1 Reply Latest reply on Apr 22, 2003 7:34 PM by Andy Godwin

    Lasting Credentials

    frobazz Newbie
    frobazz Apr 22, 2003 1:34 PM

      Hey all,

      I have a set of java client applications that authenticate to a set of EJBs running in JBoss using JAAS. These clients are short-lived "command-line" programs that implement a job-control system. I'd like to have the clients be able to log in once at the beginning of the session and keep around some sort of credential allowing for auto-login from the same machine/location/user for a period of time, without having to re-login - Similar in nature to cvs login.

      Does anyone know if there are any packages to support such a thing in JAAS, or will I have to write my own?

      Thanks in advance,
      frobazz (Mike Lanzetta)

      • 1944 Views
      • Tags:
        • 1. Re: Lasting Credentials
          Andy Godwin Newbie
          Andy Godwin Apr 22, 2003 7:34 PM (in response to frobazz)

          AFAIK, there's nothing in JAAS to support persistent
          logins. The login credentials are sent from the client
          with every request, so once the client-side java
          process terminates those credentials are gone.

          CVS login works by just saving the login credentials to
          a file, $HOME/.cvspass by default, I think. You could
          do a similar thing in your apps (you might want to
          encrypt the contents a bit, like CVS does). You could
          add a timeout by checking the file's creation time, for
          example.

          HTH