Yubico Forum

...visit our web-store at store.yubico.com
It is currently Tue Jan 30, 2018 3:09 pm

All times are UTC + 1 hour




Post new topic Reply to topic  [ 2 posts ] 
Author Message
 Post subject: login module for jboss7
PostPosted: Mon Jan 09, 2012 4:57 pm 
Offline

Joined: Mon Jan 09, 2012 4:54 pm
Posts: 1
Hi to all,

i would use java client yubico on jboss 7 to protect my web application.

I found in git, the yubico java client, but i don't know how configure jboss to use jaas versione and i don't knox if the code is usefull or i must reconfigure this.

I think i need some help to accomplish following steps:

1) create module folder with jar in jboss:
in jboss-as-7.0.2.Final/modules/com/yubico:
slf4j-api-1.6.1.jar
commons-codec-1.4.jar
vt-ldap-3.3.3.jar
commons-cli-1.2.jar
commons-logging-1.1.1.jar
dom4j-1.6.1.jar

and a module.xml like this:
<?xml version="1.0" encoding="UTF-8"?>
<module xmlns="urn:jboss:module:1.0" name="org.jasig.cas">
<resources>
<resource-root path="slf4j-api-1.6.1.jar"/>
<resource-root path="commons-codec-1.4.jar"/>
<resource-root path="vt-ldap-3.3.3.jar"/>
<resource-root path="commons-cli-1.2.jar"/>
<resource-root path="commons-logging-1.1.1.jar"/>
<resource-root path="dom4j-1.6.1.jar"/>
</resources>

<dependencies>
<module name="javax.api"/>
<module name="org.apache.commons.logging"/>
<module name="javax.security.auth.message.api"/>
<module name="javax.security.jacc.api"/>
<module name="javax.transaction.api"/>
<module name="javax.xml.bind.api"/>
<module name="javax.xml.stream.api"/>
<module name="org.jboss.common-core"/>
<module name="org.jboss.logging"/>
<module name="org.infinispan"/>
<module name="org.jboss.as.web"/>
<module name="javax.servlet.api"/>
<module name="org.picketbox"/>
</dependencies>
</module>
2) how declaring in standalone.conf some like this:
<security-domain name="TestYUBICO">
<authentication>
<login-module code="com.yubico.jaas.YubikeyLoginModule" flag="required">
<module-option name="password-stacking" value="useFirstPass"/>
</login-module>
</authentication>
</security-domain>

3) a jboss-web file like this:
<?xml version="1.0" encoding="UTF-8"?>
<jboss-web>
<security-domain>TestYUBICO</security-domain>
</jboss-web>
3) a web page to use in web application login page

<form method="POST" action="j_security_check">
Name:<INPUT TYPE=TEXT NAME="j_username" VALUE="" SIZE=15>
Password:<INPUT TYPE=PASSWORD NAME="j_password" VALUE="" SIZE=15>
Token:<INPUT TYPE=PASSWORD NAME="totp" VALUE="" SIZE=100>
<INPUT TYPE=submit VALUE="validate">
</form>


I think is useful to follow the jboss example on use otp:
http://community.jboss.org/wiki/OTPInte ... tionServer


Can someone halp me?

Thanks en advance

Fiorenzo


Top
 Profile  
Reply with quote  

Share On:

Share on Facebook FacebookShare on Twitter TwitterShare on Tumblr TumblrShare on Google+ Google+

PostPosted: Tue Mar 06, 2012 11:21 am 
We do not have configuration examples showing how to use JAAS with JBoss. I would recommend searching the Internet for "jaas jboss" and similar. Using Google, that turns up a wealth of information - for example https://community.jboss.org/wiki/SecurityJAASLoginModule looks informative.

/Fredrik


Top
  
Reply with quote  
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 2 posts ] 

All times are UTC + 1 hour


Who is online

Users browsing this forum: No registered users and 2 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB® Forum Software © phpBB Group