Re: another problem with JAAS

[Adam Hardy]

The servlet container spec from Sun doesn't specify any integration 
requirements for JAAS. The JAAS support is basically fledgeling 
authentication, and that's it for servlet spec 2.4 - I would be 
interested myself in seeing the discussions and motivations behind the 
progress and changes on the road to 2.5, but I don't know whether it's 
public.

On 04/22/2004 03:52 PM Peter Rossbach wrote:
Hello,

strange error!

I have looked inside the JAASRealm code and can't find a error.
Subject result:
   You must have as your subject one Principal (java.security.Principa) 
for real user
   Than you can have one or more Group Principals with Name ="Roles" 
from class java.security.acl.Group
   for the real user roles!
        All member names from this groups are added to the tomcat role 
names.
   An option is you generate your own GenericPrincipal!

regards
Peter
http://tomcat.objektpark.org
Beloglazov Maksim schrieb:

Hello,

I've written a JAAS LoginModule and my web application successfully 
authorizes with it. But! While the authorization is successful, Tomcat 
does not recognize user Principals and roles which I assign in login 
module and returns that I have logged as a *null* user with no roles 
assigned to it.

server.xml:
....
  <Realm className="org.apache.catalina.realm.JAASRealm"
          appName="merx"
          userClassNames="ru.mb.security.jaas.RdbmsPrincipal"
          roleClassNames="ru.mb.security.jaas.RdbmsRole"
          debug="99"/>
....
ru.mb.security.jaas.RdbmsPrincipal and ru.mb.security.jaas.RdbmsRole 
are implementations of java.security.Principal interface. How can I 
force Tomcat recognize these Principals in a proper way? Can be the 
problem with moving javax.security.Principal of earlier JDKs to 
java.security.Principal in modern ones?

Any help is greatly appreciated.

Beloglazov Maksim.





---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



--
struts 1.2 + tomcat 5.0.19 + java 1.4.2
Linux 2.4.20 Debian
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]