PicketBox Mapping<< Go Back to PicketBox Overview PicketBox (formerly JBoss Security) supports facilities to map a Principal, Role(s) and Attribute(s) in a security process.
Need for mapping
Role Mapping
Pri...
ACL Implementation QuestionsStefan, when you look at the following class: package org.jboss.security.acl.ACLImpl we have
import javax.persistence.OneToMany;
import org.hibernate.annotations.Cascade;
@OneToMany(mappe...
XACML LocatorsJBossXACML in PicketBox suite provides Oasis XACML v2.0 support for Java applications. What are Locators? Locators are interfaces in JBossXACML that allow one to provide additional or missing information to t...
Article Mapping Roles in JBoss Application Server v5.x
Mapping Roles in JBoss Application Server v5.xIn JBoss Application Server v5.0 and beyond, it is possible to map roles from the ones derived at the security domain level to include additional roles included in deployment (such as at the EAR level). Mappin...
Thread client authentication on a JRMP SSL connection; multiple key
client authentication on a JRMP SSL connection; multiple keyJBoss Security team, I would like to start a discussion concerning several possible improvements in jbosssx; they came up while working with JBoss in an environment that has complex security requirements. While all f...
Thread Client/Server Key Aliases at JBoss Security Domain Level
Client/Server Key Aliases at JBoss Security Domain LevelClient/Server Key Aliases at JBoss Security Domain Level Keystores may contain more than one server or client key. JSSE uses the concept of key alias to differentiate among multiple keys in the same keystore. S...
Thread Support for External Credentials in LdapExtLoginModule
Support for External Credentials in LdapExtLoginModuleSome operational environments require that passwords are read at run time from external processes, and not hardcoded in configuration files, even in encrypted format. As per 4.3.0.GA_CP04, LdapExtLoginModule does not ...
Thread Option for Client Authentication at JBoss Security Domain Level
Option for Client Authentication at JBoss Security Domain LevelOption for Client Authentication at JBoss Security Domain Level Some operational environments require that all SSL connections into a JBoss instance must be mutually authenticated, and that should be a configuration ...
Connection Filter in JBossWe are migrating from Weblogic 6.1 to JBoss 5.1. Currently in weblogic we have ConnectionFilter which filters some addresses and protocalls using weblogic.security.net.ConnectionFilter . How same functionality can b...
Thread PATCH (review before I commit) add stacking to LDAPExtLoginM
PATCH (review before I commit) add stacking to LDAPExtLoginMSee: https://jira.jboss.org/jira/browse/JBAS-2681 and more particularly: https://jira.jboss.org/jira/secure/attachment/12330504/ldapextpatch I originally wrote the LdapExtLoginModule in a hurry for a client and it ha...
JBoss Negotiation with Win VistaHas anyone tested JBoss Negotiation from a Windows Vista Client? It doesn't work for me. There is no exception thrown that may be found on the jboss logs - it just doesn't complete.
Thread Is it possible to make run.bat start with custom server conf
Is it possible to make run.bat start with custom server confHi, I am working with JBoss 4.2.0 and I am a beginner. I have created a custom server configuration. I wanted to know if there is any way to make JBoss always start with my configuration by default rather than the d...
Thread URGENT: SAML support example with an JBOSS application
URGENT: SAML support example with an JBOSS applicationI want to integrate my application with SAML. Please share with me the steps required to do so. I have to stick to the SAML only, so please keep it specific to it and if possible provide me any sample application as a...
SAML 2.0 Support in Websphere?Hello, In the context of a diploma thesis i should evaluate support of the SAML 2.0 Standard in JBoss. I'm especially interested in the Web Browser SSO Profile and Identity Federation mechanisms. I believe this would...
JBAS-7049: AccessController permission check throwing NPELooks like an OpenJDK6 issue where the permission check for getParent of a classloader is failing with an NPE because probably the parent class loader is null (boot CL).
14:40:13,679 ERROR [AbstractKernelController...
Resolving jacc-api vs. jboss-javaee@see http://lists.jboss.org/pipermail/jboss-development/2009-July/014679.html Anil, how would we like to proceed? I'll defer opening a ticket until we've got your input on how this should be handled. S, ALR
Property: javax.security.jacc.PolicyConfigurationFactory.proRunning into this while booting Embedded AS (with all dependencies upon the application ClassLoader): Caused by: java.lang.ClassNotFoundException: JACC:Error PolicyConfigurationFactory : cannot find class : null
at...