You are viewing a plain text version of this content. The canonical link for it is here.
Posted to slide-user@jakarta.apache.org by Da...@inventivedesigners.com on 2005/03/30 12:34:13 UTC
Authentication constraints question
Hi,
I have security enabled in slide webdav and there I have a question about
the following snippet of XML configuration:
<security-constraint>
...
<auth-constraint>
<role-name>root</role-name>
<role-name>guest</role-name>
<role-name>user</role-name>
</auth-constraint>
...
</security-constraint>
I assume that users having role root, user or guest are allowed to use the
repository...
Is it possible to configure those roles somewhere else? Can you change
those values while slide is running?
Can you configure that the role doesn't matter for access to slide?
Thanks!!!
David.
--------------------------------------------------
Inventive Designers' Email Disclaimer:
http://www.inventivedesigners.com/email-disclaimer
---------------------------------------------------------------------
To unsubscribe, e-mail: slide-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: slide-user-help@jakarta.apache.org
Re: Authentication constraints question
Posted by Denis Zvonov <zv...@mobilae.ru>.
Hi guys,
I would like to extend this question.
Whether there is possibility to have authentication without any
constraints from tomcat side? AFAIU this <security-constraint> is a
tomcat configuration actually. What I want is to always have
authenticated user, but don't want any additional security checking from
tomcat.
I saw an example with
<role-name>*</role-name>
but it does not work actually.
Thanks!
Denis.
David_Geleyn@inventivedesigners.com wrote:
>Hi,
>
>I have security enabled in slide webdav and there I have a question about
>the following snippet of XML configuration:
>
><security-constraint>
>...
> <auth-constraint>
> <role-name>root</role-name>
> <role-name>guest</role-name>
> <role-name>user</role-name>
> </auth-constraint>
>...
></security-constraint>
>
>I assume that users having role root, user or guest are allowed to use the
>repository...
>
>Is it possible to configure those roles somewhere else? Can you change
>those values while slide is running?
>
>Can you configure that the role doesn't matter for access to slide?
>
>Thanks!!!
>
>David.
>
>
>
>
>--------------------------------------------------
>Inventive Designers' Email Disclaimer:
>
>http://www.inventivedesigners.com/email-disclaimer
>
>---------------------------------------------------------------------
>To unsubscribe, e-mail: slide-user-unsubscribe@jakarta.apache.org
>For additional commands, e-mail: slide-user-help@jakarta.apache.org
>
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: slide-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: slide-user-help@jakarta.apache.org
Re: Authentication constraints question
Posted by C Kramer <cc...@gmail.com>.
It's best to use gmane.org as your news:// service. There you'll have
mailing list in nice newsgroup format.
David_Geleyn@inventivedesigners.com wrote:
>>I posted about this earlier, look in forum archive.
>>If you're using Tomcat/JAAS and have your own user system, you just need
>
>
>>to turn off SLIDE's security constraints:
>
> I apologize for that, but the Slide mailing list is not searchable any
> longer. Is there a searchable archive?
>
>
>>in Domain.xml
>>look for <permission> tags
>>
>>like this:
>>
>><objectnode classname="org.apache.slide.structure.SubjectNode"
>
> uri="/files">
>
>> <!-- to make clear to stores that rely on
>>it
>
> this is a collection -->
>
>> <revision>
>> <property
>>name="resourcetype"><![CDATA[<collection/>]]></property>
>> </revision>
>> <!-- <permission action="all" subject="all"
>>
>
> inheritable="true" />-->
>
>> <!-- <permission action="all"
>
>
>>subject="authenticated" inheritable="true"/>-->
>> <!-- <permission action="all"
>
>
>>subject="unauthenticated" inheritable="true"/>-->
>> <!-- <permission action="all"
>>subject="/roles/user"
>
> inheritable="true"/>-->
>
>> </objectnode>
>>
>>You see, all permissions commented out. It only works this way if you
>>don't use Slide's access system and have your own, with JAAS too.
>
>
> I have developed a SecurityStore which returns all roles and users.
> I also made a JAAS Login Realm. I'm using Jetty.
>
> I'm using the ACL system of slide, but I'm providing the roles and users
> via the security store.
> I added a role (newrole) with 'allow all' permission to the files
> directory of the repos. When i try to connect with a user that has the
> newrole role to url http://localhost:13542/slide/files/, it tells me that
> i'm not authorized. In the server, the following error message occurs:
> Mar 30, 2005 4:41:26 PM CEST [PoolThread-10] [WARNING] AUTH FAILURE: role
> for jos
> When I add the newrole to the auth-constraint, it works fine. So, I just
> want to change the auth-constraint when slide is running. Or I want to be
> capable of saving this list somewhere else... But i guess this isn't
> possible?
