SSO with JAAS Login Module

May 2, 2011 at 7:26 PM

I have my application configured according to the "Tomcat Mixed Single-SignOn and Form Authenticator Valve" example.  Everything works fine.  The user is authenticated against AD and the AD groups are assigned as the user's roles for the application.  I am trying to find a way to call our application's JAAS login module once the waffle SSO authentication occurs.  The reason being is that I would like to assign our own roles to the user that are defined in our database.  I still want to manage users and groups from our application.  I only need waffle to authenticate the user against the AD and then let us assign the roles and groups from there.  I do not want to have to manage a user's roles from AD.  Is there a way of doing this?  Thanks.

Coordinator
May 3, 2011 at 1:22 AM

I think you'll have to modify waffle code to do this. If you switch to a filter though, you can probably rewrite the stuff you have in a JAAS module to be a filter, then they can be independent and just configured to run one after another.

May 3, 2011 at 1:32 AM

When you say a filter, do you mean a javax.servlet.Filter?  Is there an example of how a Filter is utilized in any of the example code?  Thanks.

Coordinator
May 3, 2011 at 2:30 AM

Yes. There's a tutorial on using a filter. That will do authentication for you. Then you can write another filter (port your JAAS module) to wrap the principal returned by waffle in your own doing additional work.

Jan 22, 2013 at 10:46 AM

Hi,

I am looking for SSO implementation using JAAS and kerberos with Desktop client. Is the Java web server mandatory for implementing SSO with JAAS using Waffle? Our existing implementation is with Jaas and Kerberos. We need to continue with Kerberos. Could you please guide me for the same?

Thanks,

Sanjay

Coordinator
Jan 22, 2013 at 10:42 PM

 

WAFFLE HAS MOVED TO GITHUB
WAFFLE HAS MOVED TO GITHUB

WAFFLE HAS MOVED TO GITHUB
WAFFLE HAS MOVED TO GITHUB

 

WAFFLE HAS MOVED TO GITHUB
WAFFLE HAS MOVED TO GITHUB

 

WAFFLE HAS MOVED TO GITHUB
WAFFLE HAS MOVED TO GITHUB

DONT POST HERE - GO HERE. The new home is http://dblock.github.com/waffle/.

DONT POST HERE - GO HERE. The new home is http://dblock.github.com/waffle/.

 

DONT POST HERE - GO HERE. The new home is http://dblock.github.com/waffle/.

 

DONT POST HERE - GO HERE. The new home is http://dblock.github.com/waffle/.

 

DONT POST HERE - GO HERE. The new home is http://dblock.github.com/waffle/.

We're going to give up the discussions here and move to THIS GOOGLE GROUP, please subscribe and stop posting questions here.

 

DONT POST HERE - GO HERE. The new home is http://dblock.github.com/waffle/.

DONT POST HERE - GO HERE. The new home is http://dblock.github.com/waffle/.

 

DONT POST HERE - GO HERE. The new home is http://dblock.github.com/waffle/.

 

DONT POST HERE - GO HERE. The new home is http://dblock.github.com/waffle/.

 

DONT POST HERE - GO HERE. The new home is http://dblock.github.com/waffle/.

 

 

WAFFLE HAS MOVED TO GITHUB
WAFFLE HAS MOVED TO GITHUB

WAFFLE HAS MOVED TO GITHUB
WAFFLE HAS MOVED TO GITHUB

 

WAFFLE HAS MOVED TO GITHUB
WAFFLE HAS MOVED TO GITHUB

 

WAFFLE HAS MOVED TO GITHUB
WAFFLE HAS MOVED TO GITHUB

DONT POST HERE - GO HERE. The new home is http://dblock.github.com/waffle/.

DONT POST HERE - GO HERE. The new home is http://dblock.github.com/waffle/.

 

DONT POST HERE - GO HERE. The new home is http://dblock.github.com/waffle/.

 

DONT POST HERE - GO HERE. The new home is http://dblock.github.com/waffle/.

 

DONT POST HERE - GO HERE. The new home is http://dblock.github.com/waffle/.

We're going to give up the discussions here and move to THIS GOOGLE GROUP, please subscribe and stop posting questions here.

 

DONT POST HERE - GO HERE. The new home is http://dblock.github.com/waffle/.

DONT POST HERE - GO HERE. The new home is http://dblock.github.com/waffle/.

 

DONT POST HERE - GO HERE. The new home is http://dblock.github.com/waffle/.

 

DONT POST HERE - GO HERE. The new home is http://dblock.github.com/waffle/.

