JBoss Authentication

[Muhammad Imad Qureshi]

Hi

I have following contents in my login-config.xml. Can anyone tell when these queries actually run.

<?xml version='1.0'?>
<!DOCTYPE policy PUBLIC
"-//JBoss//DTD JBOSS Security Config 3.0//EN"
"http://www.jboss.org/j2ee/dtd/security_config.dtd">
<policy>
<application-policy name="r911-SecureRealm">
<authentication>
<login-module code="com.r911.security.R911LoginModule" flag="required">
<module-option name="dsJndiName">java:/R911DB</module-option>
<module-option name="principalsQuery">SELECT R911User.Password, R911User.userId 'PrincipalID' FROM R911User WHERE UserName=?</module-option>
<module-option name="rolesQuery">
SELECT UserGroup.UserGroupName, 'Roles'
FROM R911User
LEFT JOIN UserMapping ON R911User.UserId = UserMapping.UserId
LEFT JOIN UserGroup ON UserMapping.UserGroupId = UserGroup.UserGroupId
WHERE R911User.Username =?
</module-option>
</login-module>
</authentication>
</application-policy>
</policy>

Thanks
Imad

[Dave Salter]

Theres a good description of what it all means here.

These queries will run whenever authentication is required by the server. The server caches authentication, so authentication is not necessarily done for every request.
[ September 22, 2005: Message edited by: Dave Salter ]