Return-Path: 
 <geronimo-dev-return-825-apmail-incubator-geronimo-dev-archive=incubator.apache.org@incubator.apache.org>
Delivered-To: apmail-incubator-geronimo-dev-archive@incubator.apache.org
Received: (qmail 67286 invoked by uid 500); 12 Aug 2003 15:05:53 -0000
Mailing-List: contact geronimo-dev-help@incubator.apache.org; run by ezmlm
Precedence: bulk
list-help: <mailto:geronimo-dev-help@incubator.apache.org>
list-unsubscribe: <mailto:geronimo-dev-unsubscribe@incubator.apache.org>
list-post: <mailto:geronimo-dev@incubator.apache.org>
Reply-To: geronimo-dev@incubator.apache.org
Delivered-To: mailing list geronimo-dev@incubator.apache.org
Received: (qmail 67248 invoked from network); 12 Aug 2003 15:05:53 -0000
Received: from unknown (HELO george.toolazydogs.com) (166.84.147.110)
  by daedalus.apache.org with SMTP; 12 Aug 2003 15:05:53 -0000
Received: by customer.panix.com with Internet Mail Service (5.5.2653.19)
	id <NSQ69QPV>; Tue, 12 Aug 2003 11:16:46 -0400
Message-ID: <149246706FF1AF4996A41898AB45325310F2@customer.panix.com>
From: Alan Cabrera <adc@toolazydogs.com>
To: "'geronimo-dev@incubator.apache.org'"
	 <geronimo-dev@incubator.apache.org>
Subject: RE: J2EE security
Date: Tue, 12 Aug 2003 11:16:42 -0400
MIME-Version: 1.0
X-Mailer: Internet Mail Service (5.5.2653.19)
Content-Type: text/plain
X-Spam-Rating: daedalus.apache.org 1.6.2 0/1000/N



> -----Original Message-----
> From: Nash Foster [mailto:nfoster@trusecure.com] 
> 
> > Yes, we are close.  About the 1 good LoginModule, in your opinion, 
> > what is it that is inadequate about the JAAS LoginModule 
> paradigm that 
> > requires us to write one good LoginModule and then, in 
> turn, integrate 
> > external products when IMHO the JAAS LoginModule paradigm is just 
> > fine?  Can you provide a scenario where there would be a problem?
> 
> There's nothing wrong with the LoginModule paradigm. We've 
> been using it with JBoss, it works great. Don't you integrate 
> external products by writing more LoginModules? Those 
> additional modules are what really add value for companies 
> wanting to use the software, imnsho.

Great.  We are of the same mind.  I was confused by your statement about
needing only one good LoginModule.

Just curious, what is the extent of your work w/ security and JBoss?  I'm
sorry if you're one of the developers.  I've been focusing on a security
service on OpenEJB and we, the OpenEJB team, are not familiar with who all
the JBoss developers are/were.


Regards,

Alan
OpenEJB Developer