Hi,
> I'm not the jackrabbit security expert but it seems that should be
> possible with a custom UserManager. I think it is not possible to plug
> my custom UserManager implementation as a bundle.
You might want to have a look at jackrabbit-usermanager [1] and
jackrabbit-accessmanager [2] bundles.
>
> So, what is the best approach for that kind of externalisation ? Do I
> have create my own JackrabbitSecurityManager ?
I don´t know if it´s the best approach but consider to leverage [1] to
write your own user manager module. For instance:
/**
* @scr.component label="%myCustomLoginModule.name"
description="%myCustomLoginModule.description" immediate="true"
* @scr.service
interface="org.apache.sling.jcr.jackrabbit.server.security.LoginModulePlugin"
*/
public class MyCustomLoginModule implements LoginModulePlugin {
.....................
public AuthenticationPlugin getAuthentication(Principal principal,
Credentials creds) throws RepositoryException {
return new CustomAuthenticationPlugin();
}
....................
}
Hope this helps.
BR,
Juanjo.
[1]
http://svn.apache.org/repos/asf/sling/trunk/bundles/jcr/jackrabbit-usermanager
[2]
http://svn.apache.org/repos/asf/sling/trunk/bundles/jcr/jackrabbit-accessmanager
