geronimo-user mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Kaupo <>
Subject Re: Custom Login Module HttpServletRequest access for webservice
Date Thu, 05 Mar 2009 10:40:02 GMT

djencks wrote:
> I'm pretty sure that the specs don't support what your login module is  
> doing, and that it only works due to some accidents of implementation  
> in geronimo.  However, we ought to be able to make it work for ejb  
> webservices just as well as for servlets.  I doubt it will be a big  
> change.  I'm not sure we can get it fixed for 2.1.4.... we'll see.   
> Could you file a jira enhancement request?
> The "official" way to do this is really to use JASPI and set up a  
> custom authentication method that replaces the BASIC auth and fishes  
> the info out of the request and provides it to the login service....  
> in this case presumably a login module.  However JASPI is only  
> available in trunk and with the currently rapidly changing jetty 7  
> integration and we don't have the tck for it yet.
> thanks
> david jencks

I'd love to file a jira enhancement request. But I've never done that
before, so when can I do it?
JASPI sounds interesting but unfortunately I don't have time to learn it -
the project deadline is approaching.

Thanks for the fast reply David!

View this message in context:
Sent from the Apache Geronimo - Users mailing list archive at

View raw message