Return-Path: Delivered-To: apmail-jackrabbit-users-archive@locus.apache.org Received: (qmail 78874 invoked from network); 31 Oct 2007 14:57:52 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.2) by minotaur.apache.org with SMTP; 31 Oct 2007 14:57:52 -0000 Received: (qmail 28447 invoked by uid 500); 31 Oct 2007 14:57:38 -0000 Delivered-To: apmail-jackrabbit-users-archive@jackrabbit.apache.org Received: (qmail 28433 invoked by uid 500); 31 Oct 2007 14:57:38 -0000 Mailing-List: contact users-help@jackrabbit.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: users@jackrabbit.apache.org Delivered-To: mailing list users@jackrabbit.apache.org Received: (qmail 28424 invoked by uid 99); 31 Oct 2007 14:57:38 -0000 Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 31 Oct 2007 07:57:38 -0700 X-ASF-Spam-Status: No, hits=1.2 required=10.0 tests=SPF_NEUTRAL X-Spam-Check-By: apache.org Received-SPF: neutral (nike.apache.org: local policy) Received: from [213.133.33.40] (HELO smtp.is.nl) (213.133.33.40) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 31 Oct 2007 14:57:57 +0000 Received: from [213.133.51.241] (HELO [10.10.100.100]) by smtp.is.nl (CommuniGate Pro SMTP 5.0.10) with ESMTP id 28095619; Wed, 31 Oct 2007 15:57:22 +0100 Message-ID: <472897D2.3080200@planet.nl> Date: Wed, 31 Oct 2007 15:57:22 +0100 From: Nick Stolwijk User-Agent: Thunderbird 1.5.0.14pre (X11/20071023) MIME-Version: 1.0 To: users@jackrabbit.apache.org CC: yguiamo@anwb.nl Subject: Jackrabbit security Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Virus-Checked: Checked by ClamAV on apache.org Hi folks, We are trying to secure our jackrabbit by providing different usernames/passwords then system and anonymous. As far as we understand, this is the Security configuration inside your repository.xml config file. This config file is explained on the jackrabbit homepage[1], but the security part is still a todo. Also, all the examples on the web use the default: Is there somewhere some documentation how to use another LoginModule or AccessManager? With regards, Nick Stolwijk [1] http://jackrabbit.apache.org/doc/config.html