Re: [osgi-dev] Doing authorization based on JAAS authentication

2015-03-13 Thread Timothy Ward
On 13 Mar 2015, at 09:34, Christian Schneider ch...@die-schneider.net wrote: The rfps sound very interesting as they could cover my case too. I will read through them. It would be great if we can reuse the upcoming spec for karaf too. Do you have the jaas based implementation somewhere?

Re: [osgi-dev] Doing authorization based on JAAS authentication

2015-03-13 Thread Christian Schneider
The rfps sound very interesting as they could cover my case too. I will read through them. It would be great if we can reuse the upcoming spec for karaf too. Do you have the jaas based implementation somewhere? The links to enroute do not seem to use jaas. So remarks below about what I found:

Re: [osgi-dev] Doing authorization based on JAAS authentication

2015-03-13 Thread Timothy Ward
On 13 Mar 2015, at 10:22, Christian Schneider ch...@die-schneider.net wrote: On 13.03.2015 10:58, Timothy Ward wrote: So remarks below about what I found: Authentication --- I also have an implementation of the authentication part in cxf:

Re: [osgi-dev] Doing authorization based on JAAS authentication

2015-03-13 Thread Christian Schneider
On 13.03.2015 10:58, Timothy Ward wrote: So remarks below about what I found: Authentication --- I also have an implementation of the authentication part in cxf:

Re: [osgi-dev] Doing authorization based on JAAS authentication

2015-03-13 Thread Felix Meschberger
Hi Christian, UserAdmin specification (in Compendium and Enterprise) comes to mind. When it comes to JAAS authentication inside OSGi, namely LoginModule stuff, the Felix project has some work there [1] and [2]. Hope this helps Regards Felix [1]

Re: [osgi-dev] Doing authorization based on JAAS authentication

2015-03-13 Thread Christian Schneider
UserAdmin looks interesting. I am not sure though how to use it together with JAAS. In JAAS I will have a Subject with Principals. Useradmin can provide me with the roles of a user. But this get the user from the JAAS subject I would still first need to know which principals represent a user.