How to disable application-managed-security in jboss 6.2 ?

[vaibhav228]

We are migrating from JBoss 5.1 to JBoss EAP 6.2.

In 5.1, for creating and authenticating DB, we have used <security-domain> in db2-ds.xml and <security-domain> is in the login-config.xml.

Also <application-managed-security> tag is not set, So it is not application-managed-security, but while getting connection from Datasource we have used -

Connection conn = ds.getConnection("DB_USER","DB_USER");

In 5.1 this code works fine and takes the username and password from login-config.xml only, even we have overridden the username, password in the code.

In 6.2 I have mentioned the security-domain in the standalone.xml, it gets the username and password properly, but when it comes to above code line, it overrides the username & password.

which results in failure of getting connection as username & password are not correct.

If I use only

Connection conn = ds.getConnection();

It works properly.

I don't want to change the code, as same base module is used by different project. But How can I disable the application-managed-security in 6.2 ? Is it by default enabled ?

I referred the docs , they say application-managed-security is not supported in EAP 6.2. How to not consider the overridden username & password ?

[jaysensharma]

Yes, you are right the "application-managed-securit" is not available in EAP6

Hence if you pass any credential while getting the connection from the DataSource like following, Then those credentials will take preference as it is defined as part of the SE specification [1]:

     ds.getConnection("DB_USER","DB_USER");

  So i see that the code change is the only option.

[1] http://docs.oracle.com/javase/7/docs/api/javax/sql/DataSource.html#getConnection(java.lang.String,%20java.lang.String)

Regards

Jay SenSharma

[mayerw01]

If you are looking for an anonymous access you can do so by removing the security-realm="ApplicationRealm" from the <http-interface> element (Security Realms - JBoss AS 7.1 - Project Documentation Editor)