how to create user and group on JBOSS, just like Weblogic?

[jamy_blue]

You know, we can create users and groups on Weblogic. How could we do it on JBOSS? Some config file contain these information or something else?

I need your help.
Thanks in advance!

[julien.dubois]

Hi,

If you're looking for a console or a nice GUI to help you create/manage users, well I'm afraid that doesn't exist with JBoss. Have a look at the JBoss "login modules", they're quite clearly explained in the free doco. I recommand using a database or LDAP : it's easy to set up, and you'll see you won't miss that much that Weblogic GUI... You'll use the GUI bundled with your LDAP software instead for example.

HTH,

[jamy_blue]

Could anyone tell me how to check if some user is in some role on JBOSS?
It's very important for me. I want to create a role and some users on JBOSS, and check the user using some loginmodule.

Thank you very much if you can help.
If we can't do it on JBOSS, could you tell me why? or some solution to it?
Thank you again!

[juha]

Inside an EJB from the EJBContext.isCallerInRole(String rolename)

[jamy_blue]

Thank you for you reply!

Could you describe it more clearly? Including how to create a role and user?

[baric]

"jamy_blue" wrote:
Could you describe it more clearly? Including how to create a role and user?

JBoss is what you might call user agnostic. It has not concept of its own users. Rather it uses login modules to verify users and credetials using some external mechanism. So, in some sense, the login module determines who are users and what roles they have. Now where that login module gets its user and role information from varies from module to module. JBoss comes with a quite a few that you can use. One, called UserRolesLoginModule, lets you provide properties files what contain user and role information and verifies user provided credentials against these properties files. Another uses a specified LDAP directory to provide the same function. Yet another uses tables in a database. All are pretty well described in Chapter 8 (Security) of the Admin guide.

Or you can provide your own custom login module. For example, I have one that verifies the user against a particular Lotus Domino server.

Just pick the one that best suits your needs or provide your own and use it.