users@glassfish.java.net

Re: Solaris Realm Authentication

From: <glassfish_at_javadesktop.org>
Date: Thu, 04 Dec 2008 03:32:07 PST

Are you able to see the solaris-realm listed in the drop-down of the supported realms in the Admin console default realm configuration? If yes, this realm can be chosen right-away. Please ensure that the jacc-context param value matches the entry in the login.conf file.

If you are unable to view this realm among the list, you can add another <auth-realm> entry in <GF-ROOT>domains/domain1/config/domain.xml as another child of the security-service node as in:

<auth-realm classname="com.sun.enterprise.security.auth.realm.file.FileRealm" name="admin-realm">
          <property name="file" value="${com.sun.aas.instanceRoot}/config/admin-keyfile"/>
          <property name="jaas-context" value="fileRealm"/>
 </auth-realm>
[b]<auth-realm classname="com.sun.enterprise.security.auth.realm.solaris.SolarisRealm" name="solaris-realm">
          <property name="jaas-context" value="solarisRealm"/>
</auth-realm>[/b]

As in the previous case, the jaas-context value should match the entry in login.conf

You can also set the default realm to the solaris realm by changing this entry :

<security-service activate-default-principal-to-role-mapping="false" anonymous-role="AttributeDeprecated" audit-enabled
="false" audit-modules="default" [b]default-realm="solaris-realm"[/b] jacc="default">

After these changes, you must be able to access the application with the Solaris user accounts.

HTH
Nithya
[Message sent by forum member 'nitkal' (nitkal)]

http://forums.java.net/jive/thread.jspa?messageID=319990