Version 11



         This article describes how to correctly configure the JBoss AS 7.1.1 in order to use PicketLink.

         JBoss AS 7.1.1 is shipped with PicketLink 2.0.2.Final, but some users experienced some problems when using it with this version of the JBoss AS. For more information, see

         This article also works for newer versions of PicketLink. Just replace the jar files and update the module.xml with the correct file names.


    Configuring the module org.picketlink    


         The JBoss AS 7.1.1 is shipped with a PicketLink's module. This module is located in:




         This directory contains another one called main, related with the default PicketLink's configuration and jar files used by the JBoss AS. The version 7.1.1 of the JBoss AS uses by default the PicketLink 2.0.2 version.


         To update the PicketLink's module configuration do the following:


              1) Backup first the ${jboss.home.dir}/modules/org/picketlink/main directory;


              2) cd ${jboss.home.dir}/modules/org/picketlink/main;


              3) Edit the module.xml file like this (you can also download an updated module.xml from this thread


                        <module xmlns="urn:jboss:module:1.1" name="org.picketlink">


                                          <resource-root path="picketlink-fed-2.0.2.Final.jar"/>

                                          <resource-root path="picketlink-bindings-2.0.2.Final.jar"/>

                                          <resource-root path="picketlink-bindings-jboss-2.0.2.Final.jar"/>

                                          <resource-root path="picketlink-trust-jbossws-2.0.2.Final.jar"/>



                                          <module name="javax.api"/>

                                          <module name=""/>

                                          <module name=""/>

                                          <module name="javax.transaction.api"/>

                                          <module name="javax.xml.bind.api"/>

                                          <module name=""/>

                                          <module name="javax.servlet.api"/>

                                          <module name="org.jboss.common-core"/>

                                          <module name="org.jboss.logging"/>

                                          <module name=""/>

                                          <module name=""/>

                                          <module name="org.picketbox"/>

                                          <module name=""/>

                                          <module name="org.apache.log4j"/>

                                          <!-- <module name="org.apache.santuario.xmlsec"/> --> <!-- Comment this line out -->

                                          <module name="sun.jdk"/> <!-- Add this new module dependency -->




              4) You also need to update the sun.jdk module definition. To that, please edit the module.xml and add the following configuration (you can also download an updated module.xml from this thread


                        <module xmlns="urn:jboss:module:1.1" name="sun.jdk">





                                  <system export="true">



                                            <!-- Add this lines -->

                                            <path name="javax/xml/crypto/dsig"/>

                                            <path name="javax/xml/crypto"/>

                                            <path name="javax/xml/crypto/dsig/dom"/>

                                            <path name="javax/xml/crypto/dsig/keyinfo"/>

                                            <path name="com/sun/org/apache/xml/internal/security/transforms/implementations"/>

                                            <path name="org/jcp/xml/dsig/internal/dom"/>                                       






    Backward compatibility with older versions


         Please follow the instructions described in