Log into GateIn with unregistered users (but identified by jaas login module)

[felixb]

Hello,

Here is my problem: I've a jaas login module working for Jboss portal that is also working for GateIn.  But I can't log into the portal without registrating my users (already created & stored in db) beforehand in GateIn.

In Jboss Portal, there is the  "org.jboss.portal.identity.auth.SynchronizingLoginModule" that allows synchronization of subject principals into portal's roles.

Is there any equivalent module for GateIn, or another way to do that?

Or simply, am I missing something ?

[mposolda]

Hello,

there is CustomMembershipLoginModule in GateIn portal, which can be uncommented in server/default/deploy/gatein.ear/META-INF/gatein-jboss-beans.xml and it can be used to add authenticated user into some group in portal database (for example member:/platform/users ). Source code of this login module is here http://anonsvn.jboss.org/repos/gatein/portal/trunk/component/identity/src/main/java/org/exoplatform/services/organization/idm/CustomMembershipLoginModule.java and some additional informations are here https://issues.jboss.org/browse/GTNPORTAL-1347 .

This login module can be used only to assign roles but it cannot be used to add user into portal database, so it's not so powerfull as SynchronizingLoginModule in JBoss Portal. You can try to implement your own login module if you want this feature and register new user. You can use Organization API, which is described in GateIn reference guide.

[felixb]

Hello Marek,

Thanks for the answer!  That's what I need.

Anyway, I'm running the 3.1 version of GateIn and I can't find this module either in the gatein-jboss-beans.xml or in the .jars.  Is there classes to add to get those features?

[trong.tran]

it was added to 3.2 version only which is still in development. You would take a look at :

1/ JIRA issue https://issues.jboss.org/browse/GTNPORTAL-1347

2/ the commit http://fisheye.jboss.org/changelog/gatein?cs=3597

[felixb]

Thx for the info Trong Tran!

[stevepamer]

Has anyone retrofit this to 3.1 GA?

I would like to try this as I am having trouble getting external LDAP users to work correctly.

I can log them in but the top banner (logout) is missing.

Has anyone posted a jar with the necessary items?

Thanks in Advance.

Steve

[mposolda]

Hello Steve,

This will be available in GateIn 3.2 and currently is in GateIn trunk. You can try to build GateIn from sources if you want this feature.

Another thing is that you can try to compile and package login module class by yourself. The easiest way (with maven) can be:

- Create your maven project and add only CustomMembershipLoginModule into this project

- Add some necessary dependencies. I think that list of dependencies mentioned here http://anonsvn.jboss.org/repos/gatein/portal/tags/3.1.0-GA/component/identity/pom.xml should work. It may be also good to use the same parent as mentioned pom.xml so that you will have correct versions of components.

- Build project with "mvn package" and put JAR into server/default/deploy/gatein.ear/lib/

- Add your login module into server/default/deploy/gatein.ear/META-INF.gatein-jboss-beans.xml

You can also try to build it without maven (simply with javac and manual adding of needed dependencies into classpath)

Good luck,

Marek