1 Reply Latest reply on Oct 19, 2004 9:15 PM by Scott Stark

    How to make sure JBoss invokes custom login when using j_sec

    Subri Shastry Newbie

      Hi,

      I want to know how can I make JBOSS invoke my custom login module using j_security_check.

      If we do not use j_security_check and use JAAS for instance our custom login module gets invoked. However we want to use j_security_check for web clients as we are using form based authentication.

      Here is the relevant content of the jsp that uses j_security_check.


      <TABLE BORDER=0 CELLPADDING=1 CELLSPACING=0>
      <TR ALIGN=LEFT VALIGN=MIDDLE><TD NOWRAP>User Name<TD NOWRAP><INPUT TYPE=TEXT name="j_username" SIZE=28 CLASS=INPUTSTANDARD>
      <TR ALIGN=LEFT VALIGN=MIDDLE><TD NOWRAP>Password<TD NOWRAP><INPUT TYPE=PASSWORD name="j_password" SIZE=28 CLASS=INPUTSTANDARD>





      Below is portion of the the login_config.xml
      - <!-- Security domain for prompt2
      -->
      - <application-policy name="prompt2">
      -
      <login-module code="org.jboss.security.ClientLoginModule" flag="required" />
      - <login-module code="com.retalix.services.security.authentication.jboss.CustomDBLoginModule" flag="required">
      <module-option name="dsJndiName">java:/jdbc/prompt2DataSource</module-option>
      <module-option name="principalsQuery">Select Bus_Password from Base_User where Bus_Login_Id =?</module-option>
      <module-option name="managedConnectionFactoryName">jboss.jca:service=LocalTxCM,name=prompt2DataSource</module-option>
      </login-module>

      </application-policy>