Questions tagged [jaas]

JAAS is the Java Authentication and Authorization Service found in the JRE (1.4+).

jaas
Filter by
Sorted by
Tagged with
0 votes
2 answers
1k views

Authentication in .net

I'd like my application, written in C#, to perform authentications, just like I used to do in Java through JAAS. Which objects should I use? Which classes? Thank you for your answers.
Dharma Dude's user avatar
0 votes
3 answers
202 views

How does the call to the hashing algorithm work, particularly the use of bit shifting 0xff?

The following code snippet, sourced from Core Java Vol 2 (7th Ed), shows how to create an SHA1 and an MD5 fingerprint using Java. It turns out that the only function that works is when I load the ...
Jon C.'s user avatar
  • 13
5 votes
2 answers
733 views

User managed security in Java EE

I want to protect my JSF pages in a Java EE 6 app. I want to store users and roles in the DB and have privileged users administer them via a web tool. The privileged users would add users to roles ...
retrodev's user avatar
  • 2,353
19 votes
1 answer
18k views

Glassfish 3.1 default principal to role mapping

I am working with glassfish and jaas module. I configured my web.xml in this way. <security-constraint> <web-resource-collection> <web-resource-name>ALL Page for admin&...
user789148's user avatar
3 votes
1 answer
4k views

JBoss JAAS custom Login Module

I'm trying to use a custom JAAS authentication module for a web based application hosted on JBoss 5.1.0.GA. So everything seems to be working fine, until the number of users increases and sessions (so ...
TheGuyNextDoor's user avatar
0 votes
1 answer
243 views

Is setting up jboss valve the only way to go?

I have an application set up using jaas module for login. There are ajax function calls in the application so I am experencing the notorious ajax session timeout problem, which means a ugly login page ...
Quincy's user avatar
  • 4,413
3 votes
0 answers
1k views

Glassfish v3.1 jaas error

I have problem with creating easy authorization using jaas, Glassfish v3.1 and server 3.0. I configure web.xml, sun-web.xml and done according to David Heffelfinger's book "Java EE 6 with GlassFish 3 ...
Dio's user avatar
  • 31
1 vote
1 answer
4k views

Connection Timeout using LdapExtLoginModule

I am attempting to authenticate users against an existing LDAP server (Active-Directory) using the LdapExtLoginModule provided by JBoss 4.2.3. I have had some success connecting, but the LDAP server ...
Eric's user avatar
  • 520
2 votes
1 answer
10k views

Using HTTP Request.login with JBoss/JAAS

I have successfully setup a JBoss security domain, and can authenticate using BASIC authentication (as defined in web.xml). This all works well. I cannot however figure out how to use the http request....
Simon's user avatar
  • 267
0 votes
1 answer
207 views

Authorise a JAAS session by NT Group?

Is it possible to authorise JAAS sessions based on membership of NT Groups?
hawkeye's user avatar
  • 35.2k
0 votes
1 answer
537 views

Kerberos - difference between JAAS connection to server and SQL Server Trusted Connection

My understanding is that both JAAS and SQL Server can be configured to use kerberos in a domain environment, with an active directory server. My understanding that JAAS gets the user credentials ...
hawkeye's user avatar
  • 35.2k
2 votes
2 answers
708 views

Passing information between Java LoginModules (Generic Map Problem)

I am currently trying to write some LoginModules to enable users to log into a Java application. Here is my .java.login.config file: "Java Application" { path.to.login.module.PamLoginModule ...
Kevin S's user avatar
  • 2,753
1 vote
1 answer
704 views

Can JAAS security domain info only be specified in server specific deployment descriptors?

I'm doing form-based authentication in JSF and I can get it to work but it requires a server specific deployment descriptor to specify the JAAS security domain info. eg. on JBoss 6 I need a WEB-INF/...
Dana's user avatar
  • 1,208
0 votes
2 answers
2k views

Java Security Framework

I'm kind of new to Java platform. I need to work with some security frameworks of Java for both desktop application and web application. Now I need to know, which frameworks should I study for desktop ...
Johnny's user avatar
  • 1,565
5 votes
1 answer
10k views

JAAS LoginModule flags

I'm trying to work out how the Login module flags work in JAAS (using JBoss 5.1 EAP) and I've come across a puzzling situation that I'm hoping someone can clarify for me. For background, my login-...
bwobbones's user avatar
  • 2,558
2 votes
1 answer
5k views

JSF authentication logout

I know that this question seems to be answered by a lot of other threads, but I can't find a solution with JSF 2.0 with Glassfish 3.0.1 for logout an user. I tried either with a BASIC authentication ...
markov00's user avatar
  • 3,712
3 votes
3 answers
5k views

Filenet Content Engine SECURITY_ANONYMOUS_DISALLOWED

We have an development enviroment, with the AE and CE in the same websphere instance. Now, we are trying to mount, the AE in one of our local machine, in a IRAD Websphere instance. When the ...
StackPointer's user avatar
0 votes
1 answer
588 views

