JAAS client access instead of JNDI

Question

Hi,
I'm exploring using the JAAS client access instead of JNDI access on WL7.
The Docs say I have to write a LoginModule. However, the following
appears to work too (and of course, I'm not using a LoginModule):
     Environment env = new Environment();
          env.setProviderUrl(url);
          env.setSecurityPrincipal(username);
          env.setSecurityCredentials(password);
          Subject sub = new Subject();
          Authenticate.authenticate(env,sub);
          System.err.println("SUBJECT IS " + sub.toString());
          SampleAction sampleAction = new SampleAction(url);
          Security.runAs(sub, sampleAction);
The LoginModule approach just appears to be a convoluted way of doing
the same thing, so why do I need it?
Also, the WebLogic examples do all sorts of strange things in their
example LoginModule, like their commit does this:
final PasswordCredential passwordCred = new
PasswordCredential(username, password);
AccessController.doPrivileged(new PrivilegedAction() {
public java.lang.Object run() {
subject.getPrivateCredentials().add(passwordCred);
return null;
(see http://edocs.bea.com/wls/docs70/security/fat_client.html#1029441)
Surely this is not necessary - cos the actuall login call to
Authenticate.authenticate would have populated the subject properly.
Any ideas? TIA.
Q

Answer 1

You may want to read "Small Footprint Client Options for BEA WebLogic Server"
paper (http://dev2dev.bea.com/resourcelibrary/whitepapers.jsp?highlight=whitepapers)
Madhu <[email protected]> wrote:
infact for a remote client to access the EJB, what are the necessary jar/files
needed apart from the myejb.jar.
Do we need to copy the complete weblogic.jar and weblogic/classes folder?
"Madhu" <[email protected]> wrote:
Even i have the same problem. I had to copy the weblogic.jar, and all
the weblogic/classes
folder to the client machine.
I am thinking that this is a wrong process, and the jndi.jar is sufficient
enough
to make a lookup of home objects.
I would appreciate If anyone has any solution other than copying the
complete
40M bytes.
-Madhu
Dimitri