[
https://issues.apache.org/activemq/browse/SM-842?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Guillaume Nodet resolved SM-842.
--------------------------------
Resolution: Fixed
Assignee: Guillaume Nodet
Thanks for this patch !
Author: gnodet
Date: Wed Feb 14 08:32:57 2007
New Revision: 507605
URL: http://svn.apache.org/viewvc?view=rev&rev=507605
Log:
SM-842: AuthenticationService set on the configuration is not used
Modified:
incubator/servicemix/trunk/deployables/bindingcomponents/servicemix-http/src/main/java/org/apache/servicemix/http/jetty/JettyContextManager.java
Author: gnodet
Date: Wed Feb 14 08:36:44 2007
New Revision: 507607
URL: http://svn.apache.org/viewvc?view=rev&rev=507607
Log:
SM-842: AuthenticationService set on the configuration is not used
Modified:
incubator/servicemix/branches/servicemix-3.1/deployables/bindingcomponents/servicemix-http/src/main/java/org/apache/servicemix/http/jetty/JettyContextManager.java
> AuthenticationService set on the configuration is not used
> ----------------------------------------------------------
>
> Key: SM-842
> URL: https://issues.apache.org/activemq/browse/SM-842
> Project: ServiceMix
> Issue Type: Bug
> Components: servicemix-http
> Affects Versions: 3.1
> Environment: linux, intel, normal pc
> Reporter: Eduardo Burgos
> Assigned To: Guillaume Nodet
> Priority: Critical
> Fix For: 3.1.1, 3.2
>
> Attachments: JettyContextManager.java
>
> Original Estimate: 10 minutes
> Remaining Estimate: 10 minutes
>
> I have a servicemix running and I was trying to take over the security
> (including jetty), so I first went to read about servicemix-http in the
> official site and I found out about the "authenticationService" property in
> the http:component.
> First I found out that there are 3 places where you can set this property,
> the first one is the http:component itself, then the
> "AuthenticationServiceName" property in the http:configuration and the
> "authenticationService" property in the http:configuration. That's ok, I made
> my own authenticationService by implementing AuthenticationService interface
> and I set it on the http:component. The problem I had is that no matter which
> of the 3 properties I set, my authenticationService wont take over jetty. So
> I gave a look at the code to both jetty and servicemix-http and I solved my
> problem by modifying a class in servicemix-http. I'll explain the changes
> below:
>
>
> class: JettyContextManager.java (
> servicemix/trunk/deployables/bindingcomponents/servicemix-http/src/main/java/org/apache/servicemix/http/jetty/JettyContextManager.java
> )
>
> svn version: line 198-199
>
> secHandler.setUserRealm(new JaasUserRealm());
> context.setHandler(secHandler);
>
> modified version: line 198-204
>
> JaasUserRealm realm = new JaasUserRealm();
> if (configuration.getAuthenticationService()!= null)
> {
>
> realm.setAuthenticationService(configuration.getAuthenticationService());
> }
> secHandler.setUserRealm(realm);
> context.setHandler(secHandler);
>
>
> So basically the problem I was having is that even if I set an
> authenticationService for my configuration, when jetty was creating the
> JaasUserRealm it was ignoring my settings and was creating a default
> JaasAuthenticationService in its constructor, so I modified it to take into
> account the configuration's authenticationService to be able to use it on the
> newly created JaasUserRealm.
> I will attach my JettyContextManager.java
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
