2 Replies Latest reply on Dec 19, 2011 7:08 AM by stannous

Encrypting the Keystore Password in a Tomcat Connector problem

glogu Dec 2, 2011 3:32 AM

Hi everybody !

I want to encrypt my truststore password using this tutorial:

http://docs.jboss.org/jbosssecurity/docs/6.0/security_guide/html/Encrypting_The_Keystore_Password_In_Tomcat.html

there's an instruction like this:

"Navigate to $JBOSS_HOME/server/$PROFILE/deploy/jbossweb.sar/META-INF. Open jboss-service.xml and add the following <depends> tag towards the end. "

But there's no such file in my JBOSS distribution ! There're only jboss-beans.xml, jboss-scanning.xml and jboss-structure.xml file there.

I try to change other files adding dependecy tag but i keep getting:

"Error installing to Start: name=jboss.security:service=

PBESecurityDomain state=Create mode=Manual requiredState=Installed: javax.management.InstanceNotFoundException: jboss.security:service=JaasSecurityManager is not registered."

Is this some kind of Bug ? Which file schould I change ? Or maybe I need to create jboss-service file in that location ?

I use JBoss 6.0.0.Final.

Thank you in advance.

1. Re: Encrypting the Keystore Password in a Tomcat Connector problem

glogu Dec 7, 2011 3:56 AM (in response to glogu)

anybody ?
Actions
2. Re: Encrypting the Keystore Password in a Tomcat Connector problem

stannous Dec 19, 2011 7:08 AM (in response to glogu)

You can configure the JaasSecurityDomain in the AppServer\server\all\conf\jboss-service.xml file (create it if it doesn't exist). These pages might help:

http://docs.jboss.org/jbosssecurity/docs/6.0/security_guide/html/Login_Modules.html

http://docs.redhat.com/docs/en-US/JBoss_Enterprise_Application_Platform/5/html/Security_Guide/Using_LdapExtLoginModule_with_JaasSecurityDomain.html

One thing these examples fail to mention however is the <depends> attribute. Leaving it out caused the "JaasSecurityManager is not registered" error for me. Here's a working example:

<server>

   <mbean code="org.jboss.security.plugins.JaasSecurityDomain" name="jboss.security:service=JaasSecurityDomain,domain=myDomain">
      <constructor>
         <arg type="java.lang.String" value="myDomain" />
      </constructor>
      <attribute name="KeyStoreURL">resource:test.jks</attribute>
      <attribute name="KeyStorePass">password</attribute>
      <depends>jboss.security:service=JaasSecurityManager</depends>
   </mbean>

</server>
Actions

Go to original post