Hi,
I'm trying to use an EJB to verify login/password matching, but the
loginmodule.abord method is called every time I'm trying to access to the
remote interface...
It throws no exception, but the method login method is stopped !
Is there any conflict between EJB security and web container security ?
My LoginModule :
| public class PimLoginModule extends UsernamePasswordLoginModule {
|
| public MyLoginModule() {
|
| }
|
| @Override
| public boolean abort() throws LoginException {
| System.out.println("Abort login");
| return super.abort();
| }
|
| @Override
| public boolean logout() throws LoginException {
| System.out.println("Logout...");
|
| return super.logout();
| }
|
| @Override
| protected String getUsersPassword() throws LoginException {
| System.out.println("username : " + getUsername());
| try {
| UserHome home = UserUtil.getHome();
|
| User user = home.findUserByUserName(getUsername());
| return user.getPassword();
| } catch (Exception e) {
| e.printStackTrace();
| throw new LoginException("Impossible to authenticate
user ");
| }
| }
|
| @Override
| protected Group[] getRoleSets() throws LoginException {
| ...
| ...
| }
|
| @Override
| protected boolean validatePassword(String inputPassword,
| String expectedPassword) {
| System.out.println("inputPassword : [" + inputPassword
| + "] expectedPassword : [" + expectedPassword +
"]");
| return expectedPassword.equals(inputPassword);
| }
|
| }
|
Many thanks if you have any useful idea !
View the original post :
http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4023803#4023803
Reply to the post :
http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4023803
_______________________________________________
jboss-user mailing list
[email protected]
https://lists.jboss.org/mailman/listinfo/jboss-user