.
What specifically is not working?
-AP_
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Jesse Schoch
Sent: Friday, January 11, 2002 11:21 AM
To: Orion-Interest
Subject: can't figure out this one. need help: logging, reloading custom
usermanager class
ok so i tried to write a custom usermanager but it will not work and will
not give me any clue as to why. I have followed the directions on the
support site, and have turned on -verbosity 10, i think i may have had it
wrong the first time i compiled it but i don't know how to find out
port.
_
James Tucker
Senior Software Engineer
Viewlocity
Dallas, TX
[EMAIL PROTECTED]
-Original Message-
From: The elephantwalker [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, October 23, 2001 1:27 PM
To: Orion-Interest
Subject: jaas and usermanager
Group,
Is anybody interested
Yes i am interested in using that. I have used the Encryption of
password with the Usermanager.
regards,
vipul
-Original Message-
From: The elephantwalker [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, October 23, 2001 11:27 AM
To: Orion-Interest
Subject: jaas and usermanager
Group,
Is
Group,
Is anybody interested in a usermanager that uses jaas plugin's? This way we
could just use the jaas properties files to control what kind-of login
service is allowedand if jaas is used out of the box, NTLogin (or os
login), Kerberos, SmartCard could be used.
regards,
all inline.
> -Original Message-
> From: Curt Smith [mailto:[EMAIL PROTECTED]]
> Sent: Lunes, 03 de Septiembre de 2001 9:31
> To: Orion-Interest
> Subject: RE: Additional invocations to the UserManager
>
>
> I bounced the client, deleted cache/cookies and sti
I bounced the client, deleted cache/cookies and still saw the auto-login
behavior on every request to my UserManager without seeing the login
dialogue
the 2nd--Nth time. So how could the client be silently supplying the
user/pass on every request??? Still looks like the container is calling
Nope. This is browser, not orion behavior. It complies to the HTTP specs.
> -Original Message-
> From: Curt Smith [mailto:[EMAIL PROTECTED]]
> Sent: Sábado, 01 de Septiembre de 2001 10:43
> To: Orion-Interest
> Subject: RE: Additional invocations to the UserManager
>
&
I saw this too and went to FORM authentication and don't see this
anymore.
I still use UserManager to receive the user/passwd from the FORM
via the Container, but I don't see the UserManager calls on every
request.
Based on this, I feel it's a bug in orion that BASIC behaves
001 18:11
> To: Orion-Interest
> Subject: Additional invocations to the UserManager
>
>
>
> I have written a custom UserManager and have setup
> security-constraints
> against several JSPs in my application...everything works
> great..almost.
> I'm n
I have written a custom UserManager and have setup security-constraints
against several JSPs in my application...everything works great..almost.
I'm noticing that after the user has successfully been authenticated that my
UserManager is being recalled for every page request made by the
inline
> -Original Message-
> From: Curt Smith [mailto:[EMAIL PROTECTED]]
> Sent: Martes, 28 de Agosto de 2001 18:04
> To: Orion-Interest
> Subject: UserManager / BASIC auth; orion caching
> username/password
>
>
> I've got a confusing issue th
hould be true for Basic authentication. If its not, its a bug.
Regards,
the elephantwalker
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Curt Smith
Sent: Tuesday, August 28, 2001 3:04 PM
To: Orion-Interest
Subject: UserManager / BASIC auth; orion ca
I've got a confusing issue that I'm observing:
I'm using BASIC authorization and installed my subclass of AbstractUserManger into
orion-application.xml.
I get the HTTP challeng login dialogue the first time, and get into the protected site
when my um.checkPassword ( user, pw ) returns true.
Pro
Group,
I just logged bug 518, a request for enhancement.
One issue for usermanager's is many of the problems developers have is with
deployment and not actually coding with a usermanager. There is currently no
logging mechanism for a usermanager, so if we want to debug our deployment,
we
You need two records for the multiple groups; they're not comma-delimited.
On Thu, 14 Jun 2001, Lawrence Fry wrote:
> Has anybody used more than one group outside of the defaultGroups for a
> usermanager?
