Authentification with JAAS, Tomcat

Question

Hello,
I'm working on an application with some specific needs at authorization. Users should log on with an service running on their localhost, exchanging xml-documents.
It works like....
1. request application for loginpage
2. loginpage is an html-form with localhost as action-target (redirecturl as hidden field)
3. user submits the form and the xml-request in the form is evaluated, the xml-response is sent to the redirecturl.
4. on applicationside, the xml-response is verified and when it is correct, the user is authenticated.
My problem is, that i don't have any system (ldap, kerberos, jdbc-source) containing userids or roles, but i want to use jaas for authorization on tomcat/struts for the ability to assign roles to actions...
I thought of using the j_security_check. When the xml-response is verified as correct (4) then the generated userid is written in a database, so j_security_check should be able to lookup.
Can I do this? How could this be done? I would like to redirect to j_security_check and not render an html-form with the new generated userid and password...
thanks for help,
hanspeter

Answer 1

Hello,
did you try to create this user, using the Visual Administrator tool of the J2EE Engine? Then there you can manage the mappings you talk about.
Did you see:
http://help.sap.com/saphelp_nw04/helpdata/en/49/e98876e9865b4e977b54fc090df4ed/frameset.htm
1. "Creating and Removing Users"
(Administration Manual -> Server Administration -> J2EE Engine Security -> Users and Authorizations on the J2EE Engine -> User and Authorization Administration -> J2EE Engine User Management Using the Visual Administrator -> Managing Users -> Creating and Removing Users),
2. "Security Roles Management"
(Administration Manual -> Server Administration -> J2EE Engine Security -> Users and Authorizations on the J2EE Engine -> User and Authorization Administration -> J2EE Engine User Management Using the Visual Administrator -> Security Roles Management => Mapping Users and Groups)
Does this helps?
Regards, Jordan
Message was edited by: Jordan Stanchev