jaas.config / JAASRealms

[Oliver Block <li...@oliver-block.eu>]

Hello,

on the development pc I've put the jaas.config file to my home directory. As I 
am running tomcat from netbeans, that's no problem. I've modified 
jdk/jre/lib/security/java.security to find the jaas.config.

Is it compatible with the jaas design to keep web applicaton specific 
jaas.config files and are there any directives for web.xml to declare the 
path to jaas.config?

Best Regards,

Oliver Block

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org

RE: jaas.config / JAASRealms

["Caldarale, Charles R" <Ch...@unisys.com>]

> From: Oliver Block [mailto:lists@oliver-block.eu]
> Subject: jaas.config / JAASRealms
> 
> I've modified jdk/jre/lib/security/java.security to 
> find the jaas.config.

Not a good idea, since that affects every Java execution on that system.  Better to specify the location via the java.security.auth.login.config system property.

> Is it compatible with the jaas design to keep web applicaton 
> specific jaas.config files

I don't believe so; JAAS appears to be for the whole JVM instance, not individual webapps.

> are there any directives for web.xml to declare the
> path to jaas.config?

No, the servlet spec is agnostic when it comes to the actual authentication mechanism.

 - Chuck


THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers.


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org