 

DONT POST HERE - GO HERE. The new home is http://dblock.github.com/waffle/.

 

 

WAFFLE HAS MOVED TO GITHUB
WAFFLE HAS MOVED TO GITHUB

WAFFLE HAS MOVED TO GITHUB
WAFFLE HAS MOVED TO GITHUB

 

WAFFLE HAS MOVED TO GITHUB
WAFFLE HAS MOVED TO GITHUB

 

WAFFLE HAS MOVED TO GITHUB
WAFFLE HAS MOVED TO GITHUB

DONT POST HERE - GO HERE. The new home is http://dblock.github.com/waffle/.

DONT POST HERE - GO HERE. The new home is http://dblock.github.com/waffle/.

 

DONT POST HERE - GO HERE. The new home is http://dblock.github.com/waffle/.

 

DONT POST HERE - GO HERE. The new home is http://dblock.github.com/waffle/.

 

DONT POST HERE - GO HERE. The new home is http://dblock.github.com/waffle/.

We're going to give up the discussions here and move to THIS GOOGLE GROUP, please subscribe and stop posting questions here.

 

DONT POST HERE - GO HERE. The new home is http://dblock.github.com/waffle/.

DONT POST HERE - GO HERE. The new home is http://dblock.github.com/waffle/.

 

DONT POST HERE - GO HERE. The new home is http://dblock.github.com/waffle/.

 

DONT POST HERE - GO HERE. The new home is http://dblock.github.com/waffle/.

 

DONT POST HERE - GO HERE. The new home is http://dblock.github.com/waffle/.

 

 

WAFFLE HAS MOVED TO GITHUB
WAFFLE HAS MOVED TO GITHUB

WAFFLE HAS MOVED TO GITHUB
WAFFLE HAS MOVED TO GITHUB

 

WAFFLE HAS MOVED TO GITHUB
WAFFLE HAS MOVED TO GITHUB

 

WAFFLE HAS MOVED TO GITHUB
WAFFLE HAS MOVED TO GITHUB

DONT POST HERE - GO HERE. The new home is http://dblock.github.com/waffle/.

DONT POST HERE - GO HERE. The new home is http://dblock.github.com/waffle/.

 

DONT POST HERE - GO HERE. The new home is http://dblock.github.com/waffle/.

 

DONT POST HERE - GO HERE. The new home is http://dblock.github.com/waffle/.

 

DONT POST HERE - GO HERE. The new home is http://dblock.github.com/waffle/.

We're going to give up the discussions here and move to THIS GOOGLE GROUP, please subscribe and stop posting questions here.

 

DONT POST HERE - GO HERE. The new home is http://dblock.github.com/waffle/.

DONT POST HERE - GO HERE. The new home is http://dblock.github.com/waffle/.

 

DONT POST HERE - GO HERE. The new home is http://dblock.github.com/waffle/.

 

DONT POST HERE - GO HERE. The new home is http://dblock.github.com/waffle/.

 

DONT POST HERE - GO HERE. The new home is http://dblock.github.com/waffle/.

 

WAFFLE HAS MOVED TO GITHUB
WAFFLE HAS MOVED TO GITHUB

WAFFLE HAS MOVED TO GITHUB
WAFFLE HAS MOVED TO GITHUB

 

WAFFLE HAS MOVED TO GITHUB
WAFFLE HAS MOVED TO GITHUB

 

WAFFLE HAS MOVED TO GITHUB
WAFFLE HAS MOVED TO GITHUB

DONT POST HERE - GO HERE. The new home is http://dblock.github.com/waffle/.

DONT POST HERE - GO HERE. The new home is http://dblock.github.com/waffle/.

 

DONT POST HERE - GO HERE. The new home is http://dblock.github.com/waffle/.

 

DONT POST HERE - GO HERE. The new home is http://dblock.github.com/waffle/.

 

DONT POST HERE - GO HERE. The new home is http://dblock.github.com/waffle/.

We're going to give up the discussions here and move to THIS GOOGLE GROUP, please subscribe and stop posting questions here.

 

DONT POST HERE - GO HERE. The new home is http://dblock.github.com/waffle/.

DONT POST HERE - GO HERE. The new home is http://dblock.github.com/waffle/.

 

DONT POST HERE - GO HERE. The new home is http://dblock.github.com/waffle/.

 

DONT POST HERE - GO HERE. The new home is http://dblock.github.com/waffle/.

 

DONT POST HERE - GO HERE. The new home is http://dblock.github.com/waffle/.