NTLoginModule using problem

[andrew_bykov]

Hello 2 all!
I have a problem with JBoss and JAAS NTLoginModule.
my jboss/jsp/struts web application must perform NT account based client authenification.

So, I create new jboss security domain:

login-config.xml
...
<application-policy name = "bpm">

<login-module code = "com.sun.security.auth.module.NTLoginModule"
flag = "required">
<module-option name = "debug">true</module-option>
</login-module>

</application-policy>

auth.conf file for client and server default configuration:
bpm
{
com.sun.security.auth.module.NTLoginModule required debug=true;
};

and then in application (in Struts action) :
...
try {
LoginContext loginContext = new LoginContext("bpm", new TextCallbackHandler());
loginContext.login();
......
}
catch (LoginException e) {
logger.error("login context creation failed: "+e.getMessage());
}

Compiling and deployment is succesfull, and application works, BUT :((
jboss write to its console not client, but server computer NT account...

What's incorrect?

Thanks in advance.
Andrew

[tcherel]

The com.sun.security.auth.module.NTLoginModule does not really authenticate the user, it is "just" retrieving the credential of the user currently running the process (in you case the user under which the JBoss server is running).

You have to create your own JBoss NTLoginModule if you want to achieve what you are tyring to do.

Thomas

[andrew_bykov]

Thanks you for reply , Thomas.
I understand my mistake, this problem occured some more difficult then I expect ))
Andrew

[tcherel]

Take a look at http://free.tagish.net/jaas/index.jsp. It provides a Win32 JAAS login module that will authenticate the user.
You should be able to reuse it "as-is" (but it is also using a dll that will have to be put in the JBoss path somewhere).

Thomas