How to validate (j_sercurity_check) in JBOSS (Please help me)

[blainemon]

I've a web application running in tomcat, but I need use JBOSS. Tomcat uses jdbc realm to validate. I don't know how can I do the same in JBoss.

My login.jsp page uses j_security check, I've configured the JDBC Realm in the server.xml Tomcat file. For example:

<Context docBase="PerApp" path="/PerApp" reloadable="true" source="org.eclipse.jst.jee.server:PerApp">
     
      <Realm className="org.apache.catalina.realm.JDBCRealm"
                connectionName="admin" connectionPassword="personal"
                    connectionURL="jdbc:oracle:thin:@192.168.100.15:1521:Per"
                    driverName="oracle.jdbc.driver.OracleDriver"
                    roleNameCol="role_name" userCredCol="user_pass"
                    userNameCol="user_name" userRoleTable="user_roles"
                    userTable="users"/>
     
      </Context>

How Can I do the same in JBoss?

[wolfgangknauf]

Hi,

in JBoss, you might use a similar approach. I JBoss, you don't configure "Realms" but a "JAAS security domain". This one in configured in "jboss-web.xml" (assuming that you use 5.0 or newer):

{code}
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE jboss-web PUBLIC
    "-//JBoss//DTD Web Application 5.0//EN"
    "http://www.jboss.org/j2ee/dtd/jboss-web_5_0.dtd">

<jboss-web>
    <security-domain>mysecuritydomain</security-domain>
    
</jboss-web>
{code}

Then, you use either "login-config.xml" (pre-JBoss 5.1, see http://community.jboss.org/wiki/DatabaseServerLoginModule ) or a "...-jboss-beans.xml" file (see http://server.dzone.com/articles/security-features-jboss-510 ) to configure a "Login Module" which performs database lookup.

The only problem left is  that you have to configure a new DataSource pointing to your oracle database and bind this DataSource to JNDI.

Hope this gives you something to start with.

Wolfgang