2 Replies Latest reply on Nov 11, 2012 6:14 PM by atijms

JASPI ServerAuthModule

herb Jan 5, 2012 9:49 AM

I've a self written JASPI ServerAuthModule, which works great in Glassfish. Now I had to switch to AS 7.

I have not found any resources how to configure a JASPI ServerAuthModule in AS 7?!

I put my jar in a AS7 module, added it as an extansion in standalone.xml, but how can I activate it?

Do I have to declare a security-domain (how?), or does security-domain allow only Picketbox modules?

All resources (I found) refer to Picketbox?

Thanks,

herb

1. Re: JASPI ServerAuthModule

ranjan.khanna Oct 18, 2012 3:20 PM (in response to herb)

Were you able to make it work for JBOSS. If Yes, could you please share some details.

Thanks.
Actions
2. Re: JASPI ServerAuthModule

atijms Nov 11, 2012 6:14 PM (in response to ranjan.khanna)

The general documentation can be found here: https://community.jboss.org/wiki/JBossAS7EnablingJASPIAuthenticationForWebApplications

But the current version of JBoss AS (7.1.1) contains various bugs, so it might still not actually work. I've written about this here: http://arjan-tijms.blogspot.nl/2012/11/implementing-container-authentication.html

See this for the one of the issues regarding the bugs: https://issues.jboss.org/browse/JBPAPP-10225

If I'm not mistaken there was another NPE bug in AS 7.1.1 that was fixed in 7.1.2 (which was not released as such, but can be downloaded as JBoss EAP 6.0.0 or build from source).
Actions