Hi Jan

Thanks for the help. I did find the JCRAuthenticationModule class late on 
Wednesday evening and I think I can give it a try. In order to go in the right 
direction a few follow-up questions though:

- Since I only get a true or false from the web service, I don't have any roles 
or groups associated with my external users. This is not really a problem since 
all these users have the exact same rights. Can I simply define roles and 
groups in Magnolia and then build the list of groups and roles for the user 
similar to  JCRAuthenticationModule.collectGroupNames() and collectRoleNames(), 
but simply returning a fixed list of names? Will the user then have the rights 
associated with the corresponding Magnolia groups and roles?

- I guess my Users will be of the type info.magnolia.cms.security.ExternalUser. 
And I guess I should also write my own UserManager...?

Thanks!
-will

On 31.03.2011, at 00:05, Jan Haderka wrote:

> 
> assuming you want just to authenticate the user, but don't need to mess with 
> anything else, all you have to do is write your own JAAS login module similar 
> to the JCRAuthenticationModule. Then you need to add that module to the 
> jaas.config
> You should not need to do anything with the callbacks or login handlers as 
> long as the form for users to enter username/pwd is enough for your users to 
> enter their credentials.
> 
> HTH,
> Jan
> 
> 
> On Mar 30, 2011, at 9:19 PM, Will Scheidegger wrote:
> 
>> 
>> Dear Magnolians
>> 
>> We need to implement an external user authentication for Magnolia CE. In our 
>> case, the user needs to be verified by sending username + password to some 
>> web service and getting back true or false. That's pretty much it.
>> 
>> I tried to figure out how the login process works by debugging it step by 
>> step, but boy, with all those callback classes and such, this sure is no 
>> easy thing to do. And from what I found in the wiki and on the mailing list, 
>> this seems to be not the prettiest part of Magnolia (or has it been improved 
>> in the meantime?). So before I sink a day of hard labor into it can anyone 
>> tell me how this is done? 
>> 
>> Thanks!
>> -will
>> 
>> 
>> ----------------------------------------------------------------
>> For list details see
>> http://www.magnolia-cms.com/home/community/mailing-lists.html
>> To unsubscribe, E-mail to: <[email protected]>
>> ----------------------------------------------------------------
> 
> 
> 
> 
> ----------------------------------------------------------------
> For list details see
> http://www.magnolia-cms.com/home/community/mailing-lists.html
> To unsubscribe, E-mail to: <[email protected]>
> ----------------------------------------------------------------
> 



----------------------------------------------------------------
For list details see
http://www.magnolia-cms.com/home/community/mailing-lists.html
To unsubscribe, E-mail to: <[email protected]>
----------------------------------------------------------------

Reply via email to