internal/kernel/jaas-ipa.cfg

   1 USER {
   2     org.argeo.cms.auth.HttpSessionLoginModule sufficient;
   3     org.argeo.cms.auth.SpnegoLoginModule optional;
   4     com.sun.security.auth.module.Krb5LoginModule optional tryFirstPass=true;
   5     org.argeo.cms.auth.UserAdminLoginModule sufficient;
   6 };
   7
   8 ANONYMOUS {
   9     org.argeo.cms.auth.HttpSessionLoginModule sufficient;
  10     org.argeo.cms.auth.AnonymousLoginModule sufficient;
  11 };
  12
  13 DATA_ADMIN {
  14     org.argeo.api.DataAdminLoginModule requisite;
  15 };
  16
  17 NODE {
  18     com.sun.security.auth.module.Krb5LoginModule optional
  19      keyTab="${osgi.instance.area}node/krb5.keytab"
  20      useKeyTab=true
  21      storeKey=true;
  22     org.argeo.api.DataAdminLoginModule requisite;
  23 };
  24
  25 KEYRING {
  26     org.argeo.cms.auth.KeyringLoginModule required;
  27 };
  28
  29 SINGLE_USER {
  30     com.sun.security.auth.module.Krb5LoginModule optional
  31      principal="${user.name}"
  32      storeKey=true
  33      useTicketCache=true
  34      debug=true;
  35     org.argeo.cms.auth.SingleUserLoginModule requisite;
  36 };
  37
  38 Jackrabbit {
  39    org.argeo.security.jackrabbit.SystemJackrabbitLoginModule requisite;
  40 };