jackrabbit-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Suhail M. Ahmed" <ilya...@mac.com>
Subject Re: JAAS support
Date Fri, 25 Feb 2005 19:12:31 GMT
Thanks Stefan,

I got the svn update. The SimpleLoginModule works ! I did have to make 
a few changes though, the codebase/config was still referring to 
org.apache.jackrabbit.core.security which I had to change to 
*.core.jaas.  I'll head back into my rabbit hole now :)


On Feb 25, 2005, at 6:15 PM, Stefan Guggisberg wrote:

> folks,
> i committed a first implementation of generic JAAS support
> (rev155344). jackrabbit is now making use of standard JAAS mechanisms
> (-> configurable LoginModules) to authenticate users.  the relevant 
> code
> is in RepositoryImpl.login() and in the code in the 'security' package.
> there's a SimpleLoginModule and a SimpleAccessManager in the
> security package. those don't do anything right now and are intended
> as fallbacks.
> in case you run into a java.lang.SecurityException (LoginConfig not 
> found)
> when you start jackrabbit you have to set the system property
> java.security.auth.login.config with the path to your JAAS config
> file.
> i added a sample config  (src/conf/jaas.config). this config specifies
> the SimpleLoginModule for the "Jackrabbit" application.
> now it should be very easy to use LDAP-based authorization with
> jackrabbit.
> next steps:
> - make the AccessManager and name of the config entry
>   configurable (in repository.xml)
> - provide very simple username/password authorization
>   as sample/fallback.
> cheers
> stefan

View raw message