Hello All, I have seen the posting on Multiple Realms just a few below this one but I had a slight variation of the same question and I believe the way to do it is multiple realms.
Right now I am using ActiveDirectory to authenticate and define my roles, but this isn't going to support permissions for roles. So I thought I would have to add a second realm that maps roles to permissions. So I tried to use the IniRealm and left the users empty (I don't want to have to duplicate all users/passwords in each Realm). However this didn't seem to work. So is it possible to have one Realm authenticate and another Realm map only roles (the same roles as defined in the first realm) to permissions? And if this is possible, does an existing realm in shiro already do this or is this something that would require me to implement a realm for. The idea here is that the same Subject instance would have user/passwords/roles defined in one realm and permissions for these roles defined in a different realm. Is this possible or am I misunderstanding the use of multiple realms. Thanks Rich -- View this message in context: http://n2.nabble.com/Multiple-Realms-tp4434653p4434653.html Sent from the Shiro User mailing list archive at Nabble.com.
