Configuring Jaas Authentication; Sample Application Policy - Adobe LIVE CYCLE 7.2 - INSTALLING AND CONFIGURING Manual

Adobe LiveCycle
Installing and Configuring LiveCycle Security Products for JBoss

Configuring JAAS authentication

For both turnkey and manual installations of LiveCycle Policy Server on JBoss, you need to configure JAAS
authentication.
To configure JAAS authentication, you must add an application policy element in the login-config.xml file
that JBoss uses so that LiveCycle Policy Server can communicate with your LDAP server.
LiveCycle Policy Server provides a default login-config.xml file that includes the sample application policy
element
<application-policy name="UsernamePwd_Auth_Search">
For information about the sample application policy element, see
For information about configuring LiveCycle Policy Server to use the application policy for authentication,
see "LiveCycle Policy Server" on page
➤
To create the application policy for turnkey installations:
1. Open the login-config.xml file from the [LiveCycle root]/jboss-3.2.5/server/all/conf directory.
2. Add and modify the application policy node with the properties of your LDAP directory.
3. Save the file.
4. Restart the application server.
➤
To create the application policy for manual installations:
1. Open the login-config.xml file from the [appserver root]/server/all/conf directory:
If you are deploying LiveCycle Policy Server to an existing instance of JBoss that is already running
●
other LiveCycle applications, you can copy the sample application policy element from the default
login-config.xml file, insert it into the login-config.xml file that is in the [appserver root]/conf
directory, and then modify the application policy element appropriately.
If you are deploying LiveCycle Policy Server to a new instance of JBoss that is not running other
●
LiveCycle applications, replace the login-config.xml file located in the [appserver root]/conf
directory with the default login-config.xml file that LiveCycle Policy Server provides, and then
modify the application policy element appropriately.
2. Add and modify the application policy node with the properties of your LDAP directory.
3. Save the file.
4. Restart the application server.

Sample application policy

LiveCycle Policy Server provides a sample application policy to use as a template for setting up JAAS
authentication on JBoss. The sample application policy is appropriate when the DN of the user records in
your LDAP does not include the user's login identification.
To locate a user record, you configure a search filter that searches the object classes that include the user's
login identification. For the search filter, you specify the prefix and the suffix to the user identification.
26.
Manually Configuring JBoss
Configuring JAAS authentication
.
"Sample application policy" on page
56
56.