S E C U R I T Y  

Note that this login module does not perform any authentication. It merely copies the login 

information provided to it into the JBoss server EJB invocation layer for subsequent 

authentication on the server. If you need to perform client side authentication of users you 

would need to configure login modules in addition to the ClientLoginModule. 

The supported login module configuration options include the following: 

multi threaded=true|false, When the multi threaded option is set to true, each 

login thread has its own principal and credential storage. This is useful in client 

environments where multiple user identities are active in separate threads. When 

true, each separate thread must perform its own login. When set to false the login 

identity and credentials are global variables that apply to all threads in the VM. The 

default for this option is false. 

password stacking=useFirstPass, When password stacking option is set, this 

module first looks for a shared username and password using 

"javax.security.auth.login.name" and "javax.security.auth.login.password" 

respectively in the login module shared state Map. This allows a module configured 

prior to this one to establish a valid username and password that should be passed to 

JBoss. You would use this option if you want to perform client side authentication of 

clients using some other login module such as the LdapLoginModule. 

A sample login configuration for ClientLoginModule is the default configuration entry found 

in the JBoss distribution client/auth.conf file. The configuration is: 

other { 

    // Put your login modules that work without JBoss here 

    // jBoss LoginModule 

    org.jboss.security.ClientLoginModule required; 

    // Put your login modules that need JBoss here 

}; 

org.jboss.security.plugins.JaasSecurityManagerService 

The JaasSecurityManagerService manages the configuration of the security service. Its 

responsibilities include the externalization of the scurity manager implementation class, 

authentication caches and JNDI namespace management. The configurable attributes of the 

JaasSecurityManagerService include: 

SecurityManagerClassName, Set the name of the class that provides the security 

manager implementation. This requires a class that implements the 

org.jboss.security.AuthenticationManager and org.jboss.security.RealmMapping 

73