Client (Tomcat) calls Stateless Session Bean (JBoss), how to handle Client Identifier

we have the following setup: Tomcat (Web App) calls a service (Stateless Session Bean) in JBoss 5.1.0 EAP (EJB 3.0) JBoss has two different Persistence Contexts defined using two different databases ...
Marcel's user avatar
  • 710
1 vote
2 answers
1k views

JAAS, doing login from outside the container

I have an application with JAAS and i need do an external login from the legacy, so i wrote a servlet with this code bellow, it works fine, but when i do another submit the JAAS tries authenticate ...
Guilherme's user avatar
  • 603
1 vote
1 answer
1k views

Getting problems in adding cutom JAAS Login module in Servicemix

I am using Servicemix 4.2 for my osgi based webservice application. My webservice application is exposed using the CXF stack provided with the Servicemix. Now we have to integrate the application ...
Harbeer Kadian's user avatar
2 votes
1 answer
3k views

jaas, authenticate application users on a database table

I want to know the simplest way to authenticate an application user on a database table using jaas. Since a database table with username/hashed password is probably the most common solution, is there ...
AgostinoX's user avatar
  • 7,583
1 vote
1 answer
534 views

security constraints with JAAS

i decided to write my own JAAS login module. So far everything works fine, yet there is something i can't google out. Assume the login function by LoginContext has successfuly authenticated a user. ...
Pyjong's user avatar
  • 3,167
3 votes
1 answer
2k views

JSF 2.0 how to display element depending of the user right?

I am writing an application using JSF 2.0, java ee and glassfish. My user interface is simple xhtml containing jsf. I want my user to login and depending their right have different element displayed ...
user789148's user avatar
2 votes
1 answer
580 views

How to propagate JAAS security credential to server side?

The J2EE Application implementation will propagate credential to EJBContext automatically. It only includes user name instead of password, right? What's the standard way to propagate for non-J2EE ...
shillong's user avatar
0 votes
1 answer
2k views

how to redirect to j_security_check in the managed bean?

i've successfully run a based FORM authentication project and trying to do the same with an icefaces project. In other terms i want to use ice:form instead of form, so i was wondering if i could ...
boskonovic's user avatar
0 votes
1 answer
4k views

JAAS web-security on jboss 5

hello i'm trying to perform a based form authentication on jboss: these are my configuration files. login-config.xml: <application-policy name="MyPolicy"> <authentication> <login-...
boskonovic's user avatar
0 votes
1 answer
1k views

How do I set it up so that the below login method accepts input from 2 JTextfield boxes?

The problem is that this is a JAAS login application. The below method uses Java's Callback class and it's kinda bugging me out. Because it is wired in with the Callback class (among other things) ...
Mike's user avatar
  • 1,600
3 votes
2 answers
18k views

Decrypting OpenLDAP passwords

I have a set of users in my OpenLDAP and i wish to get some information from them, for example "cn" and "userPassword". However when i retrieve these details the password isnt in plain text even ...
odtf's user avatar
  • 79
0 votes
1 answer
2k views

How to Add a custom Login module to WebLogic application?

I have an webservice that valide the user and return the roles and I write an custom Jaas Login Module for it. How can I use this module in Weblogic(and webcenter)?
CronosNull's user avatar
  • 1,353
0 votes
2 answers
4k views

JAAS - why are my .jsp import's not working?

I have the below JSP file: <%@page import="RdbmsLoginModule, PassiveCallbackHandler" %> <%@page import="SessionLoginContext" %> <%@page import="javax.security.auth.login.LoginContext, ...
Mike's user avatar
  • 1,600
0 votes
2 answers
483 views

java.lang.UnsatisfiedLinkError: sun.net.www.protocol.http.NTLMAuthSequence.initFirst()V

package sun.net.www.protocol.http; import java.io.IOException; public class Test { public static void main(String[] args) throws IOException { System.out.println(new NTLMAuthSequence(...
Gaurav Singhal's user avatar
2 votes
2 answers
1k views

Jackrabbit Security

I started to use Jackrabbit in my project. As i found out there is no complex LoginModule and AccessManager given. I mean we can find SimpleLoginModule but it is just a mock. What i need is a simple ...
androdevo's user avatar
  • 752
13 votes
2 answers
5k views

Why should i use JAAS against hand-written security?

I got hand-written security, simple servlet-filter which redirect not-authorized user to their login pages. Login controller redirect them to the requested URL after successfull authentication or ...
user12384512's user avatar
  • 3,391
64 votes
1 answer
3k views

How can I delegate JAAS authorization checks to Shiro?

