Re: [OT] Tomcat, JAAS and Kerberos

2005-08-19 Thread Wendy Smoak
From: "Adam Hardy" <[EMAIL PROTECTED]> Yes that's more or less what I did when writing a JBoss login module. Unfortunately the JBoss stuff was really still in beta and I had to do a fair amount of debugging to work out how to make it work. Same here... after hours spent with JSwat stepping th

Re: [OT] Tomcat, JAAS and Kerberos

2005-08-16 Thread Adam Hardy
Wendy Smoak on 16/08/05 17:26, wrote: The User and Role classes are more or less simple DTOs, one User object for the user and x Role objects for each role the User is in. This is where I'm stuck. Right now I'm playing with extending Krb5LoginModule, just wrapping it and passing through all t

Re: [OT] Tomcat, JAAS and Kerberos

2005-08-16 Thread Wendy Smoak
From: "Adam Hardy" <[EMAIL PROTECTED]> if you set up tomcat to use the JAAS realm, then tomcat will set up a LoginContext, which is what you configure by pointing it to your LoginModule(s). You either code your LoginModule or perhaps use the Sun one you mention (if the code does what it's meant

Re: [OT] Tomcat, JAAS and Kerberos

2005-08-16 Thread Adam Hardy
Hi Wendy, if you set up tomcat to use the JAAS realm, then tomcat will set up a LoginContext, which is what you configure by pointing it to your LoginModule(s). You either code your LoginModule or perhaps use the Sun one you mention (if the code does what it's meant to), you just need to con

Re: [OT] Tomcat, JAAS and Kerberos

2005-08-12 Thread Wendy Smoak
From: "netsql" <[EMAIL PROTECTED]> JAAS I think acts a bit like a filter, it just gets called. In your web-xml you tell it what url you want secured and somehow map how the users see it. Bea site has a good doc on web.xml. I'm okay with web.xml, it's configuring the Realm that I'm stuck on--

Re: [OT] Tomcat, JAAS and Kerberos

2005-08-12 Thread C.F. Scheidecker Antunes
Wendy, Check out this article on JAAS with LDAP. I am sure that it might not be as hard to use Kerberos. I've seen an example of the userClassNames and roleClassNames somewhere this week. Let me see if I find it and I will forward it to you. The article on JAAS is at: http://www.theserversid

Re: [OT] Tomcat, JAAS and Kerberos

2005-08-12 Thread netsql
1st answer is I duno. But... JAAS I think acts a bit like a filter, it just gets called. In your web-xml you tell it what url you want secured and somehow map how the users see it. Bea site has a good doc on web.xml. So I assume that when you get to the secure url, those classes fire and see