Log in to follow, share, and participate in this community.
Thread Problem loading Web-Console AppletBrowser after Securing Con
Problem loading Web-Console AppletBrowser after Securing ConAll, Ive secured the jmx-console and web-console for Jboss5. Jmx works great, accepts uid/password, and the web-console is accepting my uid/password, but when accessing it, the navtree.AppletBrowser fails to load.......
Configuring JMX Remote AuthenticatonHi, I have a web application running on JBoss AS 5.1.0 that makes some JMX calls. During development I had authentication turned off and everything was working fine. After enabling authentication I'm running i...
Thread Validating login/password AND Client Certificate
Validating login/password AND Client CertificateI want to let the users type in their login & password to log into my system. But at the same time, I would like to validate the client certificate also in addition to the login/password. Currently, if I use only...
Background of JBoss Securityhi guys, i'm not sure that this is the wright place for asking my question, sorry for inconvenience... i want to get very detailed information about jboss security but i could not find the relevant documents on the ...
Article Web Authentication using HTTP Request Parameters
Web Authentication using HTTP Request ParametersSometime you desire to perform authentication of web applications hosted on JBoss Application Server using any of the HTTP request aspects. It can be headers, cookies or request parameters. There are two ways ...
TomWe have perimeter security for authentication but when the request reaches Tomcat we need to make sure that we have some headers set for all our components work. In the case of weblogic we used the security prov...
Thread JBoss 7: Using encrypted datasource password
JBoss 7: Using encrypted datasource passwordIn JBoss 6 I'm using an encrypted datasource password specified in a file *-jboss-beans.xml. Now I tried the following in standalone/configuration/standalone.xml of JBoss 7: a) Inside the datasource tag: <security&...
Thread @RunAs in JBoss 5 - Caller unauthorized in second call
@RunAs in JBoss 5 - Caller unauthorized in second callHallo, I've noticed the following strange behaviour using the @RunAs annotation in a secured STSB. I've tried JBoss 5.0.1.GA and 5.1.0.GA. Take a look at the following simple scenario: three secured STSBs Caller, A...
Thread Migration from Bea Weblogic => Security roles, users and gro
Migration from Bea Weblogic => Security roles, users and groI'm currently migrating an application from BEA WebLogic 8.1 to JBoss AS 4.2.1. This applications consists of several web apps with configured roles in weblogic.xml and web.xml. For example the HostAccess web app: w...
run as roleDoes the "run-as" role is effective when that request calling the servlet is not authenticated (no security constraint define for the URL) ? Basically I would like the servlet being call by an unauthenticated ...
Thread java.lang.IllegalArgumentException: URI scheme is not "file"
java.lang.IllegalArgumentException: URI scheme is not "file"I am trying to get a basic installation and sample working to help determine if this picketbox is the correct solution going forward for our project. I asked a question last week about the proper installation pr...
Thread What happened to the JBoss XACML source code?
What happened to the JBoss XACML source code?I hope that I am just being stupid. First, look at this: http://www.jboss.org/picketbox. That points you to here: http://community.jboss.org/wiki/PicketBoxOverview. The authorization informatio...
Thread Build issue? jboss-xacml xml-apis dep. not found
Build issue? jboss-xacml xml-apis dep. not foundHello; newbie here. I'm using the project as checked out from here: http://anonsvn.jboss.org/repos/jbossas/projects/security/security-xacml/trunk When I check this out and run mvn clean install ...
PicketBox XACML : Simple Walk throughThis article will function as a short primer to get started with PicketBox XACML (formerly known as JBossXACML). We still use the names interchangeably in our documentation/blog posts. Wiki Article (one ...
JBOSS is ignoring my custom login-modulehi, I have a webb-app, and try to use my own login-module, but the server ignores my login-config entry. I defined my security domain in: jboss.xml as <security-domain>MyApp</s...
Security Group DesignI am trying to determine what constitutes a groups in say LDAP vs what should be stored as domain data in an enterprise database. Here are the particulars. Suppose I am working with an application which ha...
Basic Installation QuestionMy appolgies for such a basic question, but I have not been able to find the answer to this on the PicketBox site. I have a JBossAS 5.1 installation that I wish to install the latest picketbox installation into....