• Problem loading Web-Console AppletBrowser after Securing Con

    All, Ive secured the jmx-console and web-console for Jboss5. Jmx works great, accepts uid/password, and the web-console is accepting my uid/password, but when accessing it, the navtree.AppletBrowser fails to load.......
    Profile Photo
    last modified by johnholmes123
  • Configuring JMX Remote Authenticaton

    Hi,   I have a web application running on JBoss AS 5.1.0 that makes some JMX calls. During development I had authentication turned off and everything was working fine. After enabling authentication I'm running i...
    Profile Photo
    last modified by clewis
  • Validating login/password AND Client Certificate

    I want to let the users type in their login & password to log into my system. But at the same time, I would like to validate the client certificate also in addition to the login/password. Currently, if I use only...
    Profile Photo
    last modified by rameshsr
  • Background of JBoss Security

    hi guys, i'm not sure that this is the wright place for asking my question, sorry for inconvenience... i want to get very detailed information about jboss security but i could not find the relevant documents on the ...
    Profile Photo
    last modified by ykurttr
  • Web Authentication using HTTP Request Parameters

    Sometime you desire to perform authentication of web applications hosted on JBoss Application Server using any of the HTTP request aspects. It can be headers, cookies or request parameters.   There are two ways ...
    Profile Photo
    last modified by anil.saldhana
  • Tom

    We have  perimeter security for authentication but when the request reaches Tomcat we need to make sure that we have some headers set for all our components work. In the case of weblogic we used the security prov...
    Profile Photo
    last modified by rgdutta2001
  • SecurityAssociation values are null when called from authenticating EJB

    Hi All,   I have a web applciation and an EJB component. I am using GenericHeaderAuthenticator and SSOLoginModule for the authentication. In GenericHeaderAuthenticator, I am getting the roles from siteminder an...
    Profile Photo
    last modified by hublisid
  • JBoss 7: Using encrypted datasource password

    In JBoss 6 I'm using an encrypted datasource password specified in a file *-jboss-beans.xml. Now I tried the following in standalone/configuration/standalone.xml of JBoss 7: a) Inside the datasource tag: <security&...
    Profile Photo
    last modified by juergen.zimmermann
  • @RunAs in JBoss 5 - Caller unauthorized in second call

    Hallo, I've noticed the following strange behaviour using the @RunAs annotation in a secured STSB. I've tried JBoss 5.0.1.GA and 5.1.0.GA. Take a look at the following simple scenario: three secured STSBs Caller, A...
    Profile Photo
    last modified by komet_1978
  • Migration from Bea Weblogic => Security roles, users and gro

    I'm currently migrating an application from BEA WebLogic 8.1 to JBoss AS 4.2.1. This applications consists of several web apps with configured roles in weblogic.xml and web.xml. For example the HostAccess web app: w...
    Profile Photo
    last modified by altes-kind
  • Concurrent authentication failure after startup caused by misplaced LoginModule logout???

    I am experiencing an authentication failure in JBoss 6.0 Final. It only happens if I hit the server with concurrent HTTPS requests immediately after starting up JBoss. If I hit the server with serialized requests afte...
    Profile Photo
    last modified by justincranford
  • JBoss 5.1.0GA and Terracotta Sessions

    Anyone has any idea on this :   http://community.jboss.org/message/71381   Thank you.
    Profile Photo
    created by sergiu_pienar
  • run as role

    Does the "run-as" role is effective when that request calling the servlet is not authenticated (no security constraint define for the URL) ?   Basically I would like the servlet being call by an unauthenticated ...
    Profile Photo
    created by mat001
  • java.lang.IllegalArgumentException: URI scheme is not "file"

    I am trying to get a basic installation and sample working to help determine if this picketbox is the correct solution going forward for our project.  I asked a question last week about the proper installation pr...
    Profile Photo
    last modified by robert.m.goodwin
  • What happened to the JBoss XACML source code?

    I hope that I am just being stupid.   First, look at this: http://www.jboss.org/picketbox.   That points you to here: http://community.jboss.org/wiki/PicketBoxOverview.   The authorization informatio...
    Profile Photo
    last modified by ljnelson
  • Build issue? jboss-xacml xml-apis dep. not found

    Hello; newbie here.  I'm using the project as checked out from here: http://anonsvn.jboss.org/repos/jbossas/projects/security/security-xacml/trunk   When I check this out and run   mvn clean install &#...
    Profile Photo
    last modified by ljnelson
  • PicketBox XACML : Simple Walk through

    This article will function as a short primer to get started with PicketBox XACML (formerly known as JBossXACML). We still use the names interchangeably in our documentation/blog posts.     Wiki Article (one ...
    Profile Photo
    last modified by anil.saldhana
  • JBOSS is ignoring my custom login-module

    hi,   I have a webb-app, and try to use my own login-module, but the server ignores my login-config entry.     I defined my security domain in:   jboss.xml as <security-domain>MyApp</s...
    Profile Photo
    last modified by whitespace
  • Security Group Design

    I am trying to determine what constitutes a groups in say LDAP vs what should be stored as domain data in an enterprise database.  Here are the particulars.  Suppose I am working with an application which ha...
    Profile Photo
    last modified by jasonah66
  • Basic Installation Question

    My appolgies for such a basic question, but I have not been able to find the answer to this on the PicketBox site.  I have a JBossAS 5.1 installation that I wish to install the latest picketbox installation into....
    Profile Photo
    last modified by robert.m.goodwin