You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@geronimo.apache.org by "Bill Brown (JIRA)" <ji...@apache.org> on 2007/04/09 04:07:32 UTC
[jira] Created: (GERONIMO-3076) Request to add Security Realm
dependencies from the web console
Request to add Security Realm dependencies from the web console
---------------------------------------------------------------
Key: GERONIMO-3076
URL: https://issues.apache.org/jira/browse/GERONIMO-3076
Project: Geronimo
Issue Type: Improvement
Security Level: public (Regular issues)
Components: security
Affects Versions: 2.0-M4
Environment: all
Reporter: Bill Brown
Greetings:
I am not sure if this has already been requested. I have a custom jaas security realm I use for authentication. The realm depends on a library in the common lib. When the server is down I can add the dependency tag in the gbean for the realm in the config.xml file. I think it would be a neat feature to be able to add this and other dependencies to the realm from within the web console while the server is running without having to edit the config.xml server when the server is stopped.
Thanks for the consideration.
Bill.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Commented: (GERONIMO-3076) Request to add Security Realm
dependencies from the web console
Posted by "David Jencks (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/GERONIMO-3076?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_12487487 ]
David Jencks commented on GERONIMO-3076:
----------------------------------------
Could you provide examples of what is currently generated and what you'd like to have generated? Which file is this in?
As a side note, from your description it looks like the console is adding the security realm gbeans directly to config.xml. I think its almost always more appropriate to create an entirely new plan, and if that's not what the console is doing I think we should change it. Again I'm not quite sure what the console can do but adding dependencies to a plan is something that should be available in a uniform way for all plans.
thanks
> Request to add Security Realm dependencies from the web console
> ---------------------------------------------------------------
>
> Key: GERONIMO-3076
> URL: https://issues.apache.org/jira/browse/GERONIMO-3076
> Project: Geronimo
> Issue Type: Improvement
> Security Level: public(Regular issues)
> Components: security
> Affects Versions: 2.0-M4
> Environment: all
> Reporter: Bill Brown
>
> Greetings:
> I am not sure if this has already been requested. I have a custom jaas security realm I use for authentication. The realm depends on a library in the common lib. When the server is down I can add the dependency tag in the gbean for the realm in the config.xml file. I think it would be a neat feature to be able to add this and other dependencies to the realm from within the web console while the server is running without having to edit the config.xml server when the server is stopped.
> Thanks for the consideration.
> Bill.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Commented: (GERONIMO-3076) Request to add Security Realm
dependencies from the web console
Posted by "Bill Brown (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/GERONIMO-3076?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_12487566 ]
Bill Brown commented on GERONIMO-3076:
--------------------------------------
Greetings:
I need to further point out that I have not figured out a way to modify the config.xml file to add the missing dependency for the custom realm. Is there a proper way to do this? Which RTFM do I need to see?
Thanks.
Bill.
> Request to add Security Realm dependencies from the web console
> ---------------------------------------------------------------
>
> Key: GERONIMO-3076
> URL: https://issues.apache.org/jira/browse/GERONIMO-3076
> Project: Geronimo
> Issue Type: Improvement
> Security Level: public(Regular issues)
> Components: security
> Affects Versions: 2.0-M4
> Environment: all
> Reporter: Bill Brown
>
> Greetings:
> I am not sure if this has already been requested. I have a custom jaas security realm I use for authentication. The realm depends on a library in the common lib. When the server is down I can add the dependency tag in the gbean for the realm in the config.xml file. I think it would be a neat feature to be able to add this and other dependencies to the realm from within the web console while the server is running without having to edit the config.xml server when the server is stopped.
> Thanks for the consideration.
> Bill.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Updated: (GERONIMO-3076) Request to add Security Realm
dependencies from the web console
Posted by "David Jencks (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/GERONIMO-3076?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
David Jencks updated GERONIMO-3076:
-----------------------------------
Component/s: (was: security)
console
I think this is a request that the security realm wizard should generate a new plan and allow you to select whatever dependencies you want for it. It doesn't really have anything to do with security per se.
> Request to add Security Realm dependencies from the web console
> ---------------------------------------------------------------
>
> Key: GERONIMO-3076
> URL: https://issues.apache.org/jira/browse/GERONIMO-3076
> Project: Geronimo
> Issue Type: Improvement
> Security Level: public(Regular issues)
> Components: console
> Affects Versions: 2.0-M4
> Environment: all
> Reporter: Bill Brown
>
> Greetings:
> I am not sure if this has already been requested. I have a custom jaas security realm I use for authentication. The realm depends on a library in the common lib. When the server is down I can add the dependency tag in the gbean for the realm in the config.xml file. I think it would be a neat feature to be able to add this and other dependencies to the realm from within the web console while the server is running without having to edit the config.xml server when the server is stopped.
> Thanks for the consideration.
> Bill.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Commented: (GERONIMO-3076) Request to add Security Realm
dependencies from the web console
Posted by "David Jencks (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/GERONIMO-3076?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_12488588 ]
David Jencks commented on GERONIMO-3076:
----------------------------------------
You can't change the depedencies of a module through config.xml, only through modifying the plan for the module. I don't think we should support changing dependencies through config.xml: if aliasing through artifact_aliases.properties isn't enough then we should concentrate on xml configuration in car files so its relatively easy to change a "compiled" module.
