Getting caller principal into SSB connection?

[kellyschrock]

Hello,

I have a plain Java desktop application from which I'm connecting to a stateless session bean. I'm trying to figure out how to make a connection to the SSB so that when it calls getCallerPrincipal() on its SessionContext, the userID from the client will be there. I already have the user ID, and I have tried the following:

InitialContext ic = new InitialContext();
ic.addToEnvironment(Context.SECURITY_PRINCIPAL, userName);

Object ref = ic.lookup("whateverBean");

...which makes sense, other than the fact that it doesn't appear to work. I don't really have stringent requirements about security, I just need for the SSB to know who's calling its methods so it can log that activity.

Thanks

[petertje]

Using JNDI properties might work with other application servers, but that's not the way it is done in JBoss. Your plain Java app should do a JAAS login, using the JBoss ClientLoginModule. This module will take care of passing security information (e.g. user name) to the EJB stubs, so that the EJB container can identify the caller (and you can request this information with getCallerPrincipal()).

[darranl]

It is possible to pass in the login principle and credentials when obtaining the InitialContext: -

http://wiki.jboss.org/wiki/Wiki.jsp?page=LoginInitialContextFactory
http://wiki.jboss.org/wiki/Wiki.jsp?page=JndiLoginInitialContextFactory

The server will still need to be configured to peroform the actual authentication.