Hi, 

I'm trying to restrict access to an NMR endpoint. 
I've added the system property to login.config and configured the
PropertiesLoginModule. 

I want to restrict access to the nmr endpoint, "SecureEndpoint". It should
only be available to the group "users".

<beans xmlns="http://www.springframework.org/schema/beans";
       xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance";
       xmlns:osgi="http://www.springframework.org/schema/osgi";
       xsi:schemaLocation="http://www.springframework.org/schema/beans
                          
http://www.springframework.org/schema/beans/spring-beans.xsd
                           http://www.springframework.org/schema/osgi
                          
http://www.springframework.org/schema/osgi/spring-osgi.xsd";>
    <osgi:service
interface="org.apache.servicemix.nmr.api.security.AuthorizationEntry">
        <bean
class="org.apache.servicemix.nmr.core.security.DefaultAuthorizationEntry">
            <property name="endpoint" value="SecureEndpoint" />
            <property name="rank" value="0" />
            <property name="roles" value="users" />
            <property name="type" value="Set" />
        </bean>
    </osgi:service>
</beans>


When I run my client code and try to populate the Subject

 Subject subject = new Subject();
        try {
            JaasAuthenticationService jAASAuthenticationService = new
JaasAuthenticationService();
            jAASAuthenticationService.authenticate(subject,
"PropertiesLogin", "user", "password");
        } catch (GeneralSecurityException ex) {
            System.out.println("AUTH ERROR: " + ex.getMessage());
        }

I get an error that says that no login module is configured for
"PropertiesLogin".


Thanks for your help!

BR 
Mikael Tärnhed




-- 
View this message in context: 
http://old.nabble.com/ServiceMix-4.1.0---How-to-secure-an-NMR-Endpoint-with-JAAS-tp27643491p27643491.html
Sent from the ServiceMix - User mailing list archive at Nabble.com.

Reply via email to