It might be an workaround for your problem. Change transport from http to 
http-osgi if you may. Publish adress must be then set to '/something'. Your 
services will be listed at http://localhost:8181/cxf. I tested my configuration 
with Karaf 2.2.9, but I don't use JAAS from Jetty level. Instead I have it 
inside CXF with org.apache.cxf.interceptor.security.JAASLoginInterceptor. This 
gives additional benefit with role based access restrictions. All you need to 
enable this is configured SecureAnnotationsInterceptor.

Singular JAAS context can be used from anywhere. There is no way to restrict 
its visibility in Karaf. Issue fixed in 2.3.0 that I was reffering to is 
KARAF-1305.


Łukasz Dywicki
[email protected]
--
Twitter: ldywicki
Blog: http://dywicki.pl
Code-House - http://code-house.org

Wiadomość napisana przez siv vasan <[email protected]> w dniu 21 lut 2013, 
o godz. 17:48:

> Is there a way to restrict JAASLoginService to one specific web application
> only. I tried having configuration in jetty-web.xml but this configuration
> is not taken. 
> 
> 
> 
> 
> --
> View this message in context: 
> http://karaf.922171.n3.nabble.com/Use-same-JAAS-module-for-web-app-and-cxf-rest-application-tp4027838p4027844.html
> Sent from the Karaf - User mailing list archive at Nabble.com.

Reply via email to