implementing jaas login module

[Former Member]

Hi,

I would like to use my own authentication scheme which will use my login module class.

I have read the EP6 security document but it doesn't mention where the class should reside.

I've tried to add it to a par file which I uploaded to the portal, but I get "ClassNotFoundException" in the usermanagement.log.

the only way I succeeded using my login module class was when I placed it in a jar file under the "bin" folder of the J2EE server node. but when I do this I can't use the usermanagement service api within the login module.

where does the login module class should placed?

Thanks,

Raanan.

[Former Member]

a small correction: I've placed the jar file under the "lib" folder not the "bin" folder.

more info: I'm using ep6 sp2.

[David]

Hi Raanan,

I sent a reply from my email account to you. I also wanted to post it here so others can see and take advantage of it.

Best Regards,

David

According to the book from the course last week (page 6-17 book 2), it needs to be placed in the /usr/sap//cluster/server/additional-lib directory. You must also maintain the references in ./cluster/server/managers/library.txt by adding:

library myLoginModules myLoginModules.jar

reference myLoginModules servlet

reference myLoginModules com.sap.security.api

reference com.sap.security.api myLoginModules

If there are problems accessing the usermanagement api from here, a reference to that service's jar files might need to be added in the form (might also have to add the path to the jar file):

library usermanagementservice com.sap.portal.usermanagementapi.jar

reference myLoginModules usermanagementservice

Although documentation exists on login modules in the Enterprise Portal 6.0 SP2 - Security Guide (incidentally we have two copies of the same document) in SDN, it doesn't cover adding references to the library.txt file for this.