JAAS - Programmatic access to Subject

[chrisgerrard]

Is there any way I can get access to the authenticated Subject from my application code running in JBoss?
This particular code is neither a Servlet nor an EJB, therefore doesn't have access to the HttpServletRequest or EJBContext mechanisms for retrieving this (user) information.
In our case we need to be able to determine the current user's identity in order to be able the retrieve some personalization stuff. FWIW the new Java 1.4 Preferences interface exposes methods which don't accept user/Subject parameters & so the implication seems to be that implementations need to have some mechanism for determining user identity information.
I'm aware of the Security Proxies available in JBoss, but can't see how they'd be of real use in this circumstance.
Thanks, sorry for the length.

[basil]

The article 'http://www.javaworld.com/javaworld/jw-02-2002/jw-0215-ejbsecurity_p.html' says the following:

"Subject-based authorization
If you use the standard JBoss JaasSecurityManager to handle your security, then you can obtain the currently active JAAS Subject as an alternative to calling EJBContext methods. The subject is an instance of javax.security.auth.Subject that is set for the invocation. You can use JNDI (Java Naming and Directory Interface) to obtain a reference to it, as follows:

InitialContext ic = new InitialContext();
Subject subject = (Subject)ic.lookup("java:comp/env/security/subject");
"

I hope this helps.

- Basil

[joe543]

Hi,

tc3.2.3+jboss241

Can anyone tell me why I get 'subject not bound' when I try the above approach?

[UserWelcomeAction] perform()!
[Default] javax.naming.NameNotFoundException: subject not bound
According to the jboss manual, jboss binds the subject. What am I missing?

Joe

[chrisgerrard]

I've used this code in a SLSB and it's worked OK so far.
The JavaWorld article is worth reading.

[sumetpong]

I am able to get subject. I get the principals but privateCredentials is null.

I use LDAP Login Module and I need to privateCredentials

what am I doing wrong ?