You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@jackrabbit.apache.org by Steven Melis <st...@student.kuleuven.be> on 2006/03/15 01:07:23 UTC

JAAS Authentication

Hi,

I'm a student in the computerscience and I'm working with Jackrabbit for about one year now.  I would like to add user authentication and authorisation using the build in JAAS module, but I really don't know how to start.  Can anyone help me on this? A tutorial, some documentation or maybe some sample code could get me started... 
I would like to give users certain access restrictions on nodes.


Many thanks in advance,
Steven Melis

Re: JAAS Authentication

Posted by David Pölz <da...@jmellow.org>.
Hello, 

Yes Authentication can be done with the jaas.config.

Authorization must be implemented by yourself. Take a look at the
Jackrabbit source code, Especially at the SimpleAccessManager.java.
There a markings with "TODO" where you can implement your own
authorization code.

David


Am Mittwoch, den 15.03.2006, 08:57 +0800 schrieb jeremi joslin:
> On 3/15/06, Steven Melis <st...@student.kuleuven.be> wrote:
> > Hi,
> >
> > I'm a student in the computerscience and I'm working with Jackrabbit for about one year now.  I would like to add user authentication and authorisation using the build in JAAS module, but I really don't know how to start.  Can anyone help me on this? A tutorial, some documentation or maybe some sample code could get me started...
> > I would like to give users certain access restrictions on nodes.
> 
> 
> Hi,
> you can take a look at jaas.config and the interface LoginModule.
> If i remember well, jaas doesn't manage authorisation. You have to do
> it by yourself. Maybe you have to store the authorisation in the jcr.
> 
> take a look at the repository.xml and samples class :
>        <AccessManager
> class="org.apache.jackrabbit.core.security.SimpleAccessManager">
>             <!-- <param name="config" value="${rep.home}/access.xml"/> -->
>         </AccessManager>
> 
>         <LoginModule
> class="org.apache.jackrabbit.core.security.SimpleLoginModule">
>            <!-- anonymous user name ('anonymous' is the default value) -->
>            <param name="anonymousId" value="anonymous"/>
>         </LoginModule>
> 
> 
> Jérémi
> --
> Blog: http://www.jeremi.info
> LinkedIn: https://www.linkedin.com/profile?viewProfile=&key=1437724
> Project Manager XWiki: http://www.xwiki.org
> skype: jeremi23 -- msn et gtalk : jeremi23@gmail.com

Re: JAAS Authentication

Posted by jeremi joslin <je...@gmail.com>.
On 3/15/06, Steven Melis <st...@student.kuleuven.be> wrote:
> Hi,
>
> I'm a student in the computerscience and I'm working with Jackrabbit for about one year now.  I would like to add user authentication and authorisation using the build in JAAS module, but I really don't know how to start.  Can anyone help me on this? A tutorial, some documentation or maybe some sample code could get me started...
> I would like to give users certain access restrictions on nodes.


Hi,
you can take a look at jaas.config and the interface LoginModule.
If i remember well, jaas doesn't manage authorisation. You have to do
it by yourself. Maybe you have to store the authorisation in the jcr.

take a look at the repository.xml and samples class :
       <AccessManager
class="org.apache.jackrabbit.core.security.SimpleAccessManager">
            <!-- <param name="config" value="${rep.home}/access.xml"/> -->
        </AccessManager>

        <LoginModule
class="org.apache.jackrabbit.core.security.SimpleLoginModule">
           <!-- anonymous user name ('anonymous' is the default value) -->
           <param name="anonymousId" value="anonymous"/>
        </LoginModule>


Jérémi
--
Blog: http://www.jeremi.info
LinkedIn: https://www.linkedin.com/profile?viewProfile=&key=1437724
Project Manager XWiki: http://www.xwiki.org
skype: jeremi23 -- msn et gtalk : jeremi23@gmail.com