[GERONIMO-4445] Make it possible to set up GeronimoLoginConfiguration instances containing specific security realms and to exclude others.

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.2
• Fix Version/s: 2.2
• Component/s: security
• Security Level: public (Regular issues)
• Assignee: David Jencks
• Reporter: David Jencks
• Created: 04/Dec/08 08:02
• Updated: 04/Dec/08 08:38
• Resolved: 04/Dec/08 08:38

Description

Currently there can really only be one GeronimoLoginConfiguration and it finds out about all security realms. There are several uses for additional Configuration instances and for excluding security realms from the "default" GeronimoLoginConfiguration:

• run-as and default subject support require securiy realms to create the subjects. You might want these security realms to be only accessible through CredentialStore instances and not externally: this allows setting up privileged Subjects without a password.
• jaspi auth modules can use JAAS by supplying a Configuration instance. This will allows use of the GeronimoLoginConfiguration here.