Migration from Bea Weblogic => Security roles, users and gro

[altes-kind]

I'm currently migrating an application from BEA WebLogic 8.1 to JBoss AS 4.2.1.

This applications consists of several web apps with configured roles in weblogic.xml and web.xml. For example the HostAccess web app:

weblogic.xml

<!DOCTYPE weblogic-web-app PUBLIC "-//BEA
Systems, Inc.//DTD Web Application 8.1//EN"
"http://www.bea.com/servers/wls810/dtd/weblogic810-web-jar.dtd">
<weblogic-web-app>
 <security-role-assignment>
 <role-name>hostaccessrole</role-name>
 <principal-name>HostAccessUsers</principal-name>
 </security-role-assignment>
</weblogic-web-app>

web.xml

<?xml version="1.0" encoding="ISO-8859-1" ?>
<!DOCTYPE web-app PUBLIC "-//Sun Microsystems, Inc.//DTD Web Application 2.3//EN" "http://java.sun.com/dtd/web-app_2_3.dtd">
<web-app>
 <display-name>HostAccess</display-name>
 <session-config>
 <session-timeout>60</session-timeout>
 </session-config>
 <security-constraint>
 <web-resource-collection>
 <web-resource-name>HostAccess</web-resource-name>
 <url-pattern>/HostAccess/*</url-pattern>
 <http-method>GET</http-method>
 <http-method>POST</http-method>
 </web-resource-collection>
 <auth-constraint>
 <role-name>hostaccessrole</role-name>
 </auth-constraint>
 <user-data-constraint>
 <transport-guarantee>NONE</transport-guarantee>
 </user-data-constraint>
 </security-constraint>
 <login-config>
 <auth-method>BASIC</auth-method>
 </login-config>
 <security-role>
 <role-name>hostaccessrole</role-name>
 </security-role>
</web-app>

Weblogic Server Console
In Weblogic Server Console there is a configured security realm with several users and groups (e.g. HostAccessUsers). See screenshot: http://i35.tinypic.com/1roy2o.png

What steps do I have to do in JBoss AS to get the same configuration as in Weblogic?
a) As there is no Server Console in JBoss, how do I configure users and groups in JBoss AS?
b) How do I have to change the weblogic.xml to use it in JBoss AS?

Thank you very much!!!!!!
altes-kind

[wolfgangknauf]

Hi,

there are some differences. First of all, you need a jboss specific "Security Domain". For this, add a file "jboss-web.xml" to "WEB-INF" of your web project, declaring a "security-domain":

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE jboss-web PUBLIC
 "-//JBoss//DTD Web Application 4.2//EN"
 "http://www.jboss.org/j2ee/dtd/jboss-web_4_2.dtd">

<jboss-web>
 <security-domain>java:/jaas/nameofyoursecuritydomain</security-domain>
 <context-root>...</context-root>
</jboss-web>

The security domain itself is declared in "\server\default\conf\login-config.xml" and defines the user/role mappings.

As I see that you are from Germany: here is a german tutorial for JBoss security (including a database-based user/role mapping): http://www.informatik.fh-wiesbaden.de/~knauf/SWTVertiefungWS2007/security/index.html

Hope this helps

Wolfgang

[a.newdelhi]

Hi,

I'm not sure if you find the solution for you r questions

What steps do I have to do in JBoss AS to get the same configuration as in Weblogic?

a) As there is no Server Console in JBoss, how do I configure users and groups in JBoss AS?

b) How do I have to change the weblogic.xml to use it in JBoss AS?

if yes ...

Please share

Thanks

Ashutosh

[a.newdelhi]

Please visit this URL

http://community.jboss.org/wiki/RoleMappingLoginModule