I am pretty new to this forum, but I have deployed a JBoss application to a hosting vendor (WebAppCabaret). They way that WebAppCabaret works is that you get a local copy of the configuration files, and you can change them. I found that I needed to do this to setup a datasource and I will have to do that to set up security realms for the next application I upload (haven't done that yet).
The specifics will vary with the hosting company of course.
My domain uses database authentication via the following snippet in the login-config.xml:
<application-policy name = "DrillSgt">
<login-module code = "org.jboss.security.auth.spi.DatabaseServerLoginModule"
flag = "required">
<module-option name = "dsJndiName">java:/DrillDB</module-option>
<module-option name = "principalsQuery">select Password from UserDS where Email = ?</module-option>
<module-option name = "rolesQuery">select Role, RoleGroup from RoleDS where Email = ?</module-option>
HTH (and that someone will answer my question on Roles/JAAS)...
about security domains and service providers:
one soultion can be the following:
the service provider set's up some security.domain "customer" using the proxy login module
and specifying a class name "customer.security.LoginModule" ( or whatever name he prefers" ).
customers provide an implementation of this LoginModule inside there .war file and specify the "customer" domain in the jboss-web.xml file.
Hi thanks for the responses.
I thought this might be a stumbeling block but both seem like reasonably straight forward sollutions.
I think we will use webAppCaberet they seem pretty cheap with a good service... unles anybody has any other sugestions. (We did hope to use myCgiServer but they seem to be draggin the J2EE thing right out.)
(My last reply seemed to dissapear, so this may go in twice)
Thanks for the info.
Both sollutions seem resonably straight forward, nice to know that these things are really being used live and that solutions are in place.
We will probalby go with WebAppCaberet unless MyCGIServer gets its finger out and goes live with J2EE.