How to propagate user identity on remote ejb call ?

[remib33]

Hi,  I'm in the configuration where i want to call a deployed ejb on another server instance from another ejb which is called from a webapp.

I followed this kink of tutorial (https://docs.jboss.org/author/display/AS71/EJB+invocations+from+a+remote+server+instance) to configure JBoss and it works but it's not exactely what i want because in this tutorial the user used to perform the remote call is fixed (username=ejb) in the configuration.

I want to make the remote call with the user authenticated on the webapp and not with the predefined user configured on the remote-outbound-connection.

How should i do that ? In another words, how could i propagate user identity on remote ejb calls ?

Ps : i didn't find a post answering clearly this question.

Pss : i'm using the "UsersRoles" login module to log in the webapp. The called method on the distant ejb is secured and can be accessed by roles owned by the webapp user.

[robby.cornelissen]

Take a look at this thread: https://community.jboss.org/message/811052#811052

In essence, this feature seems to be scheduled for implementation (https://issues.jboss.org/browse/AS7-5047),  but in the meantime, you can work around it by using a combination of EJB client/server interceptors and a custom JAAS login module as described here: https://github.com/jboss-jdf/jboss-as-quickstart/tree/master/ejb-security-interceptors

[remib33]

Thanks Robby for your quick answer.

It's not so simple but very helpful.

[elapaz]

Hi,

Does Wildfly 8.0.0.Alpha4 got it fixed? The issue AS7-5047 seems abandoned

Thanks btw