jaas « Library « Java Enterprise Q&A





1. How to the JVM to use a given jaas.conf file?    stackoverflow.com

How to I setup the JVM to use a given jaas.conf I created as JAAS setup? Maybe there is a JAAS picks up a configuration property which I can set on ...

2. How to setup JAAS (in jaas.conf) to use NTLoginModule?    stackoverflow.com

I guess an example of jaas.conf file that uses the NTLoginModule for authentication would help.

3. Java Web Application: Using a custom realm    stackoverflow.com

I'm writing a java web application which need to perform login through a webservice. Of course, none of the realms supplied with the application server I'm using (glassfish v2) can do ...

4. Customizing login procedure in a java web application    stackoverflow.com

I'm writing a java application which needs to perform an unusual login procedure. One of my problems is that the user needs to supply more than a simple username/password combination. Specifically, ...

5. JAAS Authentication to Windows Domain    stackoverflow.com

Using a provided username, password, and domain name, how can I retrieve a boolean value indicating if a user has successfully authenticated with a primary domain controller? Authentication should be performed ...

6. In Java5, how do I get the full name of the user running the application?    stackoverflow.com

In Java5, is there a way to get the full name of the user that is running the application using only JDK APIs? (I know about JAAS and third-party libraries, ...

7. Java and Kerberos authentication krb5.conf versus System.setProperty    stackoverflow.com

Please help me on a kerberos+Java problem. I have a simple Java program to authenticate to a Windows Active Directory using Kerberos. The following java code works fine without any problems ...

8. Logging into Jackrabbit with custom LoginModule    stackoverflow.com

I am trying to write a LoginModule that authenticates users with Jackrabbit repository. However, I want it to check the credentials that are stored in repository itself. So the problem is, ...

9. How to validate a Kerberos ticket against a server in Java?    stackoverflow.com

we are using JAAS to enable Single Sign On in a Java application using the Windows Kerberos ticket cache. Our jaas.conf config file looks like this:

LoginJaas {
  com.sun.security.auth.module.Krb5LoginModule required
  ...





10. URLCallback with JAAS on WAS?    stackoverflow.com

I extended the JAAS javax.security.auth.spi.LoginModule, and installed it into a WAS server. It works; all logins go through the code in this new class, and if it says to not ...

11. JAAS tutorial - how to force application to run with policy    stackoverflow.com

I just went through this tutorial: http://java.sun.com/docs/books/tutorial/security/tour2/index.html And was curios about the basic concept of JAAS... If every applcation needs to be run with the '-Djava.security.manager -Djava.security.policy=...' flags, what is enforcing ...

12. Configuring JAAS on OC4J    stackoverflow.com

I'm trying to get JAAS working with OC4J.
I've gotten JAAS working before with JBoss. Using JAAS with JBoss is simple (to me). In the app's jboss-web.xml, put this:

<security-domain>java:/jaas/myApp</security-domain>
And put the following in ...

13. Using SSPI to get SSO from Java application running on Windows    stackoverflow.com

I have a Java application running on Windows that needs to authenticate to a webapp using Kerberos/SPNEGO. I'm aware of how to configure JAAS to achieve this, but I find ...

14. Using Mockito, how do I intercept a callback object on a void method?    stackoverflow.com

I'm using mockito to test a legacy JAAS/LDAP login module. The javax.security.auth.callback.CallbackHandler interface defines the function:

void handle(javax.security.auth.callback.Callback[] callbacks)
I'm expecting callbacks to contain a NameCallback, which is the object that needs to be ...

15. Using Kerberos to encrypt credentials / What is a static secret for a principal    stackoverflow.com

An application written in Java needs to store passwords to external services per user. Within the application the user itself authenticates against a KDC using Kerberos (basically creating a LoginContext utilizing ...

16. Java EE SSO Best Practices    stackoverflow.com

I found a great white paper (by Sun) about integrating Kerberos, JAAS and the GSS-API together for a heavy-duty SSO system. Unfortunately the article was written for Java 1.4 and is ...





