Hi, i'm part of the jGuard project and a user of Xwiki (through our website www.jguard.net hosted and powered by XWiki). jGuard implements JAAS and provide an easy way to use it in a webapp context. that's right that Xwiki security apis differs from the JAAS apis. but the concept involved in the Xwiki apis, are closed of the JAAS and jGuard ones. if you've got some interest by adapting the XWiki apis to JGuard (an JAAS implicitly), i can help you to do it. but this adapter will not be an "official" Xwiki way.... hope it helps, Charles GAY(jGuard team). On 4/25/06, THOMAS, BRIAN M (SBCSI) <[email protected]> wrote:
We are standardizing on the Java Authentication and Authorization Service (JAAS). I thought I heard that XWiki supports the Pluggable Authentication Modules (PAM) standard, but haven't found any reference to it in the docs. Further, there are some articles out about integrating JAAS into Tomcat, which is another thing to think about. We actually are considering at least two methods here - a centralized PIN server and a RADIUS server for SecurID access, and both have clients that implement the JAAS interfaces.
There are a couple of strategies that I could probably try: one is just to use the JAAS/Tomcat integration route. That would seem to give the most bang-per-buck, but that would (I think) not allow controls at the level of granularity that XWiki does, or would actually take controls away from the XWiki rights system.
Another (actually my first idea) is to implement the various com.xpn.xwiki.user.api interfaces (XWikiAuthService, XWikiGroupService, and XWikiRightService) with JAAS calls.
Anyone have any experience with this?
brain[sic]
-- You receive this message as a subscriber of the [email protected] list. To unsubscribe: mailto:[email protected] For general help: mailto:[email protected]?subject=help ObjectWeb mailing lists service home page: http://www.objectweb.org/wws