Return-Path: 
 <dev-return-72827-apmail-geronimo-dev-archive=geronimo.apache.org@geronimo.apache.org>
Delivered-To: apmail-geronimo-dev-archive@www.apache.org
Received: (qmail 46692 invoked from network); 25 Mar 2009 09:49:18 -0000
Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.3)
  by minotaur.apache.org with SMTP; 25 Mar 2009 09:49:18 -0000
Received: (qmail 23679 invoked by uid 500); 25 Mar 2009 09:49:17 -0000
Delivered-To: apmail-geronimo-dev-archive@geronimo.apache.org
Received: (qmail 23579 invoked by uid 500); 25 Mar 2009 09:49:17 -0000
Mailing-List: contact dev-help@geronimo.apache.org; run by ezmlm
Precedence: bulk
list-help: <mailto:dev-help@geronimo.apache.org>
list-unsubscribe: <mailto:dev-unsubscribe@geronimo.apache.org>
List-Post: <mailto:dev@geronimo.apache.org>
Reply-To: dev@geronimo.apache.org
List-Id: <dev.geronimo.apache.org>
Delivered-To: mailing list dev@geronimo.apache.org
Received: (qmail 23555 invoked by uid 99); 25 Mar 2009 09:49:17 -0000
Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136)
    by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 25 Mar 2009 09:49:17 +0000
X-ASF-Spam-Status: No, hits=-2000.0 required=10.0
	tests=ALL_TRUSTED
X-Spam-Check-By: apache.org
Received: from [140.211.11.140] (HELO brutus.apache.org) (140.211.11.140)
    by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 25 Mar 2009 09:49:16 +0000
Received: from brutus (localhost [127.0.0.1])
	by brutus.apache.org (Postfix) with ESMTP id 28CDF234C044
	for <dev@geronimo.apache.org>; Wed, 25 Mar 2009 02:48:56 -0700 (PDT)
Message-ID: <387473143.1237974536166.JavaMail.jira@brutus>
Date: Wed, 25 Mar 2009 02:48:56 -0700 (PDT)
From: "David Jencks (JIRA)" <jira@apache.org>
To: dev@geronimo.apache.org
Subject: [jira] Created: (GERONIMO-4603) PropertiesLoginManager is hardwired
 to properties-login login module
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394
X-Virus-Checked: Checked by ClamAV on apache.org

PropertiesLoginManager is hardwired to properties-login login module
--------------------------------------------------------------------

                 Key: GERONIMO-4603
                 URL: https://issues.apache.org/jira/browse/GERONIMO-4603
             Project: Geronimo
          Issue Type: Bug
      Security Level: public (Regular issues)
          Components: console
    Affects Versions: 2.1.4, 2.2
            Reporter: David Jencks
             Fix For: 2.1.5, 2.2


In production you want to replace the toy properties login realm with something else such as an ldap realm.  However the admin console has a hardwired dependency on the properties-login gbean.

We should make the reference from PropertiesLoginManager multi-valued and scan through it for properties login modules so you can edit any such properties files.

Workaround for replacing server-security-config with something with a real security realm is to include the properties login module as a dummy, not used in a security realm:

<!-- bug workaround -->
    <gbean name="properties-login"
        class="org.apache.geronimo.security.jaas.LoginModuleGBean">
        <attribute name="loginModuleClass">org.apache.geronimo.security.realm.providers.PropertiesFileLoginModule</attribute>
        <attribute name="options">
            usersURI=var/security/users.properties
            groupsURI=var/security/groups.properties
        </attribute>
        <attribute name="loginDomainName">geronimo-admin</attribute>
    </gbean>


-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.