Bug 724466 (BRMS-411) - Out-of-the-box authentication for BRMS
Summary: Out-of-the-box authentication for BRMS
Keywords:
Status: NEW
Alias: BRMS-411
Product: JBoss Enterprise BRMS Platform 5
Classification: JBoss
Component: BRM (Guvnor)
Version: unspecified
Hardware: Unspecified
OS: Unspecified
high
unspecified
Target Milestone: ---
: future
Assignee: manstis
QA Contact: Jiri Locker
URL: http://jira.jboss.org/jira/browse/BRM...
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2010-10-21 15:08 UTC by Tihomir Surdilovic
Modified: 2021-02-16 02:46 UTC (History)
0 users

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed:
Type: Feature Request


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Issue Tracker BRMS-411 0 None Closed Out-of-the-box authentication for BRMS 2012-04-24 09:17:13 UTC

Description Tihomir Surdilovic 2010-10-21 15:08:08 UTC
securitylevel_name: Public

Currently the default authentication setting in components.xml for BRMS uses the jmx-console jaas configuration. In EWP and EAP where BRMS is deployed the default jmx-console-users.properties has the admin=admin user credentials commented. This forces BRMS users to have to modify this file before they can start using BRMS which does not provide an out-of-the-box experience.

Two options that come to mind:
a) disable authentication by default and document how to enable it
b) create a brms-specific jaas profile (do not use jxm-console). This can be accomplished with following steps:
    *
    -  Navigate to $jboss/server/$cofig/conf/props directory and create two files, namely brms-roles.properties
                + brms=admin
     -  and brms-users.properties
                + brms=brms
     -  Open the $jboss/server/$config/conf/login-config.xml file and add the following now

<application-policy name = "brms">
   <authentication>
      <login-module code="org.jboss.security.auth.spi.UsersRolesLoginModule" flag = "required">
         <module-option name="usersProperties">props/brms-users.properties</module-option>
         <module-option name="rolesProperties">props/brms-roles.properties</module-option>
      </login-module>
   </authentication>
</application-policy>

    - In the $brms/WEB-INF/components.xml change the jxm-console jaas-config-name to "brms", so change
<security:identity authenticate-method="#{authenticator.authenticate}" jaas-config-name="jmx-console"/>
 to 
<security:identity authenticate-method="#{authenticator.authenticate}" jaas-config-name="brms"/>


Note You need to log in before you can comment on or make changes to this bug.