How to reference a custom login module inside a war file fro

[vartanix]

I want to create a custom login module to authenticate a user by comparing the userID and password with MySQL database.

- My custom login module is called RdbmsLoginModule which implements the javax.security.auth.spi.LoginModule interface.
- The configuration file, jaas.config is:
Example
{
RdbmsLoginModule required
debug = "true"
url = "jdbc:mysql:///jaasdb"
driver = "com.mysql.jdbc.Driver";
};
- I create a jaas.war file and deploy it to /server/default/deploy directory.

- Is the best place to reference jaas.config in /jre/lib/security/java.security file?
- How then should I modify the jaas.config file to reference the RdbmsLoginModule in /server/default/deploy/jaas.war file?

Or am I totally off and I need to definitely use a subclass of org.jboss.security.auth.spi.AbstractLoginModule?

Thanks guys.
Vartan

[tom-the-bomb]

the best place for your jaas.config file is definetly within your application archive and not someplace in the filesystem. another option might be to put your configuration into conf/login-config.xml of your jboss instance.
but for me the best option is to use the DynamicLoginConfig setup. (read about it here: http://www.jboss.org/wiki/Wiki.jsp?page=DynamicLoginConfig)
but this means you have your war file, then you create a sar file with the DynamicLoginConfig and then you put both into an ear file (this step is optional but I think it's best to have everything for an application within a single archive)

question: why are you writing your own login module? there is a great DatabaseServerLoginModule (http://docs.jboss.org/jbossas/admindevel326/html/ch8.chapter.html#ch8.dabaseserverloginmodule.sect)
you will also find config examples there.

if you really need your own custom login modul use this: http://docs.jboss.org/jbossas/admindevel326/html/ch8.chapter.html#ch8.custom.sect.
the best in your case would probably be to extend the UserPasswordLoginModule or DatabaseServerLoginModule.

[vartanix]

Thanks Tom for the info. You've included a lot that I have to digest. Frankly since I'm new to JAAS I started with an existing example from an article and was trying to make it work on JBoss. But since you've included the link to the doc I need, I can just go that route.

One question: How portable is the JBoss databaseServerLoginModule?

Thansk for your help
Vartanix

[chulao]

Hello Guys,

Using to advantage, I'd like to know if is possible put the log4j configure file togheter with the jaas config file inside the war.

Thanks.