3 Replies Latest reply on Sep 4, 2005 12:14 PM by starksm64

    LoginModule accessing EJB

    tremalnaik

      Hi, I have to deploy an application in a clustered environment: web and ejb tier live on separate JVMs (two phisically separate PCs). I developed a LoginModule which accesses to login credentials stored in a Database. Now I'd like to deploy the LM only on the EJB tier PC to avoid installation of database client in the web one. Not only because of this, but also because the login() method of my LM calls EJB methods.

      Can I configure the Jboss installed on the web tier to ask the jboss installed on the EJB tier to perform authentication? Do you think there is a better way to deal with this problem?

      Thanks,

        • 1. Re: LoginModule accessing EJB
          starksm64

          A login module can call any resource it wants. The target ejb cannot be in the same security-domain as the login module.

          • 2. Re: LoginModule accessing EJB
            tremalnaik

            I solved defining two different login modules extending the base one. The first, which I will deploy into the web tier server, is going to ask authentications service to EJBs installed in the ejb tier server. The second, which I will deploy in the EJB server will access directly to the DB.

            But I don't understand the following

            "scott.stark@jboss.org" wrote:
            The target ejb cannot be in the same security-domain as the login module.


            I defined the same security-domain for the Login Module and for the authentication EJB. It works!


            thanks,

            • 3. Re: LoginModule accessing EJB
              starksm64

              The two security-domain settings are not in the same server and therefore are really not the same.