Authenticating a user present in default provider from a custom provider

Question

Hi,
I have two authentication providers(custom and default one) configured with the configuration option "OPTIONAL" on weblogic v 10 server instance.
The custom Authentication provider basically creates a custom principal and adds the principal to the subject.This scenario works irrespective of the username sent by the client.
Now I want the custom authentication provider to add only principals (username) which are present in the default provider/ladap provider configured on the server.
for eg: If the client tries to authenticate with username "test", then my custom authentication provider should check if "test" user is present in the default/ldap provider, and if the "test" user does exists then create a custom principal with the user "test" and send it back to client as part of authentication.
How should one go about doing this? I tried to call the following code in my custom authentication provider,
try
System.out.println("default Login" + userId);
Authenticate.authenticate(environment, _subject);
principalsVector.add(new WLSUserImpl(customPrincipal.getName()));
but as expected the server startup gets into an infinite loop and throws
failed. Reason: weblogic.security.SecurityInitializationException: Authentication denied: Boot iden
tity not valid; The user name and/or password from the boot identity file (boot.properties) is not v
alid. The boot identity may have been changed since the boot identity file was created. Please edit
and update the boot identity file with the proper values of username and password. The first time th
e updated boot identity file is used to start the server, these new values are encrypted.
Any help on this would be great.
Thanks in Advance.
Regards,
Preethi.

Answer 1

Hi,
Thanks for the information. It works when you change the configuration option for both the providers to sufficient . Now the subject gets populated with the custom principal and sent back to the client
can you tell me how to invoke an EJB method using this customprincipal from a java client? The EJB method is mapped to users having Admin role.
Best Regards,
Preethi.