Hi Mark, Jetspeed 2 is actually using both JAAS and the java.util.prefs apis.
- straight JAAS for security because abstracting and abstraction IMOHO is a waste of time. - java.util.prefs to manage both users' personalized information along with portlet preferences. Thanks to David Le Strat we have a working java.util.prefs implementation backed by OJB. Checkout the jetspeed 2 CVS for more info. Look at the /docs/PreferencesDesginNotes.txt along with the packages o.a.j.spi.om.prefs, o.a.j.spi.om.prefs.impl, o.a.j.spi.services.prefs and o.a.j.services.prefs.impl. Regards, *================================* | Scott T Weaver | | <[EMAIL PROTECTED]> | | Apache Jetspeed Portal Project | | Apache Pluto Portlet Container | *================================* > -----Original Message----- > From: Mark Fortner [mailto:[EMAIL PROTECTED] > Sent: Monday, December 15, 2003 1:36 PM > To: Jetspeed Users List > Subject: Re: Integration into a Single Sign on Solution > > I have a similar problem. Unfortunately, SAML isn't the solution. > Does anyone know if there are any > plans to support JAAS in JetSpeed? The J2EE 1.4 spec calls for JAAS to > be the default authentication mechanism. > This is built into Tomcat 5.0, and there's also some support for it > within the Tomcat 4.1.27 release. > > There should also be some uniform way of handling Personalisation. The > Preferences API could do > the trick, but I don't see any evidence that JetSpeed is evolving > towards either of these solutions. > > Can anyone confirm the direction that the JetSpeed development team is > planning on taking with regards to these APIs? > > Regards, > > Mark Fortner > > > On Sunday, December 14, 2003, at 09:42 AM, Frans Thamura wrote: > > > :) SAML support in Jetspeed > > > >> We are looking at Jetspeed as a possible Enterprise Portal Solution. > >> We > >> have a single sign on solution that we need to integrate into > >> Jetspeed. > >> Basically this solution sits infront of the web application and > >> monitors > >> all traffic. It authenticates against our central user repository and > >> then > >> sets an encrypted session cookie and sets the username as the > >> Remote_User > >> ENV variable. > >> > >> Has anyone ever done something similar? If so where should I start. > >> Can I > >> have Jetspeed trust the Remote_User variable and if there is an > >> account > >> matching give them their portal setup. If there is no account it will > >> jump > >> them to the new account page to setup their portal?? > >> > >> Any help would be greatly appreciated. > >> > >> Thanks > >> Jim > > > > Regards, > > > > Frans Thamura <[EMAIL PROTECTED]> > > Intercitra Innovation Center > > +62 855 7888 699 > > > > We help you manage and control. > > > > ---------- > > Tertarik dengan Java Open Source Integration discussion?? bergabung ke > > JUG Indonesia mailing list, untuk subscribe email aja ke > > [EMAIL PROTECTED] > > > > Website: http://jug-indonesia.dev.java.net > > > > > > > > --------------------------------------------------------------------- > > To unsubscribe, e-mail: [EMAIL PROTECTED] > > For additional commands, e-mail: [EMAIL PROTECTED] > > > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
