6 Replies Latest reply on Feb 9, 2016 3:39 PM by sewatech

How to store management user in different places ?

sewatech Feb 9, 2016 5:19 AM

Hi,

I have 2 kind of management users. Some are stored in a company wide LDAP and the others are stored locally, let say in property files.

The documentation says that I cannot combine a ldap element and a properties element in the same realm. Each native-interface has only one realm, and it is not possible to setup two different native interfaces.

So I understand that I cannot mix several user storage for the management. Or maybe with jaas, but I don't how to setup in domain mode : the scope of a JAAS security domain is the profile, and not the domain or the host.

So how can I setup my domain management to mix several storages, with or without JAAS ?

1. Re: How to store management user in different places ?

dlofthouse Feb 9, 2016 5:38 AM (in response to sewatech)

Yes either delegate to JAAS or a custom plug-in that can work with both locations would be the options available to you.
Actions
2. Re: How to store management user in different places ?

sewatech Feb 9, 2016 7:25 AM (in response to dlofthouse)

OK, I was thinking of JAAS, but I can't see how to set it in a domain.

AFAIU, the <jaas> element has a name that refers to a jaas domain in the security subsystem. And we have more the one security subsystem, in fact one per profile.

Can I configure the domain in any profile ? What if two profiles have the same domain name ?
Actions
3. Re: How to store management user in different places ?

dlofthouse Feb 9, 2016 10:46 AM (in response to sewatech)

In a domain you would just need to use a standard JAAS config file and system property to set it's location.
Actions
4. Re: How to store management user in different places ?

sewatech Feb 9, 2016 11:20 AM (in response to dlofthouse)

Do you mean a file like described is this page : JAAS Login Configuration File ? And set the path with the -Djava.security.auth.login.config system property ?
Actions
5. Re: How to store management user in different places ?

dlofthouse Feb 9, 2016 12:45 PM (in response to sewatech)

Yes, that is what I mean.
Actions
6. Re: How to store management user in different places ?

sewatech Feb 9, 2016 3:39 PM (in response to dlofthouse)

OK, now I have a better understanding of what the <jaas> is. I'll try it.

Thank you.
Actions

Go to original post