I see. You will either have to grant the rights to anyone or have a user store that displays the appropriate rights like James has done in the JNDI user store, I guess. If so and you are authenticated, but not authorized, your problem has got nothing to do with JAAS.
Oliver On Tue, 11 Jan 2005 17:20:41 +0100, Paul Hussein <[EMAIL PROTECTED]> wrote: > Thanks for the reply. > > The problem I am having is that from the resources I see available to > give me information on how to write my own login module ( for which I am > using http://forum.java.sun.com/thread.jspa?threadID=233317&tstart=75 to > guide me ), all I need to do is replace the Slide login module with my > own ( which I have done with a hardcoded authentication ) > > Add the auto create users/role to the Domain.xml > > and the JAAS stuff should log me in ok. > > However, I believe I am being authenticated, as the username and > password dialog pops up, but I am not authorised to look at the contents > of the slide repository. That is, when I point my browser to > 127.0.0.1:8080/slide/files after entering the username and password i get : > > HTTP Status 403 - Access to the requested resource has been denied > > As described ( unclearly !!! ) below. > > If you could point to where I am going wrong, or could look, or if this is a > bug I would be greatful. > > Cheers > > Paul. > > > Oliver Zeigermann wrote: > > >Now this is a question I understand. I guess you are right. I was able > >to switch on user auto creation by adding > > > ><auto-create-users>true</auto-create-users> > ><auto-create-users-role>org.apache.slide.structure.SubjectNode</auto-create-users-role> > > > >to the configuration section of Domain.xml > > > >Oliver > > > >On Tue, 11 Jan 2005 11:25:49 +0100, Paul Hussein <[EMAIL PROTECTED]> wrote: > > > > > >>The JAAS authentication for me is working happily. > >> > >>However, I wish to remove the custom authentication within the slide > >>login module and replace it with my own authentication. > >> > >>At the moment a fixed username and password 'jaas' jaas' > >> > >>I would like to know how to do this, as I believe ther is a complication > >>associated with auto creating users, that when I authenticate, I need to > >>tell slide to auto create a user and role for mt foreign authenticated user. > >> > >>What parts do I need to retain in the login module and what parts can I > >>remove ? > >> > >>Regards > >> > >>Paul. > >> > >> > >>Oliver Zeigermann wrote: > >> > >> > >> > >>>Hi Paul, > >>> > >>>if the original JAAS authentication did work for you this does not > >>>seem to be a Slide related problem. I have no idea what parts of the > >>>Sun tutorial you used or what you even want ot achieve. The > >>>information you provide does not give me a clue either. > >>> > >>>Oliver > >>> > >>> > >>>On Tue, 04 Jan 2005 15:11:49 +0100, Paul Hussein <[EMAIL PROTECTED]> wrote: > >>> > >>> > >>> > >>> > >>>>I am having a slight problem configuring a simple JAAS authentication > >>>>using slide 2.1rc1 ( tomcat binary ) and the example code from the JAAS > >>>>tutorial > >>>> > >>>>http://java.sun.com/j2se/1.4.2/docs/guide/security/jaas/tutorials/GeneralAcnOnly.html > >>>> > >>>>I have downloaded and build the example code from above and jar'd that > >>>>up and placed it in common/lib > >>>> > >>>>I have modified the jaas.conf to be > >>>> > >>>>slide_login { > >>>>sample.module.SampleLoginModule required > >>>>namespace=slide; > >>>>}; > >>>> > >>>>And through some debug i have added to the sample login module I can see > >>>>that the login method takes the credentials and returns true. > >>>> > >>>>However i still get > >>>> > >>>> HTTP Status 403 - Access to the requested resource has been denied > >>>> > >>>>------------------------------------------------------------------------ > >>>> > >>>>*type* Status report > >>>> > >>>>*message* _Access to the requested resource has been denied_ > >>>> > >>>>*description* _Access to the specified resource (Access to the requested > >>>>resource has been denied) has been forbidden._ > >>>> > >>>>------------------------------------------------------------------------ > >>>> > >>>> Apache Tomcat/5.0.28 > >>>> > >>>>I have read from the lists that maybe i need to set : > >>>> > >>>><auto-create-users>true</auto-create-users> > >>>><auto-create-users-role>user</auto-create-users-role> > >>>> > >>>>Which I have done but I still get the same error. > >>>> > >>>>Is there another setting I am missing to get this simple sample JAAS > >>>>authentication working with Slide. > >>>> > >>>>Regards > >>>> > >>>>Paul. > >>>> > >>>>--------------------------------------------------------------------- > >>>>To unsubscribe, e-mail: [EMAIL PROTECTED] > >>>>For additional commands, e-mail: [EMAIL PROTECTED] > >>>> > >>>> > >>>> > >>>> > >>>> > >>>> > >>>--------------------------------------------------------------------- > >>>To unsubscribe, e-mail: [EMAIL PROTECTED] > >>>For additional commands, e-mail: [EMAIL PROTECTED] > >>> > >>> > >>> > >>> > >>> > >>> > >>--------------------------------------------------------------------- > >>To unsubscribe, e-mail: [EMAIL PROTECTED] > >>For additional commands, e-mail: [EMAIL PROTECTED] > >> > >> > >> > >> > > > >--------------------------------------------------------------------- > >To unsubscribe, e-mail: [EMAIL PROTECTED] > >For additional commands, e-mail: [EMAIL PROTECTED] > > > > > > > > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] > > --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
