jackrabbit-commits mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Apache Wiki <wikidi...@apache.org>
Subject [Jackrabbit Wiki] Update of "SimpleJbossAccessManager" by DarrenHartford
Date Mon, 27 Nov 2006 19:02:15 GMT
Dear Wiki user,

You have subscribed to a wiki page or wiki category on "Jackrabbit Wiki" for change notification.

The following page has been changed by DarrenHartford:
http://wiki.apache.org/jackrabbit/SimpleJbossAccessManager

------------------------------------------------------------------------------
   * $REPO_HOMEDIR/rolemappings.properties
  
  ----
+ == Add SimpleJbossAccessManager to classpath ==
+ If you go to this wiki's '''More Actions:''' pulldown, there is an '''Attachments''' option.
 All code is apache licensed.
  
+ For the server .WAR deployment option, go to the attachments section and save the SimpleJbossAccessManager.jar
under /WEB-INF/lib/SimpleJbossAccessManager.jar.  
+ 
+ For JCA deployment option, save that same .jar and add it to the RAR file.
+ ----
+ == Configure Jackrabbit to use SimpleJbossAccessManager ==
+ Go to your repository.xml and modify the following:
+ 
+     <Security appName="Jackrabbit">
+         <AccessManager class="'''org.apache.jackrabbit.core.security.jboss.SimpleJbossAccessManager'''">
+         </AccessManager>
+ ''<!-- remove this loginmodule so only use the login-config.xml configured modules.''
+ ''        <LoginModule class="org.apache.jackrabbit.core.security.SimpleLoginModule">''
+ ''           <param name="anonymousId" value="anonymous"/>''
+ ''        </LoginModule>''
+ ''-->''
+     </Security>
+ ----
+ == Authentication - mapping roles to permissions ==
+ This module uses the Jboss simplegroup class to get a list of '''Roles''' from the login-modules.
 This has specifically been tested on AD (active directory), although should be transparent
for other security implementations.
+ 
+ Under your repository homedir (defined in your repository.xml as 'path') that usually shows
/repository, /version, and /workspace directories create a '''rolemappings.properties''' file.
 If someone wanted to modify the code to allow positioning where the mapping file is, that
would be fine.
+ 
+ rolemappings.properties:
+ #SimpleJbossAccessManager Jackrabbit permissions.
+ #permissions must be:
+ # read, full, or none
+ #Roles that are not defined are defaulted to none.
+ developers=full
+ admin=full
+ active_directory_group_called_jackrabbit_ro=read
+ 
+ ----
+ 
+ 

Mime
View raw message