>
> I have found that if you use EJBUserManager, and use more than o
Has anybody used more than one group outside of the defaultGroups for a
usermanager?
I have found that if you use EJBUserManager, and use more than one group in
the EJBUser_groups table..
username='somename'
value='my-admins,my-users'
Only the first group in the list is u
me instead
of having to decompile all orion to find out how the GHU"$%"@ it works.
Regards,
JP
> -Original Message-
> From: Alex Paransky [mailto:[EMAIL PROTECTED]]
> Sent: Monday, April 16, 2001 4:47 PM
> To: Orion-Interest
> Subject: RE: How to enable UserManag
nking back to my hole, tail between my legs.{{
Michael J. Cannon
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On Behalf Of Michael J.
> Cannon
> Sent: Tuesday, April 17, 2001 1:22 AM
> To: Orion-Interest
> Subject: RE: How to enable UserMan
]On Behalf Of Jeff Schnitzer
> Sent: Monday, April 16, 2001 11:12 PM
> To: Orion-Interest
> Subject: RE: How to enable UserManager support for arbitrary user...
>
>
> Given that he has a smart/fat client, I don't think the web form is the
> way to go. It's a square pe
running under Orion, and VB will do all the
client work for you.
Jeff
>-Original Message-
>From: Hani Suleiman [mailto:[EMAIL PROTECTED]]
>Sent: Monday, April 16, 2001 2:07 PM
>To: Orion-Interest
>Subject: RE: How to enable UserManager support for arbitrary user...
>
>
ch I am not
sure about is 1c... >
> Thanks.
> -AP_
>
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On Behalf Of Juan Lorandi
> (Chile)
> Sent: Monday, April 16, 2001 11:26 AM
> To: Orion-Interest
> Subject: RE: How to enable UserMan
documented anywhere on
the Orion site? If not, can you give a little more detail on this field.
What type of object should be stored into this attribute. As I understand
it, after an object is stored into this "user" attribute in the session,
Orion will use a UserManager to validate an
is renders Orion's J2EE security useless (Orion's
HTTPSession has a User field where it stores either null (not authenticated)
or a User reference to know the session Identity.
2. How are you authenticating a user? I presume you aren't right now. I
would go with this:
a. A
essage-
>From: Alex Paransky [mailto:[EMAIL PROTECTED]]
>Sent: Saturday, April 14, 2001 10:03 PM
>To: Orion-Interest
>Subject: RE: How to enable UserManager support for arbitrary user...
>
>
>Here is the problem that I am not sure how to really fix.
>
>Our EJB applicati
MAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Jeff Schnitzer
Sent: Friday, April 13, 2001 10:09 PM
To: Orion-Interest
Subject: RE: How to enable UserManager support for arbitrary user...
I suggest using an MVC (aka "Model 2") approach, separating your view
from your controller. On
happer if you use an MVC appraoch, trust me. The J2EE
automatic form-based authentication is very crude and fails to
accomodate simple use cases like automatically logging in new users.
You might want to look at WebWork:
http://www.sourceforge.net/projects/webwork.
BTW, if you use the Or
stored in there, and execute this call
> with the user.login and user.password?
>
> Thanks.
> -AP_
>
> -Original Message-
> From: Tim Endres [mailto:[EMAIL PROTECTED]]
> Sent: Friday, April 13, 2001 3:04 PM
> To: Orion-Interest
> Cc: Alex Paransky
> Subject
the userid from a servlet or jsp. This is the safest way to get the
userid into a web page. Somehow, I think manipulating the usermanager from
within a jsp offers a security hole. If anybody ever gained access to a
jsp, they could copy the code for access to the usermanager, modify it so
that an
Sent: Friday, April 13, 2001 3:20 PM
To: Orion-Interest
Subject: RE: How to enable UserManager support for arbitrary user...
Tim, this IS what I am looking for, but does it mean that I need to put this
into every .JSP page that I have? Then, somehow (according to J2EE spec)
Orion will forwa
enable UserManager support for arbitrary user...
Is this what you are looking for?
