geronimo-user mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Cristian Roldan <roldan...@yahoo.com.ar>
Subject Security configuration
Date Fri, 20 Jan 2006 21:18:57 GMT
Hi All,
   Is there any way to setup "all-authenticated" for the role content-administrator ?
I was looking at the security schema and didn't see any attribute or tag for all-authenticated.
  Thanks.
  
<?xml version="1.0" encoding="UTF-8"?>
<web-app configId="geronimo/ldap-demo-tomcat/1.0-SNAPSHOT/car" parentId="geronimo/ldap-realm/1.0-SNAPSHOT/car"
xmlns="http://geronimo.apache.org/xml/ns/j2ee/web/tomcat-1.0" xmlns:sec="http://geronimo.apache.org/xml/ns/security">
  <context-root>/ldap-demo</context-root>
  <context-priority-classloader>false</context-priority-classloader>
  <security-realm-name>ldap-realm</security-realm-name>
  <security>
    <default-principal realm-name="ldap-realm">
      <principal class="org.apache.geronimo.security.realm.providers.GeronimoUserPrincipal"
name="system"/>
    </default-principal>
    <role-mappings>
      <role role-name="content-administrator">
        <realm realm-name="ldap-realm">
          <principal class="org.apache.geronimo.security.realm.providers.GeronimoGroupPrincipal"
name="admin" designated-run-as="true"/>
          <principal class="org.apache.geronimo.security.realm.providers.GeronimoUserPrincipal"
name="system"/>
        </realm>
      </role>
      <role role-name="guest">
        <realm realm-name="ldap-realm">
          <principal class="org.apache.geronimo.security.realm.providers.GeronimoGroupPrincipal"
name="guest" designated-run-as="true"/>
          <principal class="org.apache.geronimo.security.realm.providers.GeronimoUserPrincipal"
name="user1"/>
          <principal class="org.apache.geronimo.security.realm.providers.GeronimoUserPrincipal"
name="user2"/>
        </realm>
      </role>
    </role-mappings>
  </security>
</web-app>

		
---------------------------------
 1GB gratis, Antivirus y Antispam
 Correo Yahoo!, el mejor correo web del mundo
 Abrí tu cuenta aquí
Mime
View raw message