GateIn : Customizing authentication and Role based migration

[selfcare]

Hi all,

After struggling for a long time, figured out (to some extent) authentication in GateIn and

customising it.. This post might help all those trying the same.

Below are the steps I followed.

In ..\gatein_project\packaging\jboss-as6\pkg\target\jboss\server\default\deploy\gatein.ear\META-INF

I changed gatein-jboss-beans.xml as  below.

Instead of org.exoplatform.services.organization.idm.CustomMembershipLoginModule,

I gave "myPackage.myClass"

Here myClass extends AbstractLoginModule.

I made a jar having myPackage and deployed it in

../gatein_project/packaging/jboss-as6/pkg/target/jboss/server/ports-01/deploy/gatein.ear/lib

and restarted the server.

Now, you can write your own code in myClass.

Imp : JbossLoginModule in gatein-jboss-beans.xml should be uncommented. This has "exo.security.identity".

If its commented, code will not enter if (this.sharedState.containsKey("exo.security.identity")) in myClass

and it will throw "No identity found error"

Now the java scripts in login.jsp of GateIn were put into myLogin.jsp

After authentication, instead of redirecting to GateIn home page, it was redirected to myHomePage.

Now, am struggling to understand JBID  tables used by GateIn..

Also, not getting how can I do Group/Role based migration (Because I have not understood those tables)

If any one knows , please share....

Regards,

[mposolda]

Hi,

I am not sure which group/role based migration you need. If you want to migrate DB from one environment to another, you may want to port all jbid_* tables in your database.

GateIn is using picketlink IDM framework for perform identity operations related to users, groups and memberships. Identity objects (both users and groups) are in table jbid_io and their atributes in table jbid_io_attr and jbid_io_attr_text_values . Roles(memberships) are in jbid_io_rel .

More useful informations about overall concepts and design are in picketlink IDM reference guide http://anonsvn.jboss.org/repos/picketlink/idm/downloads/docs/1.0.0.GA/ReferenceGuide/en-US/html_single/index.html or in GateIn reference guide or http://community.jboss.org/wiki/GateInIdentityAndSecurityFAQ .

[mposolda]

Another thing is that if you want some users, group or memberships to be present in your environment from startup of portal, you can thin about adding these users, groups or memberships into file server/default/deploy/gatein.ear/02portal.war/WEB-INF/conf/organization/organization-configuration.xml .

More info about this approach in GateIn reference guide http://docs.jboss.org/gatein/portal/3.2.0-M01/reference-guide/en-US/html/chap-Reference_Guide-Authentication_And_Identity.html#sect-Reference_Guide-Predefined_User_Configuration

Hope it helps,

Marek