Mailing-List: contact user-help@geronimo.apache.org; run by ezmlm
Precedence: bulk
Reply-To: user@geronimo.apache.org
Received-SPF: pass (nike.apache.org: local policy)
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
  s=s1024; d=yahoo.com;
  h=DKIM-Signature:Received:X-Yahoo-SMTP:X-YMail-OSG:X-Yahoo-Newman-Property:From:Mime-Version:Content-Type:Subject:Date:In-Reply-To:To:References:Message-Id:X-Mailer;
  b=DZ7o2H9b73vVJH872turhhmFOdEWo0xngX5/mdcS1IkDOjP5u48syXO/SICGU6NtGrhjyK1VFDSEMSnDcc3UYiodDIktbf3uYw/21V8ICAHm2VNI/I6GcVYXb1W6KCADmmMzBijJgY2RIvo0N1GkvaJWUaDDMyEbatMRjmamtTo=
  ;
From: David Jencks <david_jencks@yahoo.com>
Mime-Version: 1.0 (Apple Message framework v1082)
Content-Type: multipart/alternative; boundary=Apple-Mail-1-456745632
Subject: Re: why we need to provide security realm name to a standalone ejb
 client?
Date: Tue, 1 Feb 2011 12:18:45 -0800
In-Reply-To: <4D47E01D.6000301@gmail.com>
To: user@geronimo.apache.org
References: <4D47E01D.6000301@gmail.com>
Message-Id: <40211D3D-4398-411C-B076-A0B7CB44A787@yahoo.com>


--Apple-Mail-1-456745632
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=us-ascii

This is the right place to ask this question.

Geronimo lets you set up many security realms at once.  When you connect =
from a remote client to call ejbs, there's no easy way to predict which =
application's ejb or which ejb you want to call.  So you have to specify =
how you want to log in when you connect.

We could allow specifying a default security realm for all of openejb so =
if you don't specify a realm we use the default.

thanks
david jencks

On Feb 1, 2011, at 2:27 AM, Shailen wrote:

> Hi All,
>=20
> I have a very simple ejb deployed on geronimo2.2.1. This ejb is =
secured by a security realm(Database(SQL) realm). When I call this ejb =
from a standalone java client, it restricts me from accessing it without =
authentication.
>=20
> But when I provide this principal and credentials then also it =
restricts me from calling this ejb.
> When I additionally provide realmName then it enables me to call this =
ejb.
>=20
> My question is why do we need to provide the security realm name in =
the client?
>=20
> I am sorry if this is not the right place to ask such questions.
> --=20
>=20
> Regards,
> Shailen (khichi.shailendra@gmail.com)
> +91-9216020360
> Mohali, Chandigarh - 160062


--Apple-Mail-1-456745632
Content-Transfer-Encoding: 7bit
Content-Type: text/html;
	charset=us-ascii

<html><head></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">This is the right place to ask this question.<div><br></div><div>Geronimo lets you set up many security realms at once. &nbsp;When you connect from a remote client to call ejbs, there's no easy way to predict which application's ejb or which ejb you want to call. &nbsp;So you have to specify how you want to log in when you connect.</div><div><br></div><div>We could allow specifying a default security realm for all of openejb so if you don't specify a realm we use the default.</div><div><br></div><div>thanks</div><div>david jencks</div><div><br><div><div>On Feb 1, 2011, at 2:27 AM, Shailen wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite">
<div text="#000099" bgcolor="#ffffff">
    Hi All,<br>
    <br>
    I have a very simple ejb deployed on geronimo2.2.1. This ejb is
    secured by a security realm(Database(SQL) realm). When I call this
    ejb from a standalone java client, it restricts me from accessing it
    without authentication.<br>
    <br>
    But when I provide this principal and credentials then also it
    restricts me from calling this ejb.<br>
    When I additionally provide realmName then it enables me to call
    this ejb.<br>
    <br>
    My question is why do we need to provide the security realm name in
    the client?<br>
    <br>
    I am sorry if this is not the right place to ask such questions.<br>
    <pre class="moz-signature" cols="72">-- 

Regards,
Shailen (<a class="moz-txt-link-abbreviated" href="mailto:khichi.shailendra@gmail.com">khichi.shailendra@gmail.com</a>)
+91-9216020360
Mohali, Chandigarh - 160062</pre>
  </div>

</blockquote></div><br></div></body></html>
--Apple-Mail-1-456745632--