Tomcat + JBoss + JAAS
Hi all, We are trying to setup a technical architecture where the WebContainer ( Catalina ) and the EJB container ( JBoss ) are separated. So far, we have been successful in setting the connection between a servlet and an EJB from 2 different servers. Now, we want to setup a 'secure' connection, or basically define 'users/roles', so only authenticated servlets could connect to our EJBs. Another requirement is that we don't want to setup Principals/Roles programmatically on the servlets. So, we are trying to use a pre-defined JAASRealm inside the Webapp context. Is there any documentation/HOW-TO on how to do use JAASRealm ? Did anybody sucessfully connected Tomcat+JBoss using JAAS ? Thanks -- To unsubscribe, e-mail: mailto:[EMAIL PROTECTED] For additional commands, e-mail: mailto:[EMAIL PROTECTED]
Howto notify tomcat of jaas login
Hi, I'm doing a JAAS login in a servlet i.e. I'm not using realms and I'm not using form-based auth - for this purpose (form-based is used but not for anonymous users). I'm logging all anonymous users in (behind the scenes i.e. without the user even knowing) using a jaas loginContext but I need to notify tomcat so that the request can reflect the anonymous user's login status. Is this workable or are we just banging our heads against a brick wall? Thanks Joe -- To unsubscribe, e-mail: mailto:[EMAIL PROTECTED] For additional commands, e-mail: mailto:[EMAIL PROTECTED]
Re: Tomcat and JAAS
PARDEY Meaghan wrote: I haven't heard any reply yet...does anyone know if you can use JAAS 1.0 (which is part of the standard extensions of JDK 1.3) with the latest release build of Tomcat? You can use JAAS Authentication in TC by writing a JAAS Realm. JAAS authorisation can also be done inside the realm. Neither TC 3 or 4, nor in fact does the servlet API spec support the idea of multiple principals as does JAAS. Security context propagation to other containers, such as EJB is a problem. I have a working JAAS Realm but not sure if it will be made public. Rgds -- Antony Bowesman Teamware Group [EMAIL PROTECTED] tel: +358 9 5128 2562 fax: +358 9 5128 2705
Tomcat and JAAS
I haven't heard any reply yet...does anyone know if you can use JAAS 1.0 (which is part of the standard extensions of JDK 1.3) with the latest release build of Tomcat? Thanks IMPORTANT NOTICE: This e-mail and any attachment to it is intended only to be read or used by the named addressee. It is confidential and may contain legally privileged information. No confidentiality or privilege is waived or lost by any mistaken transmission to you. If you receive this e-mail in error, please immediately delete it from your system and notify the sender. You must not disclose, copy or use any part of this e-mail if you are not the intended recipient. The RTA is not responsible for any unauthorised alterations to this e-mail or attachment to it.