17. NTLoginModule: Where does it retrieve user information?    stackoverflow.com

I want the user to be able to Single-Sign-On, i.e. once logged on as Windows User, all services offered by my application should be accessible without further authentication. In order to ...

18. Caching of jaas.config file    stackoverflow.com

We are upgrading the java version to java15_64. We have JAAS in place, which was earlier using AIXLoginModule2000. Now we have changed the login module to AIX64LoginModule in jaas.config file.

Application{
com.ibm.security.auth.module.AIX64LoginModule required debug=false;
};
But ...

19. Jaas needs a Java Policy I don't know how to provide it    stackoverflow.com

I'm trying to use Jaas, Java Authentication and Autorisation service. The server is App Engine so, it is impossible to edit web.xml. I'm using a servlet filter like:

@Override
public void doFilter(ServletRequest request, ...

20. Cacheing Kerberos Tickets    stackoverflow.com

after playing with : http://download.oracle.com/javase/6/docs/technotes/guides/security/jgss/lab/part1.html and going through all the parts till: http://download.oracle.com/javase/6/docs/technotes/guides/security/jgss/lab/part3.html#SSO It was all good and helpful, however on the last link - when i add 'useTicketCache=true' in the ...

21. Jaas web application    stackoverflow.com

Hi I write Jaas web application - it is work but when I enter the user/password in login jsp page by user exist in Mysql database give me an exception -> Caught Exception: ...

22. how to clear user principals after logout?    stackoverflow.com

The case is easy: user clicks logout, goes to LogoutFilter and:

    HttpServletRequest hreq = (HttpServletRequest) request;
    hreq.getSession(false).invalidate();

    HttpServletResponse httpResponse = (HttpServletResponse) response;

 ...

23. How can I delegate JAAS authorization checks to Shiro?    stackoverflow.com

I'm developing a server-side application that needs authentication and authorization based on objects. I like Shiro's simplicity, but for being compatible with JAAS I wrote a LoginModule that uses Shiro as ...

24. Java LoginContext and TextCallbackHandler    stackoverflow.com

After reading and creating: http://download.oracle.com/javase/jndi/tutorial/ldap/security/gssapi.html i can succesfully log into Kerberos and get a ticket and what not; ive since had a play around and wanted to try something different. instead of ...

25. JAAS, doing login from outside the container    stackoverflow.com

I have an application with JAAS and i need do an external login from the legacy, so i wrote a servlet with this code bellow, it works fine, but when i ...

26. JAAS LoginModule flags    stackoverflow.com

I'm trying to work out how the Login module flags work in JAAS (using JBoss 5.1 EAP) and I've come across a puzzling situation that I'm hoping someone can clarify for ...

27. Passing information between Java LoginModules (Generic Map Problem)    stackoverflow.com

I am currently trying to write some LoginModules to enable users to log into a Java application. Here is my .java.login.config file:

"Java Application" {
    path.to.login.module.PamLoginModule   ...

28. Kerberos - difference btween JAAS connection to server and SQL Server Trusted Connection    stackoverflow.com

My understanding is that both JAAS and SQL Server can be configured to use kerberos in a domain environment, with an active directory server. My understanding that JAAS gets the user ...

29. Authentication in .net    stackoverflow.com

I'd like my application, written in C#, to perform authentications, just like I used to do in Java through JAAS. Which objects should I use? Which classes? Thank you for your ...

30. Create custom Callback JAAS    stackoverflow.com

Please, suggest. I'm developing AA part now. Module specific that is I use userKey to authorize user. So I decided create own callback. But in login module I get NullPointerException. That ...

31. Populating LoginContext    stackoverflow.com

Is there anyway i can populate a LoginContext rather than using the callbackhandler? my program will recieve username and password (what the callbakchandler deals with),i want to use them rather than ...

32. Load custom LoginModule in Java code at run-time    stackoverflow.com

I want to implement my own LoginModule for my web application I package into a jar. Currently I run it in Tomcat, but I want to have it run easily ...

