Mailing-List: contact dev-help@geronimo.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@geronimo.apache.org
Received-SPF: pass (nike.apache.org: domain of rwonly@gmail.com designates
 209.85.222.188 as permitted sender)
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=gamma;
        h=mime-version:in-reply-to:references:date:message-id:subject:from:to
         :content-type;
        b=QxkCHoR5nXysgIDeLJdhZvUx+tgA8qgqEZuPwHk1PdFAz8PrAMS7M5UYC+inXn41Q3
         5snY415foxlAFoH7HdbMVESHbzpM7jspwpXLsgGQNNJlPavtm9DHcxifPq7b1BUOxYk/
         pjzDdlu2JJKzeryRqWjVCwZQYSFwohe8tcy0k=
MIME-Version: 1.0
In-Reply-To: <7F30CAE0-DFD9-41A2-8F23-097AF2889118@yahoo.com>
References: <45f744e40909020640xeea2016o2e97cb9c2837ac96@mail.gmail.com>
	 <7F30CAE0-DFD9-41A2-8F23-097AF2889118@yahoo.com>
Date: Thu, 3 Sep 2009 10:22:04 +0800
Message-ID: <fbab58220909021922i4b0102e7gadb17e4be21587b7@mail.gmail.com>
Subject: Re: Geronimo Security Dependencies in 2.2
From: Rex Wang <rwonly@gmail.com>
To: dev@geronimo.apache.org
Content-Type: multipart/alternative; boundary=000e0cd11360ad83a40472a30cf1

--000e0cd11360ad83a40472a30cf1
Content-Type: text/plain; charset=windows-1252
Content-Transfer-Encoding: quoted-printable

2009/9/3 David Jencks <david_jencks@yahoo.com>

>
> On Sep 2, 2009, at 6:40 AM, Ivan wrote:
>
>  Hi,
>>    In Geronimo 2.2, we have a tight reference of ConfigurationFactory in
>> the webappcontext, so it seems that we always need to add the dependenci=
es
>> of the security realm it uses in the deployment plan, even if the global
>> attribute of the security realm is set with true, right ?  So when will =
we
>> need to set the global with false ?
>>
>
> Set global to true if you are using the realm in openejb, otherwise I
> advise setting it to false.


Is that mandatory to set global=3Dfalse and add dependencies when using a
realm in web app? I remember you said "global =96 visible to all applicatio=
ns
no matter what their dependencies. However, without a dependency there is n=
o
guarantee that the relam will be there if the application that uses it is."

Does that mean if developing a web app, we'd better to add a dependency, no
matter if global is set true?

Thanks


>  The point of non-global realms is to allow duplicate realm names, since
> the realm is scoped to the ancestors of the plugin that is using the real=
m.
>  Since openejb does all the security from the openejb plugin rather than
> from individual ejb app plugins, a realm used by openejb has to be global=
 or
> be an ancestor of the openejb plugin.  Since web apps do security per-app=
,
> non-global works fine for them.
>
> thanks
> david jencks
>
>    Thanks !
>>
>> --
>> Ivan
>>
>
>

--000e0cd11360ad83a40472a30cf1
Content-Type: text/html; charset=windows-1252
Content-Transfer-Encoding: quoted-printable

<br><br><div class=3D"gmail_quote">2009/9/3 David Jencks <span dir=3D"ltr">=
&lt;<a href=3D"mailto:david_jencks@yahoo.com">david_jencks@yahoo.com</a>&gt=
;</span><br><blockquote class=3D"gmail_quote" style=3D"border-left: 1px sol=
id rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
<div class=3D"im"><br>
On Sep 2, 2009, at 6:40 AM, Ivan wrote:<br>
<br>
<blockquote class=3D"gmail_quote" style=3D"border-left: 1px solid rgb(204, =
204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
Hi,<br>
 =A0 =A0In Geronimo 2.2, we have a tight reference of ConfigurationFactory =
in the webappcontext, so it seems that we always need to add the dependenci=
es of the security realm it uses in the deployment plan, even if the global=
 attribute of the security realm is set with true, right ? =A0So when will =
we need to set the global with false ?<br>

</blockquote>
<br></div>
Set global to true if you are using the realm in openejb, otherwise I advis=
e setting it to false. </blockquote><div>=A0</div><div>Is that mandatory to=
 set global=3Dfalse and add dependencies when using a realm in web app? I r=
emember you said &quot;global =96 visible to all applications no matter wha=
t their dependencies.
 However, without a dependency there is no guarantee that the relam will be=
 there if the application that uses it is.&quot;=A0 <br>Does that mean if d=
eveloping a web app, we&#39;d better to add a dependency, no matter if glob=
al is set true?<br>
<br>Thanks<br>=A0</div><blockquote class=3D"gmail_quote" style=3D"border-le=
ft: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: =
1ex;">=A0The point of non-global realms is to allow duplicate realm names, =
since the realm is scoped to the ancestors of the plugin that is using the =
realm. =A0Since openejb does all the security from the openejb plugin rathe=
r than from individual ejb app plugins, a realm used by openejb has to be g=
lobal or be an ancestor of the openejb plugin. =A0Since web apps do securit=
y per-app, non-global works fine for them.<br>

<br>
thanks<br>
david jencks<br>
<br>
<blockquote class=3D"gmail_quote" style=3D"border-left: 1px solid rgb(204, =
204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
 =A0 Thanks !<br>
<br>
-- <br>
Ivan<br>
</blockquote>
<br>
</blockquote></div><br>

--000e0cd11360ad83a40472a30cf1--