JAAS subject tomcat

[john307rnr]

when a user is authenticated with jaas a subject is created. how do i store the subject in the container of the web application and how can i use it later in another jsp page ?

 

[byam]

you can store it in the user session. e.g.

Subject sub = ......
session.setAttribute("subject", sub);

later in the session, the Subject can be retrieved by

Subject sub = (Subject)session.getAttribute("subject")

 

[john307rnr]

thanks byam, works fine. have you any experience in configuring the jaasrealm for tomcat ?

 

[byam]

I have no experience on Tomcat JAAS Realm. If you already have your JAAS framework implemented. You can configure tomcat Realm to use org.apache.catalina.realm.JAASRealm with your associated JAAS classes as parameters. Here is an example I've found.

http://jakarta.apache.org/slide/howto-jaas.html