Realms

[lrem]

Hi there,

I was thinking of moving from Weblogic to JBoss. The only problem is we make quite a lot of use of Weblogic's CachingRealm for looking up users and groups in LDAP.

Is there an equivalent in JBoss? If so what is it and if not are there any plans for it?

thanks,

lachlan

[lrem]

I guess I have to write my own

[lothar]

I'm not sure but as far as I remeber reading the manual there is a LDAPLoginModule. Try to look into the security section of the manual.

[lrem]

The LDAPLoginModule is used for Authenticating users and as such, once authenticated, all that is stored is that user and any of their valid roles.

The CachingRealm (WLS) on the other hand, stores all users and groups so they can be used.

[ctran]

> The LDAPLoginModule is used for Authenticating users
> and as such, once authenticated, all that is stored
> is that user and any of their valid roles.
>
> The CachingRealm (WLS) on the other hand, stores all
> users and groups so they can be used.

I don't think this is the case for WL (and it would
not be scalable!!!). I believe WL only caches users
that have been accessed and there is a refresh setting
as well.

[lrem]

Hi,

I'm not saying that WL caches all users, what I am saying is that in WL you can do things on the CachingRealm such as getUser(String user) and getGroup(String group) which will allow you to get ANY user/group in the Realm.

Unless I have missed something (which is highly possible), there doesn't seem to be an equivalent of this in JBoss.

regards,

Lachlan