Return-Path: Delivered-To: apmail-geronimo-dev-archive@www.apache.org Received: (qmail 51584 invoked from network); 21 Mar 2011 13:50:29 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.3) by minotaur.apache.org with SMTP; 21 Mar 2011 13:50:29 -0000 Received: (qmail 36835 invoked by uid 500); 21 Mar 2011 13:50:29 -0000 Delivered-To: apmail-geronimo-dev-archive@geronimo.apache.org Received: (qmail 36790 invoked by uid 500); 21 Mar 2011 13:50:29 -0000 Mailing-List: contact dev-help@geronimo.apache.org; run by ezmlm Precedence: bulk list-help: list-unsubscribe: List-Post: Reply-To: dev@geronimo.apache.org List-Id: Delivered-To: mailing list dev@geronimo.apache.org Received: (qmail 36783 invoked by uid 99); 21 Mar 2011 13:50:29 -0000 Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 21 Mar 2011 13:50:29 +0000 X-ASF-Spam-Status: No, hits=-0.7 required=5.0 tests=FREEMAIL_FROM,RCVD_IN_DNSWL_LOW,SPF_PASS,T_TO_NO_BRKTS_FREEMAIL X-Spam-Check-By: apache.org Received-SPF: pass (nike.apache.org: domain of michael1224.fang@gmail.com designates 74.125.82.182 as permitted sender) Received: from [74.125.82.182] (HELO mail-wy0-f182.google.com) (74.125.82.182) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 21 Mar 2011 13:50:21 +0000 Received: by wyf23 with SMTP id 23so6207935wyf.13 for ; Mon, 21 Mar 2011 06:50:01 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:date:message-id:subject:from:to :content-type; bh=2grz/6I8ye5pqp2TuihzY1W19fHJuH6dqpypBi/6iuM=; b=Uzhh1GUBqwFm5SaOQl3NESQ+S9BmdUgGIbL/Nmy1Hv9NLPQo2fwxJXh3DIbsehpE6M hBSxpNT+Jn0lYFXt0yR/hcFRPrXXMYqhAkGu/Vi/KX3tX95XDz4fCozqpLljBz29DJ5G Nj7OMLdw84XRXaGuKttbkLghDTOMmsMmhpBSI= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:date:message-id:subject:from:to:content-type; b=n0/EjyfM0pSE1+27A6mo9y/JKSG53LGo/UNe0CXcpzmJK6lGXt6A1XgcQHij6+suqI ArvjBv1Ssys9FN5QTnEbGBA4+m8i9D/9/KJ5gpZ8bSYjmTyXRSyxpHfTW+QslEu5w/4H W/HuoVi8vRC/93ZiLlSIFX+ngCyhDQBcEenWg= MIME-Version: 1.0 Received: by 10.227.209.8 with SMTP id ge8mr4016710wbb.211.1300715401322; Mon, 21 Mar 2011 06:50:01 -0700 (PDT) Received: by 10.227.142.19 with HTTP; Mon, 21 Mar 2011 06:50:01 -0700 (PDT) Date: Mon, 21 Mar 2011 21:50:01 +0800 Message-ID: Subject: [Question] How to auto-map roles to groups in the realm From: Shenghao Fang To: dev@geronimo.apache.org Content-Type: text/plain; charset=ISO-8859-1 X-Virus-Checked: Checked by ClamAV on apache.org Hi All, I'm finding a way to map all groups in the realm to roles without explicitly defining them in the deployment descriptor. I searched the web and it looks like Geronimo supports such function. But I didn't find any document about it. Could anyone give any sample? Thanks. -- Michael