>
> David.
>
>
> --------------------------------------------------
>
> Inventive Designers' Email Disclaimer:
>
> http://www.inventivedesigners.com/email-disclaimer
---------------------------------------------------------------------
To unsubscribe, e-mail: slide-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: slide-user-help@jakarta.apache.org
Re: Authentication constraints question
Posted by Da...@inventivedesigners.com.
> I posted about this earlier, look in forum archive.
> If you're using Tomcat/JAAS and have your own user system, you just need
> to turn off SLIDE's security constraints:
I apologize for that, but the Slide mailing list is not searchable any
longer. Is there a searchable archive?
>
> in Domain.xml
> look for <permission> tags
>
> like this:
>
> <objectnode classname="org.apache.slide.structure.SubjectNode"
uri="/files">
> <!-- to make clear to stores that rely on
> it
this is a collection -->
> <revision>
> <property
> name="resourcetype"><![CDATA[<collection/>]]></property>
> </revision>
> <!-- <permission action="all" subject="all"
>
inheritable="true" />-->
> <!-- <permission action="all"
> subject="authenticated" inheritable="true"/>-->
> <!-- <permission action="all"
> subject="unauthenticated" inheritable="true"/>-->
> <!-- <permission action="all"
> subject="/roles/user"
inheritable="true"/>-->
> </objectnode>
>
> You see, all permissions commented out. It only works this way if you
> don't use Slide's access system and have your own, with JAAS too.
I have developed a SecurityStore which returns all roles and users.
I also made a JAAS Login Realm. I'm using Jetty.
I'm using the ACL system of slide, but I'm providing the roles and users
via the security store.
I added a role (newrole) with 'allow all' permission to the files
directory of the repos. When i try to connect with a user that has the
newrole role to url http://localhost:13542/slide/files/, it tells me that
i'm not authorized. In the server, the following error message occurs:
Mar 30, 2005 4:41:26 PM CEST [PoolThread-10] [WARNING] AUTH FAILURE: role
for jos
When I add the newrole to the auth-constraint, it works fine. So, I just
want to change the auth-constraint when slide is running. Or I want to be
capable of saving this list somewhere else... But i guess this isn't
possible?
David.
--------------------------------------------------
Inventive Designers' Email Disclaimer:
http://www.inventivedesigners.com/email-disclaimer
---------------------------------------------------------------------
To unsubscribe, e-mail: slide-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: slide-user-help@jakarta.apache.org
Re: Authentication constraints question
Posted by C Kramer <cc...@gmail.com>.
I posted about this earlier, look in forum archive.
If you're using Tomcat/JAAS and have your own user system, you just need
to turn off SLIDE's security constraints:
in Domain.xml
look for <permission> tags
like this:
<objectnode classname="org.apache.slide.structure.SubjectNode" uri="/files">
<!-- to make clear to stores that rely on it
this is a collection -->
<revision>
<property
name="resourcetype"><![CDATA[<collection/>]]></property>
</revision>
<!-- <permission action="all" subject="all"
inheritable="true" />-->
<!-- <permission action="all"
subject="authenticated" inheritable="true"/>-->
<!-- <permission action="all"
subject="unauthenticated" inheritable="true"/>-->
<!-- <permission action="all" subject="/roles/user"
inheritable="true"/>-->
</objectnode>
You see, all permissions commented out. It only works this way if you
don't use Slide's access system and have your own, with JAAS too.
David_Geleyn@inventivedesigners.com wrote:
> Hi,
>
> I have security enabled in slide webdav and there I have a question about
> the following snippet of XML configuration:
>
> <security-constraint>
> ...
> <auth-constraint>
> <role-name>root</role-name>
> <role-name>guest</role-name>
> <role-name>user</role-name>
> </auth-constraint>
> ...
> </security-constraint>
>
> I assume that users having role root, user or guest are allowed to use the
> repository...
>
> Is it possible to configure those roles somewhere else? Can you change
> those values while slide is running?
>
> Can you configure that the role doesn't matter for access to slide?
>
> Thanks!!!
>
> David.
>
>
>
>
> --------------------------------------------------
>
> Inventive Designers' Email Disclaimer:
>
> http://www.inventivedesigners.com/email-disclaimer
---------------------------------------------------------------------
To unsubscribe, e-mail: slide-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: slide-user-help@jakarta.apache.org