RE: [JBoss-user] JAAS,Setting alternate Security domain

Pham Thanh Quan Mon, 14 Jul 2003 03:15:15 -0700

Title: JAAS,Setting alternate Security domain

To do so, You could define the method permission for the bean EchoWorld in the file jboss.xml as following:

<method-permission>

�� <uncheck/>

�� <ejb-name>EchoWorld</ejb-name>

�� <method>*</method>

</method-permission>

But the login modules still need to be configured to authenticate an anonymous user, so you need to define the unauthenticated-principal in the login-config.xml for your security domain. For example:

<application-policy name = "Test">
<authentication>
<login-module code = "org.jboss.security.auth.spi.UsersRolesLoginModule" flag = "required" >
�� <module-option name = "unauthenticatedIdentity">nobody</module-option>

� ��</login-module>

</authentication>
</application-policy>

You should also define this in jboss.xml:

<security-domain>java:/jaas/Test</security-domain>

<unauthenticated-principal>nobody</unauthenticated-principal>

��

Quan

-----Original Message-----
From: Nimish Chourey , Tidel Park - Chennai [mailto:[EMAIL PROTECTED]
Sent: Monday, July 14, 2003 12:45 PM
To: [EMAIL PROTECTED]
Subject: [JBoss-user] JAAS,Setting alternate Security domain

Hi all ,

I have set up a security domain in login-config.xml as

    <application-policy name = "Test">
       <authentication>
             <login-module code = "org.jboss.security.auth.spi.UsersRolesLoginModule" flag = "required" />
       </authentication>
    </application-policy>

To apply this to EJB my jboss.xml looks like this

<?xml version="1.0" encoding="UTF-8"?>

<enterprise-beans>
    <session>
                <ejb-name>HelloWorld</ejb-name>
                <jndi-name>HelloWorld</jndi-name>
        </session>
</enterprise-beans>
</jboss>

But I have some EJB's which should not be in this Security domain .
Say I have a bean called EchoWorld .. which can be called withour Authentication/Authorization .
What settings should I do in jboss.xml ??

Any pointers , help is appreciated ..

Nimish

RE: [JBoss-user] JAAS,Setting alternate Security domain

Reply via email to