Any JBoss JAAS gurus out there?

[Adam Hardy]

I'm trying to get my custom login module to work without success all this weekend and it's getting ridiculous now.
I've got the whole thing set up as near as perfect as I can tell. I'm following the docs as best I can, but I'm extending AbstractServerLoginModule which I haven't found an example for.
JBossSx calls my LoginModule's initialize and login methods OK, and I follow the instructions to make JBoss realize the login succeeded, but no joy.
Can anybody out there tell me:
does AbstractServerLoginModule require any special module-option settings in the login-config.xml?
what class should I implement Principal with? (It's abstract, but JAAS requires it)
must it be a different class for the user identity and the roles?
how can I switch on the logging for AbstractServerLoginModule in my log4j.xml settings? The straight org.jboss.security.auth.spi.AbstractServerLoginModule name doesn't work.
Thanks!
Adam

[Adam Hardy]

Got the logging working after removing a stupid config mistake in my log4j.xml.
Got the login to succeed, but somehow the roles are not functioning, since my protected page is giving me a 403 access denied error. Hmmm. Some sort of jboss-tomcat misconfiguration I suppose.

[Martin Alley]

Hi Adam,
I wouldn't say I'm a guru on this, but I did find the JAAS How to by Scott Stark very useful when I needed to get the DatabaseServerLoginModule working with my app.
http://sourceforge.net/docman/display_doc.php?docid=18240&group_id=22866
Martin

[Don Griffing]

I would call myself a guru either, but I have posted snippets of important information when I was dealing with a simular problem They are at Problems with FORM Authentication. Hopefully, between the 2 sites you will be able to solve your problem.

[James Adams]

I too need a JAAS/JBoss guru's attention.
I am trying to do simple form-based authentication using an Oracle database. I am using JBoss 3.2.3. Details of what I have done so far are in the following post:
https://coderanch.com/t/88863/JBoss/Simple-form-based-authentication-JAAS
I have followed the example in the JAAS HOW-TO, as well as what is contained in Griffing's posting (my setup is even simpler) -- still no joy. The log4j.xml entry didn't help me a bit (and where can I find the log with the trace messages ?), and I have done everything else (I think) to make this work. I am gettting no exceptions, just a failed login and then a redirection to my login error page.
I will certainly be grateful to anyone who can help me with this !

-James

[James Adams]

The bug has been found -- see the above referenced posting for details.

-James

[Ken Loh]

The page doesn't seem to exist now. Does anyone know the new URL ?

Originally posted by Martin Alley:
Hi Adam,

I wouldn't say I'm a guru on this, but I did find the JAAS How to by Scott Stark very useful when I needed to get the DatabaseServerLoginModule working with my app.

http://sourceforge.net/docman/display_doc.php?docid=18240&group_id=22866

Martin