jackrabbit-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Stefan Guggisberg <stefan.guggisb...@gmail.com>
Subject JAAS support
Date Fri, 25 Feb 2005 17:15:26 GMT
i committed a first implementation of generic JAAS support
(rev155344). jackrabbit is now making use of standard JAAS mechanisms
(-> configurable LoginModules) to authenticate users.  the relevant code
is in RepositoryImpl.login() and in the code in the 'security' package.

there's a SimpleLoginModule and a SimpleAccessManager in the
security package. those don't do anything right now and are intended
as fallbacks.

in case you run into a java.lang.SecurityException (LoginConfig not found)
when you start jackrabbit you have to set the system property
java.security.auth.login.config with the path to your JAAS config
i added a sample config  (src/conf/jaas.config). this config specifies
the SimpleLoginModule for the "Jackrabbit" application.

now it should be very easy to use LDAP-based authorization with

next steps:
- make the AccessManager and name of the config entry 
  configurable (in repository.xml)
- provide very simple username/password authorization 
  as sample/fallback.


View raw message