How to map roles by using JAAS

Question

Dear all,
i am implementing JAAS by using my own custom LoginModule, which will access to my database and get user login and password and do verification myself.
and i know that i need to set the secruity roles, secruity constraint in web.xml, and i have set Login Configuration to Form-Based Authentication.
here is part of my web.xml:
<security-constraint>
<web-resource-collection>
<web-resource-name>LogonMain</web-resource-name>
<url-pattern>*.do</url-pattern>
</web-resource-collection>
<auth-constraint>
<role-name>manager</role-name>
<role-name>sales</role-name>
</auth-constraint>
<user-data-constraint>
<transport-guarantee>NONE</transport-guarantee>
</user-data-constraint>
</security-constraint>
<login-config>
<auth-method>FORM</auth-method>
<form-login-config>
<form-login-page>LogonMain.jsp</form-login-page>
<form-error-page>LogonMain.jsp</form-error-page>
</form-login-config>
</login-config>
<security-role>
<role-name>manager</role-name>
</security-role>
<security-role>
<role-name>sales</role-name>
</security-role>
<security-role>
<role-name>staff</role-name>
</security-role>
here is my question, it seems that all data action in my pages are protected, and i dont know how to map a particular user to the role that i define in web.xml.
so even though i logged in, i still cannot perform data action.
could anyone nice to tell me what could i do in this case for custom login module which accessing the database to get user login and password ?
i am appreicated your help !
thanks
Kenny

Answer 1

Hi Matthew,
so the mapping is defined in orion-application.xml , right ?
i have something like this
<?xml version = '1.0' encoding = 'windows-1252'?>
<!DOCTYPE orion-application PUBLIC "-//Evermind//DTD J2EE Application runtime 1.2//EN" "http://xmlns.oracle.com/ias/dtds/orion-application.dtd">
<orion-application>
<web-module id="dbLoginModule" path="dbLoginModule.war"/>
<library path="d:\oc4j904\jdbc\lib"/>
<!-- mapping for DB Login Module -->
     <security-role-mapping name="manager">
          <user name="ITAH01" />
     </security-role-mapping>
<jazn provider="XML">
<property name="role.mapping.dynamic" value="true"/>
</jazn>
<log>
          <file path="application.log"/>
     </log>
<data-sources path="./data-sources.xml"/>
     <namespace-access>
          <read-access>
               <namespace-resource root="">
                    <security-role-mapping name="&lt;jndi-user-role>">
                         <group name="administrators"/>
                    </security-role-mapping>
               </namespace-resource>
          </read-access>
          <write-access>
               <namespace-resource root="">
                    <security-role-mapping name="&lt;jndi-user-role>">
                         <group name="administrators"/>
                    </security-role-mapping>
               </namespace-resource>
          </write-access>
     </namespace-access>
</orion-application>
just wondering the library path should point to where ?
<library path="d:\oc4j904\jdbc\lib"/> this is the default path