The Source for Java Technology Collaboration

Home » java.net Forums » GlassFish » GlassFish

Thread: Custom certificate login

Welcome, Guest Help
Login Login
Guest Settings Guest Settings
Reply to this Thread Reply to this Thread Search Forum Search Forum Back to Thread List Back to Thread List

Permlink Replies: 1 - Last Post: Sep 18, 2006 7:32 AM by: bdaniliuc
bdaniliuc

Posts: 14
Custom certificate login
Posted: Sep 8, 2006 7:26 AM
  Click to reply to this thread Reply

Scenario: the user has a certificate she uses to connect to the application over HTTPS. The user group assignment is kept in a directory service (active directory). The user distinguished name in the directory corresponds with the subject name in certificate.
How is it possible to perform the login in glassfish in this case?

I have tried using a custom realm but this does not work because when HTTPS is used the certificate realm is enforced. Also, the certificate realm needs an instance of "com.sun.enterprise.security.auth.realm.certificate.CertificateRealm" which is final.
I have also tried using a custom login module but this does not work either because the certificate realm class does not make use of login modules.

Do you have any suggestions?

Regards,

Bogdan

bdaniliuc

Posts: 14
Re: Custom certificate login
Posted: Sep 18, 2006 7:32 AM   in response to: bdaniliuc
  Click to reply to this thread Reply

Trying to rephrase the above questions after more digging and testing.

Is there any plan to give more flexibility to the certificate realm? For example to allow a different class to implement the realm or to allow custom login modules?

Regards,

Bogdan




 XML java.net RSS