You can create a separate web application just for authentication (assign it to the root context if you want) that has a JAAS login module.
In the login webapp specify your security domain in jboss-web.xml <?xml version="1.0"?> | <jboss-web> | <security-domain>java:jaas/yourJaasDomain</security-domain> | <context>/</context> | </jboss-web> | Then modify the JBoss Portal's Jaas Security Domain to yourJaasDomain by edtiting deploy\jboss-portal.sar\portal-server.war\WEB-INF\jboss-web.xml. In our case we modified the Portal Security constraint so that all portal content is secure. You can do that by modifying the security-constraint in deploy\jboss-portal.sar\portal-server.war\WEB-INF\web.xml to something like this. <security-constraint> | <web-resource-collection> | <web-resource-name>Secure+Authenticated</web-resource-name> | <url-pattern>/*</url-pattern> | </web-resource-collection> | <auth-constraint> | <role-name>Authenticated</role-name> | </auth-constraint> | <user-data-constraint> | <transport-guarantee>CONFIDENTIAL</transport-guarantee> | </user-data-constraint> | </security-constraint> Use this same security domain in all of your portlets too. You may be able to use this type of approach with JOSSO as well. Let us know what you find out. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3941327#3941327 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3941327 ------------------------------------------------------- Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642 _______________________________________________ JBoss-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/jboss-user
