Mailing-List: contact user-help@geronimo.apache.org; run by ezmlm
Precedence: bulk
Reply-To: user@geronimo.apache.org
Received-SPF: neutral (asf.osuosl.org: local policy)
Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Subject: RE: security gbean.....
Date: Sat, 24 Jun 2006 11:49:02 -0700
Message-ID: <29C45885D653D543A9B62CB419AA3C227383AE@PWR-XCH-02.pwrutc.com>
Thread-Topic: security gbean.....
Thread-Index: AcaXgHaefdl5RZOaRmqpZpww2cq7GAAPiaMg
From: "Clough, Ray C             PWR" <Ray.Clough@pwr.utc.com>
To: <user@geronimo.apache.org>

If you're getting paid by the line, turning 3 lines into 5000 is sheer
genius.  If you were to fail to document them, so that no one could
understand your code, you might get a Presidential Medal of Freedom.

=20

-----Original Message-----
From: ammulder@gmail.com [mailto:ammulder@gmail.com] On Behalf Of Aaron
Mulder
Sent: Saturday, June 24, 2006 4:22 AM
To: user@geronimo.apache.org
Subject: Re: security gbean.....

A) that's horrible that we turn 3 lines into like 5000 lines.  We have
got to do better!

B) in case it wasn't clear from David's response, the "realm-name" is
what's normally used to refer to this security realm; your login domain
names can be arbitrary, but they must be unique.  I suggest
magnolia-authentication and magnolia-authorization.  (If you enable
certain advanced features you can use the login domain names in your
J2EE role mapping, but it's a bit unusual that you'd want to, and if you
did want to, they'd have to have unique names for you to distinguish
them.)

Thanks,
     Aaron

On 6/23/06, EricCho@kryos.com <EricCho@kryos.com> wrote:
>
>
>
>
> Hi all,
>
> I'm having a problem configuring my security gbean and could use a bit
of help.
>
> I have the following jaas.config file:
>
> magnolia {
>   info.magnolia.jaas.sp.jcr.JCRAuthenticationModule requisite;
>   info.magnolia.jaas.sp.jcr.JCRAuthorizationModule required; };=20
> Jackrabbit {
>   org.apache.jackrabbit.core.security.SimpleLoginModule required; };
>
> And I've translated it into the following gbeans:
>
>     <gbean name=3D"magnolia"
class=3D"org.apache.geronimo.security.realm.GenericSecurityRealm">
>         <attribute name=3D"realmName">magnolia</attribute>
>         <reference name=3D"ServerInfo">
>
<gbean-name>geronimo.server:J2EEApplication=3Dnull,J2EEModule=3Dgeronimo/=
j2e
e-system/1.0/car,J2EEServer=3Dgeronimo,j2eeType=3DGBean,name=3DServerInfo=
</gbe
an-name>
>         </reference>
>         <reference name=3D"LoginService">
>
<gbean-name>geronimo.server:J2EEApplication=3Dnull,J2EEModule=3Dgeronimo/=
j2e
e-security/1.0/car,J2EEServer=3Dgeronimo,j2eeType=3DJaasLoginService,name=
=3DJa
asLoginService</gbean-name>
>         </reference>
>         <xml-reference name=3D"LoginModuleConfiguration">
>             <log:login-config
xmlns:log=3D"http://geronimo.apache.org/xml/ns/loginconfig-1.0">
>                 <log:login-module control-flag=3D"REQUISITE"
server-side=3D"true" wrap-principals=3D"false">
>
<log:login-domain-name>magnolia</log:login-domain-name>
>
<log:login-module-class>info.magnolia.jaas.sp.jcr.JCRAuthenticationModul
e</log:login-module-class>
>                 </log:login-module>
>                 <log:login-module control-flag=3D"REQUIRED"
server-side=3D"true" wrap-principals=3D"false">
>
<log:login-domain-name>magnolia</log:login-domain-name>
>
<log:login-module-class>info.magnolia.jaas.sp.jcr.JCRAuthorizationModule
</log:login-module-class>
>                 </log:login-module>
>             </log:login-config>
>         </xml-reference>
>     </gbean>
>
>
>       <gbean name=3D"Jackrabbit"
class=3D"org.apache.geronimo.security.realm.GenericSecurityRealm">
>             <attribute name=3D"realmName">Jackrabbit</attribute>
>             <reference name=3D"ServerInfo">
>
<gbean-name>geronimo.server:J2EEApplication=3Dnull,J2EEModule=3Dgeronimo/=
j2e
e-system/1.0/car,J2EEServer=3Dgeronimo,j2eeType=3DGBean,name=3DServerInfo=
</gbe
an-name>
>             </reference>
>             <reference name=3D"LoginService">
>
<gbean-name>geronimo.server:J2EEApplication=3Dnull,J2EEModule=3Dgeronimo/=
j2e
e-security/1.0/car,J2EEServer=3Dgeronimo,j2eeType=3DJaasLoginService,name=
=3DJa
asLoginService</gbean-name>
>             </reference>
>
>             <xml-reference name=3D"LoginModuleConfiguration">
>                   <log:login-config
xmlns:log=3D"http://geronimo.apache.org/xml/ns/loginconfig-1.0">
>                         <log:login-module control-flag=3D"REQUIRED"
server-side=3D"true" wrap-principals=3D"false">
>
<log:login-domain-name>Jackrabbit</log:login-domain-name>
>
<log:login-module-class>org.apache.jackrabbit.core.security.SimpleLoginM
odule</log:login-module-class>
>                         </log:login-module>
>                   </log:login-config>
>             </xml-reference>
>       </gbean>
>
>
>
> The problem I'm currently having is that it's complaining that my
login-domain-name for both the Authenitciation and Authorization modules
are the same (magnolia).... but it seems as though it has to be
according the the jaas.config.  Or am I wrong?
> How do I fix this?
> Also, if you see something else wrong with this, I'd appreciate any
pointers.
>
> Regards,
> Eric
>
>