How to use an EJB to authenticate a user?

[zorzella]

I'd like to call a "myEjb.getPassword (String username)" method in my MyLoginModule class for it to authenticate the user, but, of course, as I turned JAAS on, I can't call that method without being authorized first, which needs to call that method, etc.

Declaring the method "unchecked", of course, will not work, as unchecked relates to authorization, not authentication. I also tried to fake a role before I call getPassword, but that does not seem to work either:

SimplePrincipal runAsRole = new SimplePrincipal("admin");
SecurityAssociation.pushRunAsRole(runAsRole);

Is there any way to use an EJB to authenticate a user?

Zorzella

[juhalindfors]

would setting unauthenticatedIdentity as a config param to your login module, and setting unchecked access to your EJB, help? Or do you end up in an infinite loop? in which case you probably would want to config the EJB authenticating users into a different security domain and different JAAS configuration

[petertje]

See http://www.jboss.org/modules/bb/index.html?module=bb&op=viewtopic&t=