You are about to get the the point where the missing security gbeans on
the app client will block progress. I have been hoping for several
days to put a plan for these together but have not had time yet.
Perhaps today will be the day.
thanks
david jencks
I took a crack at this, and got it to work!
Here is my (new) j2ee-client-security-plan.xml:
<configuration
xmlns="http://geronimo.apache.org/xml/ns/deployment";
configId="org/apache/geronimo/ClientSecurity"
parentId="org/apache/geronimo/Client"
>
<!-- Register GeronimoLoginConfiguration as the LoginConfiguration
handler -->
<gbean name="LoginConfiguration"
class="org.apache.geronimo.security.jaas.GeronimoLoginConfiguration">
<references name="Configurations">
<pattern><gbean-name>geronimo.client:j2eeType=SecurityRealm,*</gbean-name></pattern>
<pattern><gbean-name>geronimo.client:j2eeType=ConfigurationEntry,*</gbean-name></pattern>
</references>
</gbean>
<gbean name="JaasLoginService"
class="org.apache.geronimo.security.jaas.JaasLoginService">
<reference
name="Realms"><application>*</application><module>*</module><name>*</name></reference>
<!-- <attribute name="reclaimPeriod">100000</attribute>-->
<attribute name="algorithm">HmacSHA1</attribute>
<attribute name="password">secret</attribute>
</gbean>
<!-- Default security realm using properties files -->
<gbean name="properties-login"
class="org.apache.geronimo.security.jaas.LoginModuleGBean">
<attribute
name="loginModuleClass">org.apache.geronimo.security.realm.providers.PropertiesFileLoginModule</attribute>
<attribute name="serverSide">true</attribute>
<attribute name="options">
usersURI=var/security/users.properties
groupsURI=var/security/groups.properties
</attribute>
<attribute
name="loginDomainName">geronimo-properties-realm</attribute>
</gbean>
<gbean name="geronimo-properties-realm"
class="org.apache.geronimo.security.realm.GenericSecurityRealm">
<attribute name="realmName">geronimo-properties-realm</attribute>
<reference name="LoginModuleConfiguration">
<name>properties-login</name>
</reference>
<reference
name="ServerInfo"><module>org/apache/geronimo/ClientSystem</module><name>ServerInfo</name></reference>
<reference
name="LoginService"><name>JaasLoginService</name></reference>
</gbean>
<gbean name="properties-login"
class="org.apache.geronimo.security.jaas.JaasLoginModuleUse">
<attribute name="controlFlag">REQUIRED</attribute>
<reference name="LoginModule">
<name>properties-login</name>
</reference>
</gbean>
<gbean name="JMXClient"
class="org.apache.geronimo.security.jaas.ServerRealmConfigurationEntry">
<attribute name="applicationConfigName">JMX</attribute>
<attribute name="realmName">geronimo-properties-realm</attribute>
<reference
name="LoginService"><name>JaasLoginService</name></reference>
</gbean>
</configuration>
I also set the parentId of j2ee-client-corban-plan.xml to this new
ClientSecurity module.
Ted Kirby
