Comments on: Writing a Custom JAAS LoginModule

By: Ralf

Ralf — Thu, 04 Jun 2009 08:50:34 +0000

Thank you very much. It is indeed a very helpful article. I was able to package the new login module into the ejb module using the new simplified security domain configuration approach in JBoss 5.

On the client side I used the SecurityClient class from JBoss to pass the credentials to the application server.

By: Goutam Dutta

Goutam Dutta — Thu, 26 Mar 2009 09:43:48 +0000

Its a very good article. However i have 2 questions

1> You have mentioned that JBOSS requires the name to be “Roles”. Do you know about Glassfish?

2> Will these roles which are set above be accessible when we invoke HttpServletRequest.isUserInRole(String..) method.

By: Dao Anh Vu

Dao Anh Vu — Wed, 04 Mar 2009 02:46:06 +0000

It’s really a great article, you help me solve the problem I’ve got stuck for a long time. Thank Eric!

By: Nicky

Nicky — Tue, 14 Oct 2008 17:54:51 +0000

extremely helpful for me. I searched all the internet and finally got your article. Awesome.

By: hedin

hedin — Tue, 29 Jul 2008 05:53:33 +0000

Hi i done so too but i got a proplem.

Then i call session.getCallerPrincipal() (from my session bean) i get SimplePrincipal instance instead of MyPrincipal.

Did you try accessing session.getCallerPrincipal()?

By: Rick

Rick — Thu, 12 Jun 2008 23:24:58 +0000

Good stuff. Thanks.

By: Juan P Morales

Juan P Morales — Mon, 09 Jun 2008 22:18:48 +0000

Great article, concise and helpful.
Why create myUser and myGroup? Couldn’t you have just used SimpleUser and SimpleGroup?
If it was an EAR, how could you make it have a custom login-config? There you did it with an mbean. Would attribute name=”AuthConfig” work on an ear file? If so, on which descriptor?