This week's book giveaway is in the Mac OS forum.
We're giving away four copies of a choice of "Take Control of Upgrading to Yosemite" or "Take Control of Automating Your Mac" and have Joe Kissell on-line!
See this thread for details.
The moose likes Websphere and the fly likes JAAS authorization on WAS 7.0 Big Moose Saloon
  Search | Java FAQ | Recent Topics | Flagged Topics | Hot Topics | Zero Replies
Register / Login


JavaRanch » Java Forums » Products » Websphere
Bookmark "JAAS authorization on WAS 7.0" Watch "JAAS authorization on WAS 7.0" New topic
Author

JAAS authorization on WAS 7.0

sheetal Anand
Greenhorn

Joined: Jun 11, 2010
Posts: 1
We have implemented JAAS in our application for authentication and authorization. Both are working fine on tomcat. But authorization is not working on WAS 7.0. Any user is able to access all the pages despite the permissions set on the principals. I have placed our policy file in security folder of websphere java jre. And made entries in java.security file. Entry is as below:

auth.policy.provider=com.sun.security.auth.PolicyFile
auth.policy.url.1=file:${java.home}/lib/security/flame.policy

It seems WAS is not reading my policy file at all. Please help me on this. Do I need to do some specific settings in WAS 7.0
 
I agree. Here's the link: http://aspose.com/file-tools
 
subject: JAAS authorization on WAS 7.0