LoginModule accessing EJB

[tremalnaik]

Hi, I have to deploy an application in a clustered environment: web and ejb tier live on separate JVMs (two phisically separate PCs). I developed a LoginModule which accesses to login credentials stored in a Database. Now I'd like to deploy the LM only on the EJB tier PC to avoid installation of database client in the web one. Not only because of this, but also because the login() method of my LM calls EJB methods.

Can I configure the Jboss installed on the web tier to ask the jboss installed on the EJB tier to perform authentication? Do you think there is a better way to deal with this problem?

Thanks,

[starksm64]

A login module can call any resource it wants. The target ejb cannot be in the same security-domain as the login module.

[tremalnaik]

I solved defining two different login modules extending the base one. The first, which I will deploy into the web tier server, is going to ask authentications service to EJBs installed in the ejb tier server. The second, which I will deploy in the EJB server will access directly to the DB.

But I don't understand the following

The target ejb cannot be in the same security-domain as the login module.

I defined the same security-domain for the Login Module and for the authentication EJB. It works!


thanks,

[starksm64]

The two security-domain settings are not in the same server and therefore are really not the same.