From users-return-13834-apmail-tomee-users-archive=tomee.apache.org@tomee.apache.org  Sat Oct 12 14:26:47 2013
Return-Path: <users-return-13834-apmail-tomee-users-archive=tomee.apache.org@tomee.apache.org>
X-Original-To: apmail-tomee-users-archive@www.apache.org
Delivered-To: apmail-tomee-users-archive@www.apache.org
Received: from mail.apache.org (hermes.apache.org [140.211.11.3])
	by minotaur.apache.org (Postfix) with SMTP id 070DF10CE1
	for <apmail-tomee-users-archive@www.apache.org>; Sat, 12 Oct 2013 14:26:47 +0000 (UTC)
Received: (qmail 64226 invoked by uid 500); 12 Oct 2013 14:26:46 -0000
Delivered-To: apmail-tomee-users-archive@tomee.apache.org
Received: (qmail 64005 invoked by uid 500); 12 Oct 2013 14:26:46 -0000
Mailing-List: contact users-help@tomee.apache.org; run by ezmlm
Precedence: bulk
List-Help: <mailto:users-help@tomee.apache.org>
List-Unsubscribe: <mailto:users-unsubscribe@tomee.apache.org>
List-Post: <mailto:users@tomee.apache.org>
List-Id: <users.tomee.apache.org>
Reply-To: users@tomee.apache.org
Delivered-To: mailing list users@tomee.apache.org
Received: (qmail 63997 invoked by uid 500); 12 Oct 2013 14:26:45 -0000
Delivered-To: apmail-openejb-users@openejb.apache.org
Received: (qmail 63992 invoked by uid 99); 12 Oct 2013 14:26:45 -0000
Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230)
    by apache.org (qpsmtpd/0.29) with ESMTP; Sat, 12 Oct 2013 14:26:45 +0000
X-ASF-Spam-Status: No, hits=2.3 required=5.0
	tests=SPF_SOFTFAIL,URI_HEX
X-Spam-Check-By: apache.org
Received-SPF: softfail (nike.apache.org: transitioning domain of chiliconlatte@gmail.com does not designate 216.139.250.139 as permitted sender)
Received: from [216.139.250.139] (HELO joe.nabble.com) (216.139.250.139)
    by apache.org (qpsmtpd/0.29) with ESMTP; Sat, 12 Oct 2013 14:26:39 +0000
Received: from [192.168.236.139] (helo=joe.nabble.com)
	by joe.nabble.com with esmtp (Exim 4.72)
	(envelope-from <chiliconlatte@gmail.com>)
	id 1VV08g-0006LT-1m
	for users@openejb.apache.org; Sat, 12 Oct 2013 07:25:54 -0700
Date: Sat, 12 Oct 2013 07:25:39 -0700 (PDT)
From: gollum <chiliconlatte@gmail.com>
To: users@openejb.apache.org
Message-ID: <1381587939037-4665563.post@n4.nabble.com>
In-Reply-To: <CAFC9s3L4aiG8pWicELsicUOscTxVZamX9Q24rvGYqpYfjPBS_w@mail.gmail.com>
References: <1381358411911-4665513.post@n4.nabble.com> <CAGV1rD+ogLg3G_jBLW5n+Z_fb9RQgaHXjc=8jWJzc1pN6tTP6g@mail.gmail.com> <CAFC9s3L4aiG8pWicELsicUOscTxVZamX9Q24rvGYqpYfjPBS_w@mail.gmail.com>
Subject: Re: REST service with JAAS auth trouble (TomEE+ 1.5.2)
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-Virus-Checked: Checked by ClamAV on apache.org

Yes, the login property is set in the setenv.bat script:
set
CATALINA_OPTS=-Djava.security.auth.login.config=$CATALINA_BASE/conf/login.config

I've also looked through the mail-list archive that smithh032772 googled for
me, but there is nothing that I haven't read before.

To eliminate any misconfiguration in my webapp's web.xml, I test my TomEE
configuration against http://localhost:8080/manager now, but the behavior is
the same as with my webapp.

I can login using the UserDatabase:

tomcat-users.xml:
<tomcat-users>
  <role rolename="manager-gui"/>
  <user username="admin" password="admin" roles="manager-gui"/>
</tomcat-users>

server.xml:
<Realm className="org.apache.catalina.realm.LockOutRealm">
  <Realm className="org.apache.catalina.realm.UserDatabaseRealm"
resourceName="UserDatabase"/>
</Realm>

But I cannot login with a JAAS realm:

groups.properties:
manager-gui=admin

users.properties:
admin=admin

Both JAAS realms defined in server.xml

<Realm className="org.apache.catalina.realm.JAASRealm"
appName="PropertiesLogin"
 
userClassNames="org.apache.openejb.core.security.AbstractSecurityService$User"
 
roleClassNames="org.apache.openejb.core.security.AbstractSecurityService$Group">
</Realm>

and

<Realm className="org.apache.catalina.realm.JAASRealm"
appName="PropertiesLogin"
  userClassNames="org.apache.openejb.core.security.jaas.UserPrincipal"
  roleClassNames="org.apache.openejb.core.security.jaas.GroupPrincipal">
</Realm>

don't work for me.



--
View this message in context: http://openejb.979440.n4.nabble.com/REST-service-with-JAAS-auth-trouble-TomEE-1-5-2-tp4665513p4665563.html
Sent from the OpenEJB User mailing list archive at Nabble.com.