Authentication in Weblogic 7

Question

          Hi all,
          any help? I'm using:
          java.util.Properties props = new java.util.Properties();
          props.put(Context.SECURITY_PRINCIPAL, adminUser);
          props.put(Context.SECURITY_CREDENTIALS, adminPassword);
          props.put(Context.PROVIDER_URL, url);
          Context ctx = new InitialContext(props);
          UserPasswordCallbackHandler up = new UserPasswordCallbackHandler(username, password);
          Subject subject = new Subject();
          HashMap options = new HashMap();
          options.put("debug", "true");
          options.put("URL", url);
          weblogic.security.auth.login.UsernamePasswordLoginModule userpassword= new weblogic.security.auth.login.UsernamePasswordLoginModule();
          userpassword.initialize(subject, up, null, options);
          userpassword.login();
          with a very simple UserPasswordCallbackHandler made by me but no luck. I get a
          java.lang.reflect.InvocationTargetException: java.lang.IllegalAccessError: java.
          security.acl.NotOwnerException
          in the authenticate method even when i try to authenticate the system user. I've
          also tried:
          weblogic.security.acl.Realm.authenticate(new weblogic.security.acl.DefaultUserInfoImpl
          (username, password));
          but this gives me the same. Any help?
          Thx in advance.
          COFM
          ====
          

Answer 1

does anybody know where a production ready copy of rdbmls realm is on the
net? I did a search and didnt find much?
thanks
Joel
"PaulF" <[email protected]> wrote in message
news:[email protected]..
Virender Sandhu <[email protected]> wrote in
news:3cdab13c$[email protected]:
Hi
I am trying to understand the Security Frame-work in WLS 7.0.
I found out that WLS 7.0 uses embedded LDAP server to store users
information. It also supports external LDAP. But for our application,
I want to keep users info in a database. Is there any suggestion to
solve this problem. Do I need to create my own Authentication
Provider? or is there any other way to do this?
I will appreciate any help
Thanks
Virender Sandhu
I think that you have two choices: 1) you can configure a Compatibility
Realm, take the RDBMS example, tweak it so that it is production ready (or
grab a production ready copy from someplace out on the net...I think
they're out there), or 2) create your own provider that talks directly to
your database.
Paul F.