構造的に表示 平面上に表示 ツリー上に表示
スレッド [ 前へ | 次へ ]
toggle
Michael Milazzo
Custom JAAS LoginModule and Liferay
2007/12/28 18:48
答え

Michael Milazzo

ランク: New Member

投稿: 2

参加年月日: 2007/12/28

最近の投稿

Hi Everyone,

I developed a custom JAAS LoginModule for some of our Tomcat-based web applications. I would like to use the same LoginModule with Liferay, but it does not seem to use it to authenticate when signing into the portal.

I have modified the server.xml to include the tomcat JAASRealm entry with the appName matching the JAAS configuration profile name. I have custom classes for the user and role principals. I looked at the ROOT.xml file and saw that is requires the role of "users", so I am adding that role to the Principal collection on successful authentication. If I click on the sign in link at the top of the main page, I see the form and try to enter credentials I know will authenticate with my module, but it will not work. It will authenticate me if I use the credentials one of our admins created within the portal.

How would one go about configuring Liferay to utilize a JAAS LoginModule other than the default LoginModule?


Thanks for any assistance!

Mike
Roman Hoyenko
RE: Custom JAAS LoginModule and Liferay
2008/01/03 8:50
答え

Roman Hoyenko

ランク: Liferay Master

投稿: 868

参加年月日: 2007/10/08

最近の投稿

You can create your custom login by modifying portal-ext.properties.

Please read this post:

http://www.liferay.com/web/guest/community/forums/message_boards/message/124053

it has more details. Hope this helps.
Davy Kamerbeek
RE: Custom JAAS LoginModule and Liferay
2012/04/01 23:52
答え

Davy Kamerbeek

ランク: New Member

投稿: 23

参加年月日: 2012/03/12

最近の投稿

This is a pretty old post, but i'm giving it a shot. The link you referenced, Roman, is about the AutoLogin not the LoginModule. Can you or somebody explain how to replace the default PortalLoginModule with (for example) SpnegoLoginModule. I'm trying to configure Liferay 6.1 to work with JBoss AS7 negotiation combined with the Spnego login module (using Kerberos auth).

Getting a little desperate on this one...
Juan Gonzalez
RE: Custom JAAS LoginModule and Liferay
2012/04/02 0:26
答え

Juan Gonzalez

LIFERAY STAFF

ランク: Liferay Legend

投稿: 1874

参加年月日: 2008/10/28

最近の投稿

Davy Kamerbeek:
This is a pretty old post, but i'm giving it a shot. The link you referenced, Roman, is about the AutoLogin not the LoginModule. Can you or somebody explain how to replace the default PortalLoginModule with (for example) SpnegoLoginModule. I'm trying to configure Liferay 6.1 to work with JBoss AS7 negotiation combined with the Spnego login module (using Kerberos auth).

Getting a little desperate on this one...


Guess it's possible to use CAS for Spnego auth. For example, you could read this:

https://wiki.jasig.org/display/CASUM/SPNEGO

And you can use CAS in Liferay, of course.
David H Nebinger
RE: Custom JAAS LoginModule and Liferay
2012/04/02 6:09
答え

David H Nebinger

ランク: Liferay Legend

投稿: 6712

参加年月日: 2006/09/01

最近の投稿

There's actually a separate thread where a member of the community has been working on spnego integration into Liferay...
Davy Kamerbeek
RE: Custom JAAS LoginModule and Liferay
2012/04/04 12:11
答え

Davy Kamerbeek

ランク: New Member

投稿: 23

参加年月日: 2012/03/12

最近の投稿

Thanks Juan, i will look into it!
Davy Kamerbeek
RE: Custom JAAS LoginModule and Liferay
2012/04/04 12:18
答え

Davy Kamerbeek

ランク: New Member

投稿: 23

参加年月日: 2012/03/12

最近の投稿

David H Nebinger:
There's actually a separate thread where a member of the community has been working on spnego integration into Liferay...


Thanks for your reply David.

Yes, i've found a thread that describes how to configure SPNEGO as a HTTP filter. But i'm trying to configure SPNEGO with JBoss negotiation. I've configured a sample web app that uses this configuration and it works fine. But i want to apply the same to the liferay portal, for now without any luck. All i can find is solutions that use the filter approach. Maybe that's the way to go.. I'm gonna try Juan's suggestion and if that's not working i'm gonna fallback to the filter method.

I will post my solution when it's working.

Cheers,

Davy Kamerbeek