Copyright © Cloud Software Group, Inc. All Rights Reserved

Configuring the Customized JAAS Login Module for LDAP Users

There are four roles predefined in TIBCO ActiveMatrix Runtime UDDI Server. They are readonly, subscribers, publishers, and administrators. For detailed information, refer to User Management.

To customize JAAS Login Module, map the LDAP users to one of the above four roles.

To plug in a customized JAAS Login Module for LDAP users, follow these steps:

1.	Import the template project into the eclipse. This step is optional. The template project is in the TIBCO_HOME/RuntimeUDDIServer/3.1/sample/srvconfig/loginModule folder.

2.	Write your own LoginModule class. A sample LoginModule can be found in the following location:

TIBCO_HOME/RuntimeUDDIServer/3.1/sample/srvconfig/loginModule/src/com/tibco/uddi/security/login/SampleLdapLoginModule.java

3.	Change the content of the authentication.properties file according to your LoginModule class.

4.	Run ant zip

Build and pack the project. The login.jar module will be generated in the bin folder.

5.	Customize the JAAS login configuration during the uddi.war file configuration. When configuring the uddi.war file, you will be prompted to customize the LoginModule. To do this,

a.	enter the path and the file name of the authentication.properties file mentioned above.

b.	enter the path and the file name of the login.jar file mentioned above.

 

For detailed information, refer to Configuring the UDDI Server in the Interactive Mode. When configuring the uddi.war file using the customized JAAS Login Module for authentication, if you select JBoss as your target web container, change the login-module class shown below to the Customized JAAS Login Module implementation class name in the login-config.xml file. The login-config.xml file is available in the JBOSS_HOME/server/default/conf directory. <application-policy name="tamrus-login"> <authentication> <login-module            code="com.novell.uddi3.security.InternalJAASModule"            flag="required"> </login-module> </authentication> </application-policy>

To get more information about JAAS authentication and authorization, go to

http://java.sun.com/javase/6/docs/technotes/guides/security/jaas/JAASRefGuide.html

Copyright © Cloud Software Group, Inc. All Rights Reserved