Where to specify security-domain in .ear?

[zemunk]

Hi,

I'm migrating an application from Jboss 5 to Jboss 7. In jboss 5 the security-domain was specified in the .ear's jboss.xml.

For now I only tried to migrate the backend but the security-domain doesn't seem to be read from jboss.xml anymore.

Here is the standalone.xml domain specification:

               <security-domain name="gfo" cache-type="default">
                    <authentication>
                        <login-module code="Database" flag="required">
                            <module-option name="unauthenticatedIdentity" value="guest"/>
                            <module-option name="dsJndiName" value="java:/GFO_DS"/>
                            <module-option name="principalsQuery" value="SELECT passwd FROM users WHERE users.user=?"/>
                            <module-option name="rolesQuery" value="SELECT role, 'Roles' FROM roles WHERE roles.user=?"/>
                        </login-module>
                    </authentication>
                </security-domain>
                <security-domain name="other" cache-type="default">
                    <authentication>
                        <login-module code="org.jboss.security.auth.spi.UsersRolesLoginModule" flag="required"/>
                    </authentication>
                </security-domain>

If I try testing the webservices the security-domain "other" is taken instead of gfo as specified in jboss.xml:

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE jboss PUBLIC "-//JBoss//DTD JBOSS 5.0//EN" "http://www.jboss.org/j2ee/dtd/jboss_5_0.dtd" >
<jboss>
    <security-domain>gfo</security-domain>
</jboss>

When I tried out the database authentification in "other", I could test the services.

Could anyone please tell me where to specify the security-domain in an ear for jboss 7?

The help is very much appreciated!

[sfcoy]

Create a file called jboss-app.xml and place it in the EAR's META-INF directory (with the application.xml).

Put this in it:

<jboss-app xmlns="http://www.jboss.com/xml/ns/javaee"
             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
             xsi:schemaLocation="http://www.jboss.com/xml/ns/javaee
                            http://www.jboss.org/j2ee/schema/jboss-app_6_0.xsd"
             version="6.0">
     <security-domain>gfo</security-domain>
</jboss-app>

(There doesn't seem to be an AS 7.x version of this)

[zemunk]

Thank you, Stephen!

I will try it out on monday, hope it works

[zemunk]

I tried adding jboss-app.xml but it did not help. The trace shows that it is still being ignored.

Furthermore, among the listed schemas shown in https://community.jboss.org/wiki/JBossDTDs  I couldn't locate jboss-app_6_0.xsd. It seems to be using that of jboss 5.

Adding jboss-app.xml with the following content didn't help either:

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE jboss-app PUBLIC "-//JBoss//DTD Java EE Application 5.0//EN" "http://www.jboss.org/j2ee/dtd/jboss-app_5_0.dtd" >

<jboss-app>

    <security-domain>gfo</security-domain>

</jboss-app>

I also found your post https://community.jboss.org/message/648034. Does this mean that security domain definitions are not yet supported in jboss-app.xml (and jboss.xml)?

[sfcoy]

jboss-app_6_0.xsd exists in the AS7 source code.

However, my experiments described at @RolesAllowed, @DenyAll require presence of org.jboss.ejb3.annotation.SecurityDomain? also indicate that the security-domain specified in a deployment descriptor does not seem to work.

It's smelling more like a bug or its not yet implemented...

[zemunk]

Could you please share the link of the issue with me if you posted it?

Thank you!

And congratulations for your promotion