Hi ramesh ,

Thank you for replying.

I have read the document but I have some doubt.

actually ,I have a server principal <abc.mycompany.com> along with its pw.I have MIT kerberos client installed to get ticket for this particular user.

I have .keytab file associated with this user.Till now what I did is ------

<transport name="jdbc" protocol="teiid" socket-binding="teiid-jdbc"/>

  <authentication security-domain="teiid-security" krb5-domain="host"/>

</transport>

----------------------------------------

<security-domain name="host">

<authentication>

<login-module code="Kerberos" flag="required">

<module-option name="storeKey" value="true"/>

<module-option name="useKeyTab" value="true"/>

<module-option name="principal"

value="host/abc@mycompany.com"/> <!-- service principal -->

<module-option name="keyTab" value="/path/to/service.keytab"/>

<module-option name="doNotPrompt" value="true"/>

<module-option name="debug" value="false"/>

</login-module>

</authentication>

</security-domain>

----------------------------------------

<security-domain name="mycompany">

<authentication>

<!-- Check the username and password -->

<login-module code="SPNEGO" flag="requisite">

<module-option name="password-stacking" value="useFirstPass"/>

<module-option name="serverSecurityDomain" value="host"/>

</login-module>

<!-- Search for roles -->

<login-module code="UserRoles" flag="requisite">

<module-option name="password-stacking" value="useFirstPass" />

<module-option name="usersProperties" value="spnegousers.

properties" />

<module-option name="rolesProperties" value="spnegoroles.

properties" />

</login-module>

</authentication>

</security-domain>

Now My doubt is there has to be a outbound connection to LDAP right ?? So that the roles can be fetched.I could not find any authorization module having LDAP configuration.How authentication is done if I dont use LDAP configuration along with role search pattern.

Please let me know if any point I am wrong.as well as whether the modification in the standalone.xml is correct or not.

Thank you

Debashish Saha

Chapter 2. How to Setup SSO for Red Hat JBoss Enterprise Application Platform 6 with Kerberos - Red Hat Customer Portal

the screenshot is taken from the link mentioned here.

Can you please tell me what would be login module name in the document that you have provided.I doubt it to be" AdvancedAdLdap".If I am right can you please let me know what would be the parameters for writing up the module in case of AdvancedAdLDAP.