Hi All,

I'm trying to deploy in JBoss two ways to login for my application clients.

*The first one, using a user and a hashed password (the client is responsible for 
hashing the cleartext before passing the credential to JAAS).

*The second one, using a Certificate.

In the server part, I have two ServerLoginModules that will perform the server 
authentication (against a DB, in the first case, and against a Validation Authority in 
the second case).

It's clear that I will have to use the ClientLoginModule provided to bind the 
credentials (and handle the interaction with the user), but I can't see how, because 
the only credential types allowed for binding are an user and a password (and the 
ClientLoginModule complains with any other Callbacks different from NameCallback and 
PasswordCallback).

I was reviewing the code of the ClientLoginModule and I see that there are some 
classes (SecurityAssociationActions and so on...) that bind the credentials to the 
implementation of the EJB remoting protocol.

Is there any way for me to proceed??. I can't implement any other ClientLoginModule 
that binds any other types of credentials, because the access to the 
SecurityAssociationActions and so on are package protected.

Any hints or ideas would be greatly appreciated.

Thank you very much in advance

Carlos

View the original post : 
http://www.jboss.org/index.html?module=bb&op=viewtopic&p=3848938#3848938

Reply to the post : 
http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=3848938


-------------------------------------------------------
This SF.Net email is sponsored by: YOU BE THE JUDGE. Be one of 170
Project Admins to receive an Apple iPod Mini FREE for your judgement on
who ports your project to Linux PPC the best. Sponsored by IBM.
Deadline: Sept. 24. Go here: http://sf.net/ppc_contest.php
_______________________________________________
JBoss-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/jboss-user

Reply via email to