RoleManager roleMgr = (RoleManager)
(new InitialContext()).lookup( "java:comp/RoleManager" );
roleMgr.login( "user", "pass" );
Unfortunately, I think that can only run i
er a servlet, we used to use a new InitialContext on
every servlet request and set the appropriate JNDI properties for each
InitialContext construction.
tim.
> We have developed a web application with our own user/group schema.
> Creating a UserManager to map our schema seems pretty trivial
We have developed a web application with our own user/group schema.
Creating a UserManager to map our schema seems pretty trivial. What we are
NOT clear on is how to tell Orion that a particular user has logged in.
For example, we start our application with a LOGIN.JSP page, which accepts
user
This may be a rather simple question, but not having dealt with Orion's
UserManager system before I am having difficulties.
I have written a custom UserManager that authenticates against an LDAP
server. I would like to be able to setup virtual hosts that can use the
same LDAPUserManage
hi
aum = (EmployeeImplHome)
ctx.lookup("mps.esrr.security.ejb.EmployeeImpl");
work :)
--
/chd
Have fun!
- Original Message -
From: "Sergei Batiuk" <[EMAIL PROTECTED]>
To: "Orion-Interest" <[EMAIL PROTECTED]>
Sent: 30 ÍÁÒÔÁ 2001 Ç. 0:20
Sub
Hi,
I have developed my own implementation of the
UserManager, which is actually a wrapper around an appserver-independent user
manager. I believe, it's written correctly (i.e it implements
com.evermind.security.UserManager). But when I try to deploy it, the constructor
and the
]
[mailto:[EMAIL PROTECTED]]On Behalf Of Michael Gantz
Sent: Saturday, March 17, 2001 7:23 AM
To: Orion-Interest
Subject: Re: Custom UserManager - Problem Solved!
I finally got my custom user manager working. I put an empty
principals.xml in my application, it only had enough tags to meet the
DTD
all the suggestions and was able to incorporate some of them
in my code already!
Thanks for the help
>>>>>>>>>>>>>>>>>> Original Message <<<<<<<<<<<<<<<<<<
On 3/16/01, 3:39:38 PM, Ma
I'll try again because I don't think I made myself clear when I explained
it. I'm using basic authorization with the browser. My custom user
manager gets constructed and the init method gets called (I logged those
events to a file from the class).
But here is the kicker, the "getUser" method
Don't user setParent. Just leave it as an empty method. I do that and it
works just fine.
Matt
On Fri, 16 Mar 2001, Michael Gantz wrote:
> Slight progress update. I'm convinced now I don't have something
> configured correctly. In my UserManager, when setParent
Good point. However, our User and Group EJBs are exclusively CMP - we don't
get any DataSources outside of the constructor or inside it. We'll give the
delegate-to-parent-UserManager trick a shot, but I still think that such
things should be unnecessary. Why should the fact that a cl
I have a fully functional home-brewn imp. of UserManager and I do nothing in
the setParent method.
Just for you to know,
HTH
JP
> -Original Message-
> From: Michael Gantz [mailto:[EMAIL PROTECTED]]
> Sent: Friday, March 16, 2001 9:24 AM
> To: Orion-Interest
> Subj
if I do a
parent.setParent(this) in my UserManagers setParent method that things
actually work correctly, I have no idea why this is. When my setParent
method gets called it is passed an XMLUserManager as the parent, I think
what is happening is, with the principals file gone, that the real
UserManager sees m
eter Pontbriand"
com> cc:
Sent by: Subject: Re: Custom
UserManager.
On 16 Mar 2001, at 10:14, Peter Pontbriand wrote:
> The DataSourceUserManager that is provided with Orion exhibits this same
> problem - the principals.xml must still contain the group declarations.
> We've created out own custom UserManager that uses our User and Group EJBs.
>
The DataSourceUserManager that is provided with Orion exhibits this same
problem - the principals.xml must still contain the group declarations.
We've created out own custom UserManager that uses our User and Group EJBs.
This custom user manager will work fine for EJB and Web modules wi
Slight progress update. I'm convinced now I don't have something
configured correctly. In my UserManager, when setParent is called I did
a setParent(this) on the parent that was passed in. After that, my
manager started receiving method calls to things like getUser. I also
notic
40 AM
To: Orion-Interest
Subject: Custom UserManager.
