Securing EJB/WebApp : howto ???

[cdkcdk]

Hi,

I'm trying to secure an EJB and a WebApp. I just would like to have a login window whenever somebody tries to use it. But I've been surfing along all documentation I could find, and now I'm a bit confused...

What steps are required to get a secured EJB or WebApp working ? What classes do I need to write down ? What configuration file do I need ?

Examples and hints are welcome...

TIA,
Obiwan

[rcuprak]

Well, to secure your webapp (if the basic form authentication isn't good enough) - you could use a "login page" to authenticate and a ServletFilter to restrict access to your webapp. That's at least a start. You may also want to checkout the struts project (checkout apache.org). Struts is bascially a webapp framework (MVC for webapplications).

-Ryan

[cdkcdk]

How can I do to use JaasSecurityManager ? What do I need to configure ? I'm reading the Online Manual but it lacks what I need : examples !!