1 Reply Latest reply on Mar 3, 2009 6:56 AM by gaohoward

    Configure JBoss Messaging with JAAS

    franbekh

      Hello,

      I'm currently moving our application from JBoss 4.2.3.GA to JBoss 5.0.1.GA. I have some problems in configuring JAAS with the new JBoss Messaging. Here my configuration:

      - My application policy in login-config.xml

      <application-policy name = "messaging">

      <login-module code="org.jboss.security.auth.spi.LdapLoginModule" flag="required">
      <module-option name="java.naming.factory.initial">com.sun.jndi.ldap.LdapCtxFactory</module-option>
      <module-option name="java.naming.provider.url">ldap://localhost:389</module-option>
      <module-option name="java.naming.security.authentication">simple</module-option>
      <module-option name="principalDNPrefix">cn=</module-option>
      <module-option name="principalDNSuffix">XXXXXXXXX</module-option>
      <module-option name="rolesCtxDN">XXXXX</module-option>
      <module-option name="roleSearchFilter">(cn={0})</module-option>
      <module-option name="roleAttributeID">UserRoles</module-option>
      <module-option name="searchTimeLimit">5000</module-option>
      <module-option name="searchScope">ONELEVEL_SCOPE</module-option>
      </login-module>

      </application-policy>

      -> The jaas configuration work! I checked it by securing the web-console

      here my settings in destination-service.xml

      <mbean code="org.jboss.jms.server.destination.TopicService" name="jboss.messaging.destination:service=Topic,name=systemEventTopic" xmbean-dd="xmdesc/Topic-xmbean.xml">
      <depends optional-attribute-name="ServerPeer">jboss.messaging:service=ServerPeer
      jboss.messaging:service=PostOffice







      Here my settings in messaging-jboss-beans.xml

      <!-- default security configuration -->

      <![CDATA[



      ]]>

      changeit
      java:/jaas/messaging

      <!-- @JMX annotation to export the management view of this bean -->
      @org.jboss.aop.microcontainer.aspects.jmx.JMX(name="jboss.messaging:service=SecurityStore",exposedInterface=org.jboss.jms.server.jbosssx.JBossASSecurityMetadataStoreMBean.class)


      When I start jboss I get an exception that the user is not authenticated. Did I make a mistake in my configuration?

      Thanks in advance,
      Bernd