33. How to programatically specify my user/role in OpenEJB?    stackoverflow.com

In the project I'm working on, we are using OpenEJB as a framework to test our EJB. We construct an InitialContext programatically, and use it to get the transaction manager and ...

34. How to add "Disable User" admin-feature in JEE application?    stackoverflow.com

I have a JEE application that uses JDBCReal as JAAS Context for authentication on Glassfish 3.1. And below is the authentication code in a JSF2.0 managedbean -

FacesContext context = ...

35. Kerberos Cached Ticket    stackoverflow.com

I am on windows 7 (64-bit) and I have created a simple app to count files in the run method of a class that implements PrivilegedAction. following is my jaas.conf file:

CountFiles ...

36. jaas and java web start    stackoverflow.com

I am using jdbcRealm in GlassFish server. When running from Netbeans my simple Enterprise application works fine. When I call an ejb method from swing client application, it automatically asks for ...

37. JWS and JAAS    coderanch.com

38. Using Custom Policy Class in JAAS    coderanch.com

Hi I am facing problems in implementing JAAS with cutom Policy class. I have created a CustomPolicy class which extends from sun.security.provider.PolicyFile class. In the java.security class I have set the property policy.provider to the custom class and pass the policy file name as command line option. But when I run the application the custom policy file is not being used. ...

39. JAAS    coderanch.com

I am completely new to this JAAS. I tried a sample code to run through eclipse. i am getting "java.lang.SecurityException: Unable to locate a login configuration". can anyone tell me how to configure the config file through eclipse. i had written a sample class and i have a config file in the same workspace but still its not recognizing the config ...

40. Problem of JAAS with JDK version    coderanch.com

Hi, I am facing a problem for JAAS implementation with Java(TM) 2 SDK, Standard Edition Version 1.4.1 and tagish.jar. I took help form http://www.mooreds.com/jaas.htmland also from http://free.tagish.net/jaas/doc.html. ---------------------------------------------------------------------------- I used JAAS with the above mentioned configurations for UserId/password Authorization and Authentication of my application. ---------------------------------------------------------------------------- Here also I use tagish.login file for the class I use for JAAS Entry in the ...

41. Using JAAS    coderanch.com

Hi, Hi, Instead of having a log in page I need to authenticate and authorise the username and password using JAAS and get the u/name and p/word from the System that the user is already logged in to e.g Windows NT. I think you do this in the LoginModule - login() but don't know how to access the systems username and ...

42. JAASRealm with JAAS    coderanch.com

43. use form based auth with JAAS ?    coderanch.com

44. Container Authentication & JAAS    coderanch.com

46. To Cay and Gary: SASL and JAAS    coderanch.com

I am definitely not an expert on SASL, and it seems to me a rather specialized issue. It is a protocol that allows client and server to negotiate an authentication mechanism. SASL is used by LDAPv3 and IMAP. However, if all you want is talk to LDAP or IMAP servers, then you need not worry about SASL--the JNDI and JavaMail APIs ...

47. what is SASL and JAAS    coderanch.com

What are they and what are they used for? The Java Authentication and Authorization Service (JAAS) is a set of APIs that enable services to authenticate and enforce access controls upon users. SASL is the Simple Authentication and Security Layer, a method for adding authentication support to connection-based protocols. To use SASL, a protocol includes a command for identifying ...

48. JAAS    coderanch.com

OK, perhaps I was reading a little into the tone of the reply you link to. Given it seems to be posted by the same person who is asking the question on this site, and they are asking the same question again, it is perhaps not that helpful to link them back to their original question? Or don't you agree? Referring ...

49. How to use JAAS??    coderanch.com

Hi all, I'm building a web application using JSP and Sevlet, and I want to design a login page where users enter their name and pass. I heared that if I want to design that page I need to implement JAAS (Java Authentication and Authorization Service) please help me to do that and give me code, links, or articles that talk ...

