Home | Contact Us | FAQ | Search & Site Map | Link to Us
Sign In | Join | Other 45 Sites in Network
HomeAnnouncementsWhite Papers
Discussion GroupsFirst AidDatabasesJavaBeansGUIJava 3DVirtual MachineCORBASecurityToolsGeneral
Java DirectoryOpen Source ProjectsSample Book ChaptersUser GroupsWeb Resources
Related Topics
Databases.NETMore Topics ...

Java Forum / General / October 2007

Tip: Looking for answers? Try searching our database.

How to protect directory in JBoss/Jaas?

Thread view: 
pearl146@hotmail.com - 17 Oct 2007 19:23 GMT
Hi,

does anybody know how I can protect a directory/file in JBoss/Jaas?

Since I am not very familiar with this, I would appreciate a detailed
description.

There are a few pdf files in a war folder I want to protect. So that
the files can only be accessed with signon.
Then I also want to use single signon to connect the login with a
website.

I'm thankful for any comment.
Manish Pandit - 17 Oct 2007 23:12 GMT
On Oct 17, 11:23 am, pearl...@hotmail.com wrote:
> Hi,
>
[quoted text clipped - 9 lines]
>
> I'm thankful for any comment.

Read up on security constraints in web.xml. Basically you'd need to
define a web-resource-collection associated with a security-
constraint, and then add the role to auth-constraint, so that only the
users with that role can access the resource collection (the folder
containing PDFs..you can configure any URL pattern).

http://edocs.bea.com/wls/docs81/webapp/web_xml.html

-cheers,
Manish
Manish Pandit - 17 Oct 2007 23:13 GMT
On Oct 17, 11:23 am, pearl...@hotmail.com wrote:
> Hi,
>
[quoted text clipped - 9 lines]
>
> I'm thankful for any comment.

Read up on security constraints in web.xml. Basically you'd need to
define a web-resource-collection associated with a security-
constraint, and then add the role to auth-constraint, so that only the
users with that role can access the resource collection (the folder
containing PDFs..you can configure any URL pattern).

http://edocs.bea.com/wls/docs81/webapp/web_xml.html

-cheers,
Manish
Manish Pandit - 17 Oct 2007 23:14 GMT
On Oct 17, 11:23 am, pearl...@hotmail.com wrote:
> Hi,
>
[quoted text clipped - 9 lines]
>
> I'm thankful for any comment.

Read up on security constraints in web.xml. Basically you'd need to
define a web-resource-collection associated with a security-
constraint, and then add the role to auth-constraint, so that only the
users with that role can access the resource collection (the folder
containing PDFs..you can configure any URL pattern).

http://edocs.bea.com/wls/docs81/webapp/web_xml.html

-cheers,
Manish
pearl146@hotmail.com - 18 Oct 2007 14:41 GMT
> On Oct 17, 11:23 am, pearl...@hotmail.com wrote:
>
[quoted text clipped - 22 lines]
> -cheers,
> Manish

Ok, but where should the web.xml file be placed? In the same folder
where my pdf's are or somewhere in an ear file??? And which other xml
files are necessary (e.g. jboss-web.xml)?
And do I need to configure the login-config.xml file?
Lew - 18 Oct 2007 14:50 GMT
> Ok, but where should the web.xml file be placed? In the same folder
> where my pdf's are or somewhere in an ear file??? And which other xml
> files are necessary (e.g. jboss-web.xml)?
> And do I need to configure the login-config.xml file?

JBoss defines its own specific deployment descriptors, the location of which
will be documented in the JBoss instructions.  I'm not familiar with JBoss,
but I speculate that jboss-web.xml goes in the same directory as web.xml.
That's where sun-web.xml goes when you run Glassfish.

Standard files like web.xml go where they always go in accordance with the
standard.
<http://java.sun.com/javaee/5/docs/tutorial/doc/bnadx.html>

Signature

Lew



Free Magazines

Get these publications absolutely FREE for up to 12 months. There are no hidden fees and no obligation. Simply choose a title, complete the application form and submit it. Read more ...

Oracle MagazineNetwork ComputingComputer WorldBio-IT WorldeWeekInformation WeekInfosecurity
 
Sign In
Join
My Latest Posts
My Monitored Threads
My Blog
My Photo Gallery
My Profile
My Homepage

Start New Thread
Enable EMail Alerts
Rate this Thread



©2008 Advenet LLC   Privacy Policy - Terms of Use
This website includes both content owned or controlled by Advenet as well as content owned or controlled by third parties.