Server : Orion-1.4.5
I've created a custom UserManager and referenced it in application.xml,
I've taken out the principal tags in all the other files. Here is my
problem: my custom user manager loads up and the init method gets called
b
are in the
database. Maybe it is something related somehow and you could try it out?
Christian
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On Behalf Of Michael Gantz
> Sent: Thursday, March 15, 2001 11:40 PM
> To: Orion-Interest
>
Server : Orion-1.4.5
I've created a custom UserManager and referenced it in application.xml,
I've taken out the principal tags in all the other files. Here is my
problem: my custom user manager loads up and the init method gets called
but that's it. The server never calls get
The easiest way is to use the EJBUser usermanager. You will need to refer to
the ejb in your ejb-jar.xml. There is an orion security adapter available
for the petstore example, and this works well with the EJBUser usermanager
as long as you have the entity bean reference as noted below.
Of
Could anyone please explain how to create a custom user manager for Orion?
What is the way to associate the users and groups in the database with the
roles and principal of the orion?
This message is being sent on the behalf of Ernie Phelps at parts.com since it keeps
rejecting his mails:)
--
I am having difficulties getting a custom user manager to work. Here are the steps I
have taken:
Implemented User (as TMUser)
Implemented Group (as TMGroup
bc/OraclePooledDS'. My interpretation of
> orion's error message is that you don't have a valid jndi context as in
> comp:java/env... available. This sounds reasonable to me since you are
> plugging in the usermanager as part of the container instead of running it
> a
tion of
orion's error message is that you don't have a valid jndi context as in
comp:java/env... available. This sounds reasonable to me since you are
plugging in the usermanager as part of the container instead of running it
as an application within the container.
Let me know what y
The problem lies in getting a connection to the database. You can only get
a connection to the database using JNDI in the constructor of the
UserManager. Nowhere else. This is supposed to be fixed in 1.4.6, but I
haven't had a chance to test it. The limitation to this is that the
conne
We have successfully implemented a custom UserManager which acts as a
wrapper around an entity bean that contains user information such as
userid and password. The UserManager works great for authentication
with our web application. However, when we try to authenticate a
user via a stand
poster, the atm example demonstrated this, but I
must have a different version of the atm example.
"
Finally, a tutorial for usermanager stuff was started over
at Orionsupport.com, but never finished. Is there a new version of
this? Here is the url I have: http://
different version of the atm example.
"
Finally, a tutorial for usermanager stuff was started over
at Orionsupport.com, but never finished. Is there a new version of
this? Here is the url I have: http://www.orionsupport.com/tutorials/usermanager/intr
the User
Manager. When I add the following to my orion-application.xml I get the
NamingException when it is deployed. What is the trick to doing
this? According to one poster, the atm example demonstrated this, but I
must have a different version of the atm example.
"
Finally,
We have been using a custom UserManager for sometime now in our web
application. It works extremely well, and is very easy to implement.
However, we are now in need of some stand alone applications that need
access to our EJB's. When we attempt to access an EJB, we are having
problems. I
I've been looking for some details, maybe a tutorial on the use of the
UserManagers provided by orion - I'm currently evaluating different ways of
handling user, groups and application-specific Rights and stumbled across
the EJBUserManager. Anybody ever used this stuff in a production enviroment
(
Hi there
We're getting a deadlock during the creation of a UserBean. We're using the
Orion UserManager. In the ejbPostCreate Method of the UserBean we do a..
User caller =
userhome.findByUsername(context.getCallerPrincipal().getName());
..that causes the freeze.
The reason fo
Can someone kindly explain to me what is the purpose of using the security
roles, user managers and all that in the descriptor files? I quite honestly
don't understand it. I mean..if I have a web-app that has a login screen
that uses EJB to look up a login name and password in a database to allow
Can anyone tell me what the difference is between User Manager groups and
Role Manager roles?
It seems that I need to create groups in order to get roles to work, and
that allows me to define permissions on the group. What is the point of
this? Why not just have users and roles and one API? I'm su
Title: RE: UserManager shutdown hook?
