2 Replies Latest reply on Mar 15, 2004 12:34 AM by cuonglam

    ClientLogin and SSL domains combined

      I've looked through the 3.0.1 guide for SSL integration with JBoss, but I still can't get it to work.

      I'm already using a security domain for authentication which pulls user names and passwords from our database.

      Now we want to add SSL to the mix. The example doesn't discuss combining different security domains.

      And I'm unclear about the element in the jboss-servce.xml for the mbean

      ======




      smc.keystore
      lancope911

      ======
      Is the constructor referring to the keystore alias. Since they use the same name for the keystore alias, keystore password and the Security Domain name, I'm a little confused which one is which.

      Here is my configuration:
      In the login-config.xml:
      ======
      <application-policy name = "SMCRealm">

      <login-module code = "org.jboss.security.auth.spi.DatabaseServerLoginModule"
      flag = "required">
      .....

      </application-policy>
      ======

      In my jboss.xml:
      ========

      <security-domain>java:/jaas/SMCRealm</security-domain>
      .......

      ========
      This sets the default security domain for the application.

      In the .sar file for the application I have the keystore and the following jboss-service.xml file:
      ========


      <!-- ================================================ -->
      <!-- The SSL domain setup -->
      <!-- ================================================ -->




      my.keystore
      mypassword



      4445

      org.jboss.security.ssl.RMISSLClientSocketFactory


      org.jboss.security.ssl.RMISSLServerSocketFactory

      java:/jaas/RMI+SSL
      jboss.security:service=JaasSecurityDomain,domain=RMI+SSL




      ========

      The app appears to deploy in the beginning but then you start to see bind errors like:
      Problem starting service jboss.j2ee:service=EJB,jndiName=ServiceSession
      java.rmi.ServerException: Counld not bind home; nested exception is:
      javax.naming.CommunicationException [Root exception is java.rmi.MarshalException: Invalid remote object] etc...

      Any ideas??

      Thanks.

        • 1. Re: ClientLogin and SSL domains combined
          tool

          Try following these few (3) instructions.
          These are what I wrote up after I got it to work in 3.0.1 and the people I work with have used them with apparent success.

          Hope it does the job.
          Brian

          • 2. Re: ClientLogin and SSL domains combined
            cuonglam

             

            "tool" wrote:
            Try following these few (3) instructions.
            These are what I wrote up after I got it to work in 3.0.1 and the people I work with have used them with apparent success.

            Hope it does the job.
            Brian


            Where can I get these instructions?