SSOGatewayLogin Module for JBoss.
It specialized the SSOGatewayLoginModule by associating an additional
group called ("Roles") which contains user roles.
The original SSOGatewayLoginModule associates the user and its roles directly
as Subject's Principals. This won't work in JBoss since it obtains user roles
from a special Group that must be called "Roles".
This LoginModule adds this special group, adds the roles as members of it and
associates such group to the Subject as built by the SSOGatewayLoginModule.
To configure this JAAS Login Module module, add to the
$JBOSS_HOME/server/default/conf/login-config.xml file the following entry :
<policy>
<!-- Used by JOSSO Agents for authenticating users against the Gateway -->
<application-policy name = "josso">
<authentication>
<login-module code = "org.josso.jb32.agent.JBossSSOGatewayLoginModule"
flag = "required">
<module-option name="debug">true</module-option>
</login-module>
</authentication>
</application-policy>
...
</policy>
author: Gianluca Brigandi version: CVS $Id: JBossSSOGatewayLoginModule.java 508 2008-02-18 13:32:29Z sgonzalez $ |