What do you gain by doing it this way? Can you update your
cache when getUser() is called, and reap any idle users
then? What is this cache used for? What kind of user manager
are you using?
Thank's
Andrej
> -Original Message
960 Corporate Campus Drive, Suite 2000Louisville, KY 40223 @Sent by: [EMAIL PROTECTED]11/13/2000 08:11 PM NSTPlease respond to Orion-Interest To: Orion-Interest <[EMAIL PROTECTED]> cc: bcc: Subject: RE: UserManager shutdown hook? what is a 'raper' thread??. . .. ...
Title: RE: UserManager shutdown hook?
what
is a 'raper' thread??
.
.
.
.
.
.
.
.
.
.
Now
I'm sorry I asked ;-)
JP
-Original Message-From: Andrej Gabara
[mailto:[EMAIL PROTECTED]]Sent: Lunes, 13 de No
|
| cc:
|
| Subject: RE: UserManager shutdown hook?
|
>|
How do yo
Title: RE: UserManager shutdown hook?
How do you determine expired user references? Will you be
able to cleanup stateful session beans that were in use by
that user?
Thank's
Andrej
> -Original Message-
> From: Robert Krueger [mailto:[EMAIL PROTECTED]]
> Sent: Monda
t;[EMAIL PROTECTED]>
|
| cc:
|
| Subject: Re: User
At 08:41 13.11.00 , you wrote:
>We have implemented our own usermanager, and it all works great. But we
>would like to know when the server is restarted at least, if not shutdown.
>We start up a 'raper' thread, which is responsible for cleaning up expired
>user referenc
We have implemented our own usermanager, and it all works great. But we
would like to know when the server is restarted at least, if not shutdown.
We start up a 'raper' thread, which is responsible for cleaning up expired
user references. When the orion is restarted, it creates a ne
We have implemented our own usermanager, and everything works as expected,
except logging. After logging in using FORM based authentication,
we can successfully perform a 'request.getRemoteUser()' call to retrieve
the users login information. I would expect that if the server
I'm writing a custom user manager for Orion.
I need to access a file in the J2EE application structure
(such as app/META-INF/um.xml or app/webapp/WEB-INF/um.xml)
that contains additional settings for the user manager for
a specific application.
How can I find the application root (or the deploym
Brian:
Add the following to orion/config/principals.xml:
gold_customer
customer
o add a user using the "New User"
part of the PetStore:
"com.evermind.server.rmi.OrionRemoteException: Transaction was rolled back:
java.lang.RuntimeException: NamingException: system/UserManager not found at
ShoppingClientController_StatefulSessionBean
Hi,
Isn't JAAS supposed to address this area?
Magnus Stenman wrote:
> The PetStore and the ATM both use the XMLUserManager (implicit default), ie
> principals.xml on our live site. If you need a clustered version you need to
> pick one of the other usermanagers provided (ie DataSourceUserManage
Kirk" <[EMAIL PROTECTED]>
To: "Orion-Interest" <[EMAIL PROTECTED]>
Sent: Friday, June 23, 2000 4:47 PM
Subject: RE: Pet Store and UserManager problems
> I noticed that the Orion Team has the UserManager implemented on their web
> site demo of the PetStore. Any cha
k
> > Sent: Friday, 23 June 2000 10:34
> > To: Orion-Interest
> > Subject: RE: Pet Store and UserManager problems
> >
> >
> > Brian:
> >
> > I'm also looking at the same issue. I've search the
> > archive/FAQ's and there
> > are a f
Hi everyone,
Since there is interest, I have packaged up my UserManager implementation
and attached it to this email.
A couple of notes:
My code makes use of the IBM Log4J logging utility and some JDBC wrapper
classes that I wrote, but I didn't include these classes in the jar.