I'm developing a server-side application that needs authentication and authorization based on objects. I like Shiro's simplicity, but for being compatible with JAAS, I wrote a LoginModule that uses ...
Deniz Acay's user avatar
  • 1,689
0 votes
2 answers
3k views

how to clear user principals after logout?

The case is easy: user clicks logout, goes to LogoutFilter and: HttpServletRequest hreq = (HttpServletRequest) request; hreq.getSession(false).invalidate(); HttpServletResponse ...
kll's user avatar
  • 1
0 votes
1 answer
3k views

Is "isUserInRole" method related to JAAS?

I've configured JAAS in glassfish 3.0 and used JDBCRealm for authenticating users. It's working properly and URL(s) are restricted. But the method #{facesContext.externalContext.isUserInRole('admin')} ...
wasimbhalli's user avatar
  • 5,172
2 votes
2 answers
2k views

How can I hide some content based on user role in JSF?

I'm using JAAS and have applied security on some folders for different roles. I want to hide some navigation for different users because, although the pages are not accessible, the user can still see ...
wasimbhalli's user avatar
  • 5,172
0 votes
1 answer
278 views

Attribute/Domain security with JavaEE/JaaS?

RBAC is well understood, so this is beyond RBAC. Looking for an efficient/tested approach to deal with attribute, or domain, based security such that a principal may have N attributes (with N values) ...
dhartford's user avatar
  • 1,129
0 votes
2 answers
842 views

Jaas needs a Java Policy I don't know how to provide it

I'm trying to use Jaas, Java Authentication and Autorisation service. The server is App Engine so, it is impossible to edit web.xml. I'm using a servlet filter like: @Override public void doFilter(...
yves amsellem's user avatar
3 votes
1 answer
3k views

Newbie at JAAS authentication; Sign in using a token in the URL Bar [closed]

I have an interesting project requirement where we must accept a token as a GET paramenter that will authenticate a user coming into an application. This is to allow trusted third parties to ...
Jonathan S. Fisher's user avatar
0 votes
1 answer
386 views

Tomcat Single Sign On: server console app and my own apps realms clashing

I have implemented SSO for tomcat using the valve in the config.xml however all my apps use one realm and the server (geronimo) another. Since introducing this they now clash. If signed into my app, ...
Mark W's user avatar
  • 5,894
4 votes
2 answers
2k views

How to implement EAR-wide JAAS

I'd like to implement JAAS across the whole of my EAR file containing multiple wars. I have successfuly set it up on each war, but that means when the user is switching between wars (via hyperlinks ...
Mark W's user avatar
  • 5,894
1 vote
4 answers
4k views

How to use md5 hashing in Jboss 6 for JAAS WebAuthentication?

writing a Java EE 6 application i need some help using the DatabaseServerLoginModule with md5 hashing. Setup: login-config.xml: <application-policy name = "app"> <authentication> ...
nogamawa's user avatar
  • 145
1 vote
2 answers
923 views

User/group implementation compatible with JAAS

I plan to create a Java EE application in which, obviously, there will be users, groups and rights. As this application is all new, I'll use Java EE 6 and EJB security annotations : @RolesAllowed, @...
Riduidel's user avatar
  • 22.2k
0 votes
2 answers
1k views

NTLoginModule: Where does it retrieve user information?

I want the user to be able to Single-Sign-On, i.e. once logged on as Windows User, all services offered by my application should be accessible without further authentication. In order to ...
Simon's user avatar
  • 9,305
6 votes
2 answers
63k views

'SEVERE: SAAJ0009: Message send failed error' while sending a message

Feb 8, 2011 11:56:49 AM com.sun.xml.internal.messaging.saaj.client.p2p.HttpSOAPC onnection post SEVERE: SAAJ0009: Message send failed com.sun.xml.internal.messaging.saaj.SOAPExceptionImpl: java....
prathyush's user avatar
1 vote
1 answer
913 views

How to use Restrict annotation and tag properly

I would like to use @Restrict in seam application. One of my scenario contains a series of actions. Do i need to restrict each and every action or only the starting action? All the actions except ...
Anand's user avatar
  • 1,327
3 votes
1 answer
3k views

Using @RunAs in my EJB Schedulers

I have many EJBs with my business methods. These methods use @RolesAllowed annotation to check if user can execute this method. So I have an EJB Scheduler that calls these EJB methods. EJB schedulers ...
Otávio Garcia's user avatar
1 vote
1 answer
2k views

Cross domain/realm authentication

Here is my problem: I can't find any document on cross domain authentication with java+kerberos. I have to authenticate against distant LDAP on other realm. How can we do that in java? Thank you ...
BigMac's user avatar
  • 39
2 votes
1 answer
940 views

Java EE SSO Best Practices

I found a great white paper (by Sun) about integrating Kerberos, JAAS and the GSS-API together for a heavy-duty SSO system. Unfortunately the article was written for Java 1.4 and is several years old. ...
Pam's user avatar
  • 807