Hi Dallas,

SecuritySupport is one of the many beans configured through the config workspace in Magnolia. In this case, the nodes are at /server/ security. Have a look under the userManagers node in there and you'll see 2 sub nodes in the default configuration, 3 if you added EE's ldap module. This is where you might want to add your own UM. You should be aware, however, that Magnolia is already using jaas by default, so you might just need to re-configure jaas instead.

hth,

-g

On Apr 1, 2008, at 19:05 , Vaughan, Dallas wrote:
Not sure if this should be posted to user or dev, but my question is:

How does one create and use a custom UserManager? Basically, we are trying to use a JAAS-authenticated subject to auto-login to Magnolia and creating a User object with the correct Magnolia permissions/roles (by adding them programmatically based on our own Principals).

Looking at http://jira.magnolia.info/browse/MAGNOLIA-1707 it seems there is an enhancement to allow custom UserManagers, and to allow specification of the realm. I guess this happens through SecuritySupport.addUserManager(String realm, UserManager um), but there is no documentation on how this gets added (there are no callers of this method within the codebase). Is it configured dynamically in the userManagers node?

Is there any documentation on how to use the SecuritySupport and UserManager classes to support external authentication/ authorization? If not, can someone give a rundown on this?

Thanks,

Dallas Vaughan

No virus found in this outgoing message.
Checked by AVG.
Version: 7.5.519 / Virus Database: 269.22.3/1354 - Release Date: 4/1/2008 5:38 AM


----------------------------------------------------------------
for list details see
http://documentation.magnolia.info/
----------------------------------------------------------------


----------------------------------------------------------------
for list details see
http://documentation.magnolia.info/
----------------------------------------------------------------

Reply via email to