> Request to add Security Realm dependencies from the web console
> ---------------------------------------------------------------
>
> Key: GERONIMO-3076
> URL: https://issues.apache.org/jira/browse/GERONIMO-3076
> Project: Geronimo
> Issue Type: Improvement
> Security Level: public(Regular issues)
> Components: security
> Affects Versions: 2.0-M4
> Environment: all
> Reporter: Bill Brown
>
> Greetings:
> I am not sure if this has already been requested. I have a custom jaas security realm I use for authentication. The realm depends on a library in the common lib. When the server is down I can add the dependency tag in the gbean for the realm in the config.xml file. I think it would be a neat feature to be able to add this and other dependencies to the realm from within the web console while the server is running without having to edit the config.xml server when the server is stopped.
> Thanks for the consideration.
> Bill.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Updated: (GERONIMO-3076) Request to add Security Realm
dependencies from the web console
Posted by "Bill Brown (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/GERONIMO-3076?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Bill Brown updated GERONIMO-3076:
---------------------------------
Greetings:
The first output below is the deployment plan for the security realm I created using the web console (I cliked the show deployment button). The realm deploys ok but it does not work because it is missing a mysql dependency needed to to the db lookup for the realm:
<module xmlns="http://geronimo.apache.org/xml/ns/deployment-1.2">
<environment>
<moduleId>
<groupId>console.realm</groupId>
<artifactId>test</artifactId>
<version>1.0</version>
<type>car</type>
</moduleId>
<dependencies>
<dependency>
<groupId>org.apache.geronimo.configs</groupId>
<artifactId>j2ee-security</artifactId>
<type>car</type>
</dependency>
<dependency>
<groupId>com.colorful</groupId>
<artifactId>jaasAuth</artifactId>
<version>1.0.0.1-SNAPSHOT</version>
<type>jar</type>
</dependency>
<!--needed mysql dependency missing here -->
</dependencies>
</environment>
<gbean name="test" class="org.apache.geronimo.security.realm.GenericSecurityRealm" xsi:type="dep:gbeanType" xmlns:dep="http://geronimo.apache.org/xml/ns/deployment-1.2" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<attribute name="realmName">test</attribute>
<reference name="ServerInfo">
<name>ServerInfo</name>
</reference>
<reference name="LoginService">
<name>JaasLoginService</name>
</reference>
<xml-reference name="LoginModuleConfiguration">
<log:login-config xmlns:log="http://geronimo.apache.org/xml/ns/loginconfig-1.2">
<log:login-module control-flag="REQUIRED" server-side="true" wrap-principals="false">
<log:login-domain-name>earthbeats</log:login-domain-name>
<log:login-module-class>com.colorful.auth.AESLoginModule</log:login-module-class>
<log:option name="user">user</log:option>
<log:option name="debug">true</log:option>
<log:option name="password">password</log:option>
<log:option name="url">jdbc:mysql://localhost/test</log:option>
<log:option name="key">keyDATA_HERE</log:option>
<log:option name="driver">com.mysql.jdbc.Driver</log:option>
</log:login-module>
</log:login-config>
</xml-reference>
</gbean>
</module>
The modified xml below contains the mysql dependency needed for the custom realm to work. I copied the dependency tag by clicking on the jar link in the common/lib's section of the web console.
...
<environment>
<moduleId>
<groupId>console.realm</groupId>
<artifactId>test</artifactId>
<version>1.0</version>
<type>car</type>
</moduleId>
<dependencies>
<dependency>
<groupId>org.apache.geronimo.configs</groupId>
<artifactId>j2ee-security</artifactId>
<type>car</type>
</dependency>
<dependency>
<groupId>com.colorful</groupId>
<artifactId>jaasAuth</artifactId>
<version>1.0.0.1-SNAPSHOT</version>
<type>jar</type>
</dependency>
<!--needed mysql dependency missing here -->
<dependency>
<groupId>mysql</groupId>
<artifactId>mysql-connector-java</artifactId>
<version>3.1.12</version>
<type>jar</type>
</dependency>
</dependencies>
</environment>
...
The only way I know of to add the missing dependency is to modify the config.xml file when the server is stopped. So the feature would be to somehow add the needed dependency during the configuration of the realm.
Thanks for looking at this.
Bill.
> Request to add Security Realm dependencies from the web console
> ---------------------------------------------------------------
>
> Key: GERONIMO-3076
> URL: https://issues.apache.org/jira/browse/GERONIMO-3076
> Project: Geronimo
> Issue Type: Improvement
> Security Level: public(Regular issues)
> Components: security
> Affects Versions: 2.0-M4
> Environment: all
> Reporter: Bill Brown
>
> Greetings:
> I am not sure if this has already been requested. I have a custom jaas security realm I use for authentication. The realm depends on a library in the common lib. When the server is down I can add the dependency tag in the gbean for the realm in the config.xml file. I think it would be a neat feature to be able to add this and other dependencies to the realm from within the web console while the server is running without having to edit the config.xml server when the server is stopped.
> Thanks for the consideration.
> Bill.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.