how to create an JAAS Domain in jboss 5.1?

[legolas.w]

Hi
I want to create a simple JAAS domain in JBoss 5.1 and use it for my web, and ejb application authentication.

Can you please let me know how I can create the realm and how an Application Client Module can be authenticated before it can invoke an EJB method?

I know how to annotated the method to be only accessible for an specific role, what I do not know is how the client application can be configured to do the authentication.

Thanks.

[wolfgangknauf]

Hi,

first step: add a "SecurityDomain" annotation to your ejbs:

@Stateless
@org.jboss.ejb3.annotation.SecurityDomain(value="mysecuritydomain")
public class MyBean ...

second step: edit the file "JBOSS_HOME\server\default\conf\login-config.xml" and add an entry "application-policy" for your security domain. A newer way of configuring it is found here: http://server.dzone.com/articles/security-features-jboss-510
How do you want to login?

third step: see Security FAQ at http://www.jboss.org/community/wiki/SecurityFAQ, question 10 for a simply approach to application client login.

Hope this helps

Wolfgang