How to set up JAAS in LAMS - LAMS 2

1.Config jboss-web.xml, the name after /jaas/ must be same with application-policy name in login-config.xml, and it is case-sensitive!!!

<jboss-web>
    <security-domain>java:/jaas/LAMS</security-domain>
 </jboss-web>

2. Config login-config.xml, which locates in ${JBOSS}/server/conf or ${JBOSS}/server/default/conf

<application-policy name = "LAMS">
       <authentication>
          <login-module code = "org.lamsfoundation.lams.security.UniversalLoginModule" flag = "required">
             <module-option name="authenticationPropertyFile">c:/lamsconf/authentication.xml</module-option>
          </login-module>
       </authentication>
    </application-policy>

3.In authentication.xml

<Authentication>
?????
<Method Name="LAMS-Database" Enabled="true">
      <Param Name="dsJndiName">java:/jdbc/lams-ds</Param>
      <Param Name="principalsQuery">select password from lams_user where login=?</Param>
      <Param Name="rolesQuery">select name,'Roles' from lams_role, lams_user where login=?</Param>
</Method>
???

4.So, in mysql-ds.xml, which locate in ${JBOSS}/server/default/ folder, will have such definition for Data source

<datasources>
  <!-- lams-ds datasource for use by LAMS Core and Services -->
  <local-tx-datasource>
    <jndi-name>jdbc/lams-ds</jndi-name>
      ???

5.javax.security.auth.spi.LoginModule will implement javax.security.auth.spi.LoginModule interface
6.In login.jsp

<form action="<%= response.encodeURL("j_security_check") %>" method="post" name="form1" id="form1">
    <input name="j_username" type="text"" size="15" />
<input name="j_password" type="password" size="15" AUTOCOMPLETE="off"/> 
<input type="submit" value="Login"/>
     </form>

7. To share JAAS across multip web application in one host. Adding following line in server.xml for Tomcat container. This file usually locate in ${JBOSS}/server/default/deploy/jbossweb-tomcat55.sar. For more detail please refer to http://jakarta.apache.org/tomcat/tomcat-5.0-doc/config/host.html#Single%20Sign%20On

<Server>
    <host ....>
        ....
        <Valve className="org.apache.catalina.authenticator.SingleSignOn" debug="0"/>
        ....
    </Host>
  </Server>

8. For web.xml (simliar for ejb-jar.xml), usually like this:

<security-constraint>
	<display-name>SecurityConstraint</display-name>
	<web-resource-collection>
		<web-resource-name>STK</web-resource-name>
		<url-pattern>/*</url-pattern>
		<http-method>DELETE</http-method>
		<http-method>GET</http-method>
		<http-method>POST</http-method>
		<http-method>PUT</http-method>
	</web-resource-collection>
	<auth-constraint>
		<role-name>SYSADMIN</role-name>
	</auth-constraint>
</security-constraint>
<security-role>
	<description>SYSADMIN</description>
	<role-name>SYSADMIN</role-name>
</security-role>	
<login-config>
	<auth-method>FORM</auth-method>
	<realm-name>LAMS</realm-name>
	<form-login-config>
		<form-login-page>/login.jsp</form-login-page>
		<form-error-page>/login.jsp?failed=y</form-error-page>
	</form-login-config>
</login-config>

9. For LAMS system special configuration in web.xml, need add a listener:

<listener>
	<listener-class>
 		org.lamsfoundation.lams.web.SessionListener
 	</listener-class>
</listener>