Customized LoginModule

[jdsignature]

Login security data needed: username, password, client IP Adress

One custmized loginModule named XYZLoginModule has been created, here is what I am thinking:

1. collect the userid, password, and client ip address via new PassiveCallbackHandler(userid, password, clientIP) ; Then pass the callbackhandler to LoginContext via new LoginContext(config, passiveCallbackHandler).

2. per step 1, all the code will be handled in the application code, are there a way to have the JBOSS container handle this? can somebody point out a way on how to all of these, for instance, the sample login-config, jboss.xml, web.xml,

thanks in advance for any clue?

[sguilhen]

If I understood your problem correctly, you want to collect some client data and pass this data to the container for authentication, but you need customized login modules to handle the ip address. Section 8.4 of the following documentation may be of some help, as it describes how to customize the login modules:

http://docs.jboss.org/jbossas/jboss4guide/r5/html/ch8.chapter.html

[anil.saldhana]

In 2 days, I am moving this thread to the security user forum. This is for design of JBoss security. Not user questions.