Do you mean I should use JAASLoginInterceptor even for my web application ?
Currently I am using JAASLoginInterceptor for rest application only.

One thing I don't understand is why is the JAASLoginService invoked even for
rest application ? This is getting invoked even when I add 2 different karaf
modules and JAASLoginService mapps to one of the realm only. This sound like
a bug to me. What do you think is happening ?

<Call name="addBean">
      <Arg>
        <New class="org.eclipse.jetty.plus.jaas.JAASLoginService">
                  <Set name="name">LDAP</Set>
          <Set name="loginModuleName">LDAP</Set>
                  <Set name="roleClassNames">
                        <Array type="java.lang.String">
                          
<Item>org.apache.karaf.jaas.boot.principal.RolePrincipal</Item>
                        </Array> 
                  </Set>                        
        </New>
      </Arg>
    </Call>



--
View this message in context: 
http://karaf.922171.n3.nabble.com/Use-same-JAAS-module-for-web-app-and-cxf-rest-application-tp4027838p4027848.html
Sent from the Karaf - User mailing list archive at Nabble.com.

Reply via email to