Win a copy of Functional Reactive Programming this week in the Other Languages forum!
  • Post Reply
  • Bookmark Topic Watch Topic
  • New Topic

JBoss AS 6 SSL HTTPS WebService Access and LDAP Authentication

 
Fabio Navarrete
Greenhorn
Posts: 2
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
Hi!

I've successfully configured JBoss to receive https requests with a self-signed certificate. I have a web service deployed that authenticates against my LDAP server with this application policy:



My web.xml file has the next config to enable https access:



The authentication was working without the set up for https access. When the web service is up in https mode it doesn't make any authentication process.

My EJB - web service class looks this way:



By now I need to have both of them working. I need the web service to work with https access and the authentication against my LDAP server.

Thank you for your help!
 
Jaikiran Pai
Marshal
Pie
Posts: 10447
227
IntelliJ IDE Ubuntu
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
Fabio, welcome to CodeRanch!

When the web service is up in https mode it doesn't make any authentication process.


What exactly happens? Do you see any error messages or does it just allow access to the component without any authentication?
 
Fabio Navarrete
Greenhorn
Posts: 2
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
Hi Jaikiran!

Thank you for your help, what was happening was that it allowed the access without any authentication. Right now I've found the solution. It's kind of weird because the change I made is not a big deal. It works with the next annotations config:

- My web.xml is now empty

- My EJB - Web Service:




With this change what I've got is that now the web service is exposed directly in a https://... URL. With the former config it was always exposed in http://... and now the authentication process is done correctly. To prevent simple http conections I removed the http connector from JBoss config (jbossweb.sar/server.xml). I would like to know if there's a better option to avoid http connections just for my application and not the whole server.

Thank you!

(btw ... I don't know if right now I should mark this topic as resolved)
 
  • Post Reply
  • Bookmark Topic Watch Topic
  • New Topic