users@glassfish.java.net

Re: Securing a webservice with certificates

From: <glassfish_at_javadesktop.org>
Date: Thu, 05 Jul 2007 03:38:11 PDT

Hi,


One need to set assign-groups property for certificate realm and have the corresponding security-role-mapping in sun-application.xml (for application) or sun-web.xml (for war file). Please check : http://blogs.sun.com/swchan/entry/assign_gro

There was an issue with assign-groups and Certificate Realm. Can you try it now with :

https://glassfish.dev.java.net/downloads/v2-b54.html

Note: the name of the Certificate Realm should be "certificate" and it should have an assign-groups entry in it. There should be only one <auth-realm> entry in GF for "certificate" and it should have the required assign-groups property defined.

EX.

<auth-realm classname="com.sun.enterprise.security.auth.realm.certificate.CertificateRealm" name="certificate">
<property name="assign-groups" value="xyz"/>
</auth-realm>

Thanks.
[Message sent by forum member 'kumarjayanti' (kumarjayanti)]

http://forums.java.net/jive/thread.jspa?messageID=225310