4 Replies Latest reply on Sep 19, 2011 10:53 AM by mign

How to do login/password authentication with JBoss 7?

mign Sep 16, 2011 5:15 AM

Coming from Glassfish I used com.sun.appserv.security.AppservPasswordLoginModule and com.sun.appserv.security.ProgrammaticLogin for performing authentication. With migration to JBoss 7.01 this is not the way to go any more. Unfortunately instead of documentation there is only an open bug that documentation or authentication stuff is missing.

Do you have any tip where to get information or help? Thanks in advance...

1. Re: How to do login/password authentication with JBoss 7?

jaikiran Sep 19, 2011 4:19 AM (in response to mign)

Can you provide a bit more details on what those 2 (GlassFish) classes provided you? And what kind of authentication are you looking for?
Actions
2. Re: How to do login/password authentication with JBoss 7?

mign Sep 19, 2011 6:34 AM (in response to jaikiran)

Please have a look:
http://kickjava.com/src/com/sun/appserv/security/AppservPasswordLoginModule.java.htm
http://kickjava.com/src/com/sun/appserv/security/ProgrammaticLogin.java.htm
Actions
3. Re: How to do login/password authentication with JBoss 7?

dlofthouse Sep 19, 2011 9:12 AM (in response to mign)

The main information regarding the security configuration can be found here: -

https://docs.jboss.org/author/display/AS7/Security+subsystem+configuration

For a simple username / password authentication you would probably be looking for the UsersRoles login module although there are other modules listed if you want to work with an existing database or ldap installation.

What type of app are you actually enabling security on?
Actions
4. Re: How to do login/password authentication with JBoss 7?

mign Sep 19, 2011 10:53 AM (in response to dlofthouse)

Our application is a Swing client talking RMI with the server. Authentication is simply username & password.

Glassfish's programmatic login work on the client side:
"... the actual login will not occur until we actually access a resource requiring a login. And a java.rmi.AccessException with COBRA NO_PERMISSION will occur when actual login is failed."

Login modules are to be used on the server side as far as I understand?
Actions

Go to original post