2 Replies Latest reply on Apr 12, 2013 10:25 AM by elapaz

    Propagating SecurityContext across EJB remote call

    elapaz
    elapaz Apr 10, 2013 11:31 AM

      Hi all,

      I've been working on a distributed application having secured ejbs. I followed the tutorial https://docs.jboss.org/author/display/AS71/EJB+invocations+from+a+remote+server+instance , but still have a problem.

      When my secured "ejb1" calls secured remote "ejb2" in a different jboss, im losing SecurityContext. I'm using the same security domain in both applications in jboss as 7.1.1.

       

      After some tests, I noticed that the remote call works fine if i use the security domain "other" (which is being used for JBoss EJB Receiver authentication). The point is that I want use the same security domain that "ejb1" uses instead of other, but couldn't make it work.

      I think the problem is that SecurityContext isn't propagating through remote calls.

       

      Does anyone knows a way to propagate that SecurityContext?

       

      thanks by the way

       

      Eduardo