2 weapps - 2 set of Roles (JAAS)

[andersonra]

Hi all,

I have 2 webapps in a Single SigOn enviroment, but each webapps use a diferent SecurityRealm with a diferent set of Roles.

JAAS works fine. Single SignOn looks works fine. The problem is: if I authenticate on webapps A and I try to access webapps B then I can't access this because the set of Roles into Principal is from webapps A.

So, is there any way to configure when change the webapps reauthenticate the user with the Realm of the current webapss ?

Thanks,
Anderson Araújo

[andersonra]

ps: Jboss 4.0.2

[brian.stansberry]

Try adding the following attribute to the SingleSignOn valve element in server.xml

requireReauthentication="true"

.

With this set to true, each request will be presented to the app's security Realm, rather than relying on the Principal cached with the SSO.

[andersonra]

Hi Brian,

This works fine.

Thank you very much.
[]s

[andersonra]

Is it possible deploy webapps A on one server and webapps B on the other server ?

[brian.stansberry]

Yes, but you need to use ClusteredSingleSignOn. In the standard server.xml, it's just below the non-clustered version. Just comment out the non-clustered and uncomment the clustered. requiresReauthentication applies to both.