8 Replies Latest reply on Mar 16, 2006 3:16 PM by Tyrone Hed

    Single Signon

    Ram Alluri Newbie

      I have been trying to implement single signon between two apps both running on the same app instance.

      I've added the following line in server/default/conf/jboss-service.xml :



      Still not working. Am I missing anything. Can some one advise me

        • 1. Re: Single Signon
          Brian Stansberry Master

          Don't know what you did in conf/jboss-service.xml as it got dropped from your post, but in any case see

          http://wiki.jboss.org/wiki/Wiki.jsp?page=SingleSignOn

          • 2. Re: Single Signon
            Tyrone Hed Newbie

            Brian,
            Having pored over that Wiki you reference, I must say that implementing SingleSignOn is VASTLY more complicated than the Wiki alleges. I have been working on it for three weeks and it is disingenuous to suggest it's so easy. Have YOU ever implemented SingleSignOn based on that Wiki?
            Thank you,
            Ty

            • 3. Re: Single Signon
              Brian Stansberry Master

              Yes, I have. Many times.

              • 4. Re: Single Signon
                Tyrone Hed Newbie

                Brian,
                Your last post is precisely why these Forums are minimally useful. Rather than attempting to solve problems, you just resort to ridicule. I have gotten several calls from JBoss Support representatives--trying to sell me professional services--but I will not spend my company's money to get ridiculed.

                • 5. Re: Single Signon
                  chris griffith Expert

                  In defense of Brian,

                  It would be nice to see some more detail other than, "this is not working." There are two posts going on at the same time about this issue when that is not needed. In any case, how about some TRACE logging of Tomcat's security layer as I mentioned in the other thread.

                  I too, am trying to help. cgriffith

                  • 6. Re: Single Signon
                    Tyrone Hed Newbie

                    j2ee_junkie,

                    Okay, I will gladly post the apparently relevant contents of the log.

                    And you must admit that my other post was quite detailed.

                    Thank you,
                    Ty

                    • 7. Re: Single Signon
                      Brian Stansberry Master

                      tyronehed,

                      I too very much want to help, and provided you a much more constructive reply on the other thread you opened on this same topic. And I will continue to do so, as long as we are having a constructive conversation. You have now made it clear that your authentication scheme works on a per-webapp basis. Chris' request for TRACE level logging is the next step.

                      Your comment asking "Have YOU ever implemented SingleSignOn based on that Wiki? " 1) shouts at me and 2) implies I don't do my job. I regard that as abusive and feel no obligation to ignore that. My response to that was pretty mild. The forums are a free service; if you want to be abusive, you shouldn't expect to be treated with kid gloves.

                      Obviously, if you are a support customer asking for help on our support portal, we have to ignore non-constructive comments and purely focus on getting your problem resolved. But you aren't a support customer, you're someone asking for free help.

                      • 8. Re: Single Signon
                        Tyrone Hed Newbie

                        Brian,
                        Thank you for your reply. I have posted a rather long trace in the other post that I started. I apologise for taking up your bandwith with its size. I have been working on this for three weeks without disturbing the free resource that JBoss provides here. As you know from the public nature of these posts, helping one person helps everybody. I apologise for venting my three-week's-long frustration at you. When I am asked a question, I give a complete and thorough explanation or none at all.
                        I could quite easily ask my CIO to pay for JBoss Professional Services but--for the reason I stated previously--I will not. You should know when you reply to us on the board with a domain of jboss.org that you are inevitably representing your company, as I do mine. As I said, it is only after three weeks of 16-hour days, poring over the source code for Tomcat and JBossAS, that I resort to airing my question in public--exactly because of the type of unhelpful, half-answers that one inevitably gets. If I offend you, please feel free to ignore my posts. I assure you I come to these forums as a last resort. I have found Gavin King to be the same type--full of sarcasm. That's why I have given up on asking any questions on Hibernate's Forums. My company also has a support agreement with IBM for our projects that use WebSphere. They are always helpful but, as you correctly noted, you get what you pay for.

                        Thank you,
                        Ty