JAAS vs Form Based Authentication vs LDAP

[MSSA]

Would anyone please comment how can we combine the following:

LDAP:
is the respository of the User, Roles; Rights, etc.... has a Custom Java API to perform the client request, e.g. authenticate(UID, PWD), getRights(resourceID), etc.

Form Based Authentication:
Would like to use it so the resources/pages/urls access can be controlled by the container automatically.

JAAS:
Still wondering if this can be used with the above two items. The actual logic of the authentication is done in the Custom LDAP Java API. The form based authentication can call the Custom LDAP API directly. Shall we use the JAAS?

[Charles GAY]

hi,
you can have a look at a jaas library(jguard) which enable the management of roles users, urls,firstly with a database:

http://sourceforge.net/projects/jguard

but an ldap loginModule is planned.
so, you can join the jGuard project, and i will help you ,if required,to realize it.

hope it helps,
charles.

[Dirk Schreckmann]

MSSA,

Welcome back to JavaRanch!

We ain't got many rules 'round these parts, but we do got one. Please change your display name to comply with The JavaRanch Naming Policy.

Thanks Pardner! Hope to see you 'round the Ranch!
[ July 09, 2004: Message edited by: Dirk Schreckmann ]