0 Replies Latest reply on Aug 2, 2006 12:28 PM by kistler59

    Flash Remoting and jaas authentication, with credential prop

    kistler59

      Does anyone have any experience deploying flash remoting in jboss's tomcat environment and authenticating invocation with jaas?

      We are developing an application which uses a flash ui, that communicates with our slsb deployed on jboss via the flash remoting service deployed in the tomcat environment as a servlet. We wish to be able to apply security constraints to the service which i have done by adding


      <security-constraint>
      <web-resource-collection>
      <web-resource-name>All resources</web-resource-name>
      <description>Protects all resources</description>
      <url-pattern>/*</url-pattern>
      </web-resource-collection>
      <auth-constraint>
      <role-name>FlashRole</role-name>
      </auth-constraint>
      </security-constraint>

      <security-role>
      <role-name>FlashRole</role-name>
      </security-role>

      <login-config>
      <auth-method>BASIC</auth-method>
      <realm-name>Test Realm</realm-name>
      </login-config>


      to the web.xml file and setting the security domain in jboss-web.xml

      When accessing the service via a web browser it prompts the user for a username and password. However we having some difficulty connecting to flashremoting.

      Has anybody done this successfully or is this possible?

      And will authenticating this connection with flash remoting result in the propogation of credentials from flash remoting to our slsb?

      Thanks in advance.
      -Keith