3 Replies Latest reply: Apr 26, 2012 7:07 AM by Darran Lofthouse RSS

login-module RealmUsersRoles

nimo stephan Master

jboss 7 standalone.xml has this entry:

 

<security-domain name="other" cache-type="default">

                    <authentication>

                        <login-module code="Remoting" flag="optional">

                            <module-option name="password-stacking" value="useFirstPass"/>

                        </login-module>

                        <login-module code="RealmUsersRoles" flag="required">

                            <module-option name="usersProperties" value="${jboss.server.config.dir}/application-users.properties"/>

                            <module-option name="rolesProperties" value="${jboss.server.config.dir}/application-roles.properties"/>

                            <module-option name="realm" value="ApplicationRealm"/>

                            <module-option name="password-stacking" value="useFirstPass"/>

                        </login-module>

                    </authentication>

</security-domain>

 

and I added this:

 

<security-domain name="standard" cache-type="default">

                    <authentication>

                        <login-module code="UsersRoles" flag="required">

                            <module-option name="usersProperties" value="${jboss.server.config.dir}/my-users.properties"/>

                            <module-option name="rolesProperties" value="${jboss.server.config.dir}/my-roles.properties"/>

                        </login-module>

                    </authentication>

</security-domain>

 

I have the following questions:

 

1. What is the difference of 'RealmUsersRoles' and 'UsersRoles'. 

2. I cannot find the "code" 'RealmUsersRoles'  as a option for a "login module" in the jboss documentation https://docs.jboss.org/author/display/AS71/Security+subsystem+configuration. Where is RealmUsersRoles or ApplicationRealm defined?

3. Where can I find the built-in "jboss-web.xml" which must reside within the jboss-directory to define something like this:

 

<security-domain>java:/jaas/other</security-domain>