one data source with multiple database users
Hello
I have problem with configuring JBoss 4.2.1+Seam 2.0.1+Oracle 10 to use one data source with multiple users. I have configured *-ds.xml file with
<datasources> <local-tx-datasource> <jndi-name>myDatasource</jndi-name> <connection-url>jdbc:oracle:thin:@server:1521:db</connection-url> <driver-class>oracle.jdbc.driver.OracleDriver</driver-class> <security-domain>MyRealm</security-domain> </local-tx-datasource> </datasources>
and added to login-config.xml:
<authentication> <login-module code = "my.login.module.MyLoginModule" flag = "required"> <module-option name="sysUserName">user</module-option> <module-option name="sysPassword">pass</module-option> <module-option name="managedConnectionFactoryName">jboss.jca:service=LocalTxCM,name=myDatasource</module-option> </login-module> </authentication>
my login module code is as follows:
import java.security.AccessController;
import java.security.Principal;
import java.security.PrivilegedAction;
import java.security.acl.Group;
import java.util.Map;
import javax.management.MBeanServer;
import javax.management.MBeanServerFactory;
import javax.management.MalformedObjectNameException;
import javax.management.ObjectName;
import javax.resource.spi.ManagedConnectionFactory;
import javax.resource.spi.security.PasswordCredential;
import javax.security.auth.Subject;
import javax.security.auth.callback.CallbackHandler;
import javax.security.auth.login.LoginException;
import org.jboss.mx.util.MBeanServerLocator;
import org.jboss.seam.security.Identity;
import org.jboss.security.SecurityAssociation;
import org.jboss.security.SimplePrincipal;
import org.jboss.security.auth.spi.AbstractServerLoginModule;
public class MyLoginModule extends AbstractServerLoginModule {
private static final org.apache.log4j.Logger log = org.apache.log4j.Logger
.getLogger(my.login.module.MyLoginModule.class);
/* used at jboss startup */
private static boolean sysMode = true;
private String sysUserName;
private String sysPassword;
private String userName;
private String password;
private MBeanServer server;
private ObjectName managedConnectionFactoryName;
private ManagedConnectionFactory mcf;
public SkorLoginModule() {}
@Override
public void initialize(Subject subject, CallbackHandler handler, Map sharedState, Map options) {
super.initialize(subject, callbackHandler, sharedState, options);
String name = (String) options.get("managedConnectionFactoryName");
try {
managedConnectionFactoryName = new ObjectName(name);
} catch (MalformedObjectNameException mone) {
throw new IllegalArgumentException("Malformed ObjectName: " + name);
}
sysUserName = (String)options.get("sysUserName");
if (sysUserName == null) {
throw new IllegalArgumentException("Must supply a system user name!");
}
userName = (String)options.get("sysUserName");
sysPassword = (String)options.get("sysPassword");
if (sysPassword == null) {
throw new IllegalArgumentException("Must supply a system user password!");
}
password = (String)options.get("sysPassword");
server = MBeanServerLocator.locateJBoss();
getMcf();
}
@Override
public boolean login() throws LoginException {
setUserNameAndPassword();
log.info("login(): userName=" + userName + ", sysMode=" + sysMode);
Principal principal = new SimplePrincipal(userName);
PasswordCredential credential = new
PasswordCredential(userName, password.toCharArray());
credential.setManagedConnectionFactory(getMcf());
subject.getPrincipals().add(principal);
subject.getPrivateCredentials().add(credential);
super.loginOk = true;
return true;
}
protected ManagedConnectionFactory getMcf() {
if (mcf == null) {
try {
mcf = (ManagedConnectionFactory)server.getAttribute(managedConnectionFactoryName, "ManagedConnectionFactory");
} catch (Exception e) {
throw new IllegalArgumentException("Managed Connection Factory not found: " + managedConnectionFactoryName);
}
}
return mcf;
}
@Override
protected Principal getIdentity() {
setUserNameAndPassword();
log.info("getIdentity(): userName=" + userName + ", sysMode=" + sysMode);
return new SimplePrincipal(userName);
}
@Override
protected Group[] getRoleSets() throws LoginException {
return new Group[] {};
}
private void setUserNameAndPassword() {
if (sysMode) {
userName = sysUserName;
password = sysPassword;
} else {
String[] ss = Identity.instance().getUsername().split(" ");
String s = ss[0].substring(0, 1).toLowerCase();
s += ss[1].toLowerCase();
userName = s;
password = s;
}
}
}
The problem is that when I try to switch user with:
org.jboss.seam.security.Identity.instance().setUsername("User Name");
SkorLoginModule.setSysMode(false);
try {
LoginContext loginContext = new LoginContext("MyRealm");
loginContext.login();
} catch (LoginException e) {
System.out.println("error");
}
there aren't created any sub-pools for every user. There is one physical db connection. When I try to flush cache from JaasSecurityManager, the connection i reseted and previously logged in user is disconnected.
Another question is: when should I invoke
loginContext.login()because now it's invoked in a stateless bean which authenticate method is configured in seam's compoments.xml file as:
<security:identity authenticate-method="#{authenticator.authenticate}"
security-rules="#{securityRules}"/>
I think the authenticate method should be invoked somewhere else - in authenticator bean the entity manager is already injected by @PersistenceContext annotation.
Thanks in advance for any help.
