCache(String securityDomain, Principal user) operation to allow a single user to be flushed from the authentication cache. Scott Stark Chief Technology Officer JBoss Group, LL

Re: [JBoss-user] security question: removing an individual user fromauthent cache

2003-05-29 Thread jfc
Scott M Stark wrote: From the 3.0.7 release notes: comments: Add a flushAuthenticationCache(String securityDomain, Principal user) operation to allow a single user to be flushed from the authentication cache. Scott Stark Chief Technology Officer JBoss Group, LLC xx

Re: [JBoss-user] security question: removing an individual user from authent cache

2003-05-28 Thread Scott M Stark
From the 3.0.7 release notes: comments: Add a flushAuthenticationCache(String securityDomain, Principal user) operation to allow a single user to be flushed from the authentication cache. Scott Stark Chief Technology Officer JBoss Group, LLC -

Re: [JBoss-user] security question

2003-03-17 Thread Scott M Stark
ginal Message - From: "Rafal Kedziorski" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]> Sent: Friday, March 14, 2003 2:52 AM Subject: Re: [JBoss-user] security question > now after trying some configurations and adding missed code: > >

Re: [JBoss-user] security question

2003-03-17 Thread Scott M Stark
D]> Sent: Wednesday, March 12, 2003 8:44 AM Subject: Re: [JBoss-user] security question > At 06:42 12.03.2003 -0800, Scott M Stark wrote: > >Security is not enabled unless you set the security-domain element in the > >jboss.xml descriptor as described in the quick start guide. Set

Re: [JBoss-user] security question

2003-03-17 Thread Scott M Stark
Security is unchanged in 3.2 Scott Stark Chief Technology Officer JBoss Group, LLC - Original Message - From: "Corbin, James" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, March 12, 2003 7:21 AM Su

Re: [JBoss-user] security question

2003-03-14 Thread Rafal Kedziorski
now after trying some configurations and adding missed code: MmcmsCallbackHandler callbackHandler = new MmcmsCallbackHandler(principal, password); try { LoginContext loginContext = new LoginContext(securityDomain, callbackHandler); loginContext.login(); ... my beans ... loginContext.l

Re: [JBoss-user] security question

2003-03-13 Thread Rafal Kedziorski
Hi, I tested other configuration. in login-config.xml I defined this: java:/DefaultDS select password from principals where principal=? select role, 'Roles' from roles where principal=? I crea

Re: [JBoss-user] security question

2003-03-13 Thread Rafal Kedziorski
hi, after copying roles.properties and users.properties into default\conf folder and changing in my jboss.xml security-domain to java:/jaas/mmcms I defined in login-config.xml this: flag = "required" /> But after calling my Session Bean I get:

Re: [JBoss-user] security question (with exception)

2003-03-13 Thread Rafal Kedziorski
hi, for testing I'm want user jmx-console with: java:/jaas/jmx-console JBoss start works, but than I get this exception: 15:06:53,313 ERROR [UsersRolesLoginModule] Failed to load users/passwords/role files java.io.IOException: Properties file users.properties not found

Re: [JBoss-user] security question

2003-03-13 Thread Rafal Kedziorski
hi, for testing I'm want user jmx-console with: java:/jaas/jmx-console JBoss start works, but than I get this exception: roles.properties and users.properties are stored in deploy\jmx-console.war\WEB-INF\classes. where can I store my own propertie files after I declare my own entry in login-

Re: [JBoss-user] security question

2003-03-12 Thread Rafal Kedziorski
At 06:42 12.03.2003 -0800, Scott M Stark wrote: Security is not enabled unless you set the security-domain element in the jboss.xml descriptor as described in the quick start guide. Set that and try your example. I don't want use JAAS or have I to use it? security-domain need a JNDI name for JAAS.

RE: [JBoss-user] security question

2003-03-12 Thread Corbin, James
-user] security question Security is not enabled unless you set the security-domain element in the jboss.xml descriptor as described in the quick start guide. Set that and try your example. Scott Stark Chief Technology Officer JBoss Group, LLC

Re: [JBoss-user] security question

2003-03-12 Thread Scott M Stark
Security is not enabled unless you set the security-domain element in the jboss.xml descriptor as described in the quick start guide. Set that and try your example. Scott Stark Chief Technology Officer JBoss Group, LLC - Original Message -

Re: [JBoss-user] Security question

2002-06-18 Thread Cloudor Pu
I guess jboss makes a container for every jar/war which is decided by jboss.xml/jboss-web.xml and its standard ones, each container manages its own security business. regards, Cloudor 在 2002-06-03 一 的 12:40, Ferran Puig 写道: > > I'm using jboss3.0.0-tomcat4.0.3 to test my j2ee application, an

Re: [JBoss-user] Security question on Webapps

2001-09-27 Thread Gerry Duhig
Message - From: "Gerry Duhig" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Thursday, September 27, 2001 12:27 PM Subject: Re: [JBoss-user] Security question on Webapps > It does a separate "login" operation in a different database and writes a > cooki

Re: [JBoss-user] Security question on Webapps

2001-09-27 Thread Gerry Duhig
lt;[EMAIL PROTECTED]> Sent: Thursday, September 27, 2001 12:27 PM Subject: Re: [JBoss-user] Security question on Webapps > It does a separate "login" operation in a different database and writes a > cookie so that some data from that database is available to subsequent > opera

Re: [JBoss-user] Security question on Webapps

2001-09-27 Thread Gerry Duhig
Thursday, September 27, 2001 11:52 AM Subject: Re: [JBoss-user] Security question on Webapps > So what does the "login servlet" do? Sounds more like a front controller > style pattern... is it responsible for directing the request to the > appropriate place? > > chee

Re: [JBoss-user] Security question on Webapps

2001-09-27 Thread Dmitri Colebatch
eed > the login servlet to be run whenever they are accessed. > > Gerry > > - Original Message - > From: "Dmitri Colebatch" <[EMAIL PROTECTED]> > To: <[EMAIL PROTECTED]> > Sent: Thursday, September 27, 2001 8:59 AM > Subject: Re: [JBoss-user]

Re: [JBoss-user] Security question on Webapps

2001-09-27 Thread Gerry Duhig
, the user gets them, but I need the login servlet to be run whenever they are accessed. Gerry - Original Message - From: "Dmitri Colebatch" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Thursday, September 27, 2001 8:59 AM Subject: Re: [JBoss-user] Security questi

Re: [JBoss-user] Security question on Webapps

2001-09-27 Thread Dmitri Colebatch
If you're using security realms and form based login (not sure if you are) then you shouldn't ever directly request the login page, simply request the protected resource and let the contain send the login page as required and then continue the user onto the requested (protected) resource. cheesr

Re: [JBoss-user] security question (network encryption)

2001-04-18 Thread Scott M Stark
You would need to use a custom socket factory that encrypts the data. An SSL based custom socket factory would be one way. See Customizing the JRMPContainerInvoker Socket Factories at: http://www.jboss.org/documentation/HTML/ch10s148.html - Original Message - From: <[EMAIL PROTECTED]> To