50. JAAS related query!    coderanch.com

51. Authorization using JAAS    coderanch.com

Hello All, How can we check authorization using the JAAS policy file? I'm working on a Swing-based desktop application and need to restrict access to some screens, based on the user role. Which method can be used to check against the policy file, if a particular role has access to a form? The policy file contains roles and permissions, as follows: ...

52. Custom and generic JAAS module    coderanch.com

Hi, I was looking to write a Custom and Generic JAAS based login module. which will be used for both authentication and authorization. And use it across all the application server. I wrote a Custom LoginModule for Tomcat. Can i use the same class across all the Application server like JBoss, Weblogic and websphere. Thanks Param

53. JAAS and Policy files problems    coderanch.com

Hello everybody, I have a problem with a Java WS application that use Jaas authentication through Jboss AS. If I start the application from the command line (java -jar myApp.jar) it works just fine. But if I load the application with the JNLP file I get an error like: Exception in thread "AWT-EventQueue-0" java.security.AccessControlException:\ access denied (java.util.PropertyPermission java.security.auth.login.config read) at java.security.AccessControlContext.checkPermission(AccessControlContext.java:323) ...

54. JAAS - NTSID to "friendly" name    coderanch.com

I'm using JAAS to authenticate my app against an NT domain and would like to use my app to look through the different security groups associated with the user. I create my LoginContext, then login, then looking through the returned Principal objects: lc = new LoginContext("Main", new NullCallback()); lc.login(); for(Principal p : lc.getSubject().getPrincipals()){ System.out.println(p.getName()); } All's well so far but when ...

55. Jaas issue    forums.oracle.com

I am using Struts 1.2 i want to do validation for login page.. If click on login button without entering the user name and password... I want to display message "user name and password cannot be empty"... If he not authorized then i want to display a message ...warning message "User name and password dose not exists... Please help... me... shashi ...

56. JAAS authentication    forums.oracle.com

In my admin console for my RAD (WAS 6.1) i mention the following : I use a jndi name (nothing but a key value pair) along with a database url (sthg like jdbc:oracle:oci:@sthg) Also under jaas authentication I mention the username and password to get connected to the database. I would like to know how does the connection to the database ...

57. difference betwwen jaas and realm    forums.oracle.com

This is less or more Servlet related. In the future, please use the [Servlet forum|http://forums.sun.com/forum.jspa?forumID=33] for this kind of question to get better response. To the point: JAAS (Java Authentication & Authorization Service) is authentication framework at Java SE level. Realm is an abstract layer between the webapplication and several ways of authentication so that you can easily switch between the ...

58. problem with jaas    forums.oracle.com

59. start with jaas    forums.oracle.com

60. Diffrerence between SSOAuthenticator and JAAS Authentication?    forums.oracle.com

From what I have found so far is that JAAS implementation transfers the concern of security more towards application rather then server. Hence all we need to have is a login module configured on the server and write our own implementation of callbacks for each kind of authentication technology(e.g smart card based/fingerprint based etc...).

62. JAAS - problem in compiling the program    forums.oracle.com

64. JAAS application    forums.oracle.com

Hi, I am very much new to the jaas and web applications , can any one please guide me in finding the white papers for the JAAS stuff .. i had been through many files but could not find a suitable for it .. It would be great if some one can send a simple web application using JAAS to my ...

65. JAAS Policy provider    forums.oracle.com

Hi I am extending JAAS(j2sdk1.4.2_11) I have set policy.provider to the my custom policy class in java.security file still it is not creating my custom policy class object any idea about it? And can we use JAAS to extend for Authorization only without implementing Authentication. Because in Jaas auhorization is authetication based. Please help in this Regards, Bhupendra

66. Jaas Authorization    forums.oracle.com

Because what i want is if user click on some page some of the UI component will be hidden based on his/her priveleges. Currently that one it can be done by storing each user access right into ldap and my program will parse it How this Jaas authorization fit into my web application if i want to use this framework?

67. JAAS Login Configuration File    forums.oracle.com

68. JAAS Control flow question.    forums.oracle.com