Explain PWCallback

[Shawn McKinney <sm...@sbcglobal.net>]

I'm trying to get my mind around the notion of a
password callback in Axis.  I understand the concept,
especially as it relates to JAAS.  That is the user
supplies the password from their console, form,
whatever.

But, in a B2B scenario there is no user interaction
(obviously).  So - how am I suppose to plug passwords
into the callback? I can't query LDAP for the
password.  I don't want to stick then in a file.  I
need a way to plug the password into my handler in a
parameterized fashion.  

Any ideas?

Thanks

Re: Explain PWCallback

[Martin Stemplinger <ms...@gmx.de>]

Shawn McKinney schrieb am 04/28/2005 04:16 PM:
  But, in a B2B scenario there is no user interaction
> (obviously).  So - how am I suppose to plug passwords
> into the callback? I can't query LDAP for the
> password.  I don't want to stick then in a file.  I
> need a way to plug the password into my handler in a
> parameterized fashion.  

As I understand it the PWCallback ic called to find the password for the 
username provided. It is up to you how you implement this. You could 
fill a file, a database table or provide it as a property on the command 
line. I'd recommend a LDAP dircetory if you need to deal with a large 
number of users or a properties file for a small user base. Beware that 
you need to have access to the plaintext password even if you use 
PasswordDigest! So you may want to encrypt it.

Does this help?

Cheers
Martin