[Security & JAAS/JBoss] - custom login and web.xml declarative security
Kgrjb 21 April 2006 11:59:54
ive searched and read a lot but havenot found a solution.
the question is if you use custom login and not j_security_check then How to associate security credentials with web container so that declarative security in web.xml still works??
- jboss 4.0.3SP1 with bundled tomcat 5.5
- i set up tomcat to delegate security[user authentication and declarative url patterns in web.xml] to jboss using jaas DatabaseServerLoginModule. this works fine with login using FORM method[web.xml] and j_security_check.
- but i want to control the login process but theres no way to intecept pre and post of j_security_check.
- so i still use FORM method but instead of calling j_security_check, i post to my login action which simply uses the jaas setup described above. this works fine but How to tell web container to associate security credentials(subject ,principals, etc) of the login to apply on declarative security of url patterns in web.xml??
------------------------------------------------------- Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
![[Security & JAAS/JBoss] - custom login and web.xml declarative security](http://qaix.com/i/logo_new.gif){kind=logo}
