Hello,
I need to build a LoginModule from scratch, so I extended the
AbstractServerLoginModule and implemented the necessary methods, and I setup a
application-policy in the login-config.xml. I've also included the
jboss-web.xml in my WEB-INF folder with the <security-domain> tag pointing to
the app policy I defined.
So here it is:
in the login-config.xml:
<application-policy name = "MyLogin">
<authentication>
<login-module code = "com.mypkg.MyLoginModule"
flag = "required">
</login-module>
</application-policy>
in the jboss-web.xml:
<jboss-web>
<security-domain>java:/jaas/MyLogin</security-domain>
</jboss-web>
in my servlet code:
lc = new LoginContext("MyLogin", new MyCallbackHandler(...));
lc.login();
The user is authenticated, but when do this:
request.getRemoteUser(), it returns null.
I added break points to my login module... the user is successfully
authenticated, however the getIdentity() method inherited from
AbstractServerLoginModule never gets called, and neither does the
getRoleSets(). Am I missing something?
I really need this help. Thanks in advance.
Luiz.
View the original post :
http://www.jboss.org/index.html?module=bb&op=viewtopic&p=3880981#3880981
Reply to the post :
http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=3880981
-------------------------------------------------------
This SF.Net email is sponsored by: NEC IT Guy Games. How far can you shotput
a projector? How fast can you ride your desk chair down the office luge track?
If you want to score the big prize, get to know the little guy.
Play to win an NEC 61" plasma display: http://www.necitguy.com/?r=20
_______________________________________________
JBoss-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/jboss-user