Inside th
>>From the archive I understand some folks were
>>trying to roll their own (Implementation of UserManager):
I've been able to successfully roll my own UserManager which is backed by a
database and has password encryption. It's missing the ability to
add/delete groups, and
way (Ldap,
NTGroups, XML etc)
Mike
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On Behalf Of Kalvar, Kirk
> Sent: Friday, 23 June 2000 10:34
> To: Orion-Interest
> Subject: RE: Pet Store and UserManager problems
>
>
> Brian:
>
> I
I noticed that the Orion Team has the UserManager implemented on their web
site demo of the PetStore. Any chance of getting some feedback from them on
how they it up?
Kirk S. Kalvar, Software Engineer
DRS Electronic Systems Group
re Engineer
DRS Electronic Systems Group
> -Original Message-
> From: Brian Cunningham [SMTP:[EMAIL PROTECTED]]
> Sent: Thursday, June 22, 2000 18:13
> To: Orion-Interest
> Subject: Pet Store and UserManager problems
>
> RE login in the petstore:
>
> It
n estore: Error initializing userManager
'com.evermind.
ejb.EJBUserManager': NamingException: com.evermind.ejb.EJBUser not found" when I
try it.
I need to understand how to get a UserManger functioning for the petstore...any
help on this would be appreciated.
Related to this I may also
Hi, Pedro (o deberia decir hola!)
I think your method is:
getGroups(int start, int max) and returns java.utils.List
in com.evermind.security.UserManager class
You can have a look at orion/docs/api/index.html ---> UserManager
(Where can you from, Pedro? I think you are also span
Hi,
How can I get the members of a group using Orion APIs ?
Regards
> Trying to install EJBUserManager:
>
> error message: Error instantiating application 'xx' at file:xx.ear: Error
> initializing userManager 'com.evermind.ejb.EJBUserManager' :
> NamingException: com.evermind.ejb.EJBUser not found
You also need to deploy the
Trying to install EJBUserManager:
error message: Error instantiating application 'xx' at file:xx.ear: Error
initializing userManager 'com.evermind.ejb.EJBUserManager' :
NamingException: com.evermind.ejb.EJBUser not found
orion-ap
as
primary key you can add a "findByUsername" method in the home interface
which will in that case be used.
The EJBUserManager creates the InitialContext instance in the init(...)
method (where the context exists). There should "always" be a context when
the usermanager is cal
I would like to be able to log on to an Orion web-application by verifying
the password against an encrypted value (as in a regular unix password
file). It seems that to do this I must provide custom implementations of
the UserManager and the User interfaces, and indeed I can get a solution to
I posted a prob. with my own UserManager implementation yesterday, and I
said I got it working when I put my class-files inside orion.jar.
Well, not quite true, now I get this in the application.log for my
application:
---snip---
4/4/00 12:36 PM lektor-web: Error in UserManager
Hi guys!
I've run into prolem using a custom written UserManager.
I've put my own UserManager implementation inside a .jar wich I copied to
ORION_HOME/lib.
I've added this in ORION_HOME/config/application.xml:
Well
Ok, I've implemented my own UserManager that extends AbstractUserManager,
and I've created an appropriate class implementing the User interface. The
class is called PWUserManager, in the pw.security package. It is placed
within a jar called pw_security.jar (in pw/security directory
I sent this message last week and never got a response. Just trying
again...
Here's what I've got:
orion-application.xml:
login.html:
Email:
Password*:
Noah,
Thanks for your help. But I'm still missing something, apparently...
Here's what I've got:
orion-application.xml:
login.html:
Email:
Password*:
to be defined within a database, or some other form?
Something very similiar to the Orion UserManager interface, except for roles.
Thanks for your help! Keep up the great work!
Evan Vaala
> You specify a "role" (the part you usually interface with) in
> web.xml/ejb-jar.xml/applicati
thanks, that made things clear. one important thing that I would like you
to explain is how to set up orion with SSL and server certificates. Is that
possible at this point? Is certificate based authentication/authorization
possible (a la mod-ssl in apache)?
thanks,
robert
(-) Robert Krüger
is yet to be standardized and is hence
server-dependent (in Orion 0.8.4+ you look up the
UserManager via the JNDI name "java:comp/UserManager"). If you also want to
swap the "backend" (user profile storage)
you will have to add a tag to META-INF/orion-application.xml
of yo
1 - 100 of 104 matches
Mail list logo
