USER {
org.argeo.cms.auth.HttpSessionLoginModule sufficient;
org.argeo.cms.auth.SpnegoLoginModule optional;
- com.sun.security.auth.module.Krb5LoginModule optional;
- org.argeo.cms.auth.IpaLoginModule requisite;
+ com.sun.security.auth.module.Krb5LoginModule optional tryFirstPass=true;
+ org.argeo.cms.auth.UserAdminLoginModule sufficient;
+};
+
+ANONYMOUS {
+ org.argeo.cms.auth.HttpSessionLoginModule sufficient;
+ org.argeo.cms.auth.AnonymousLoginModule sufficient;
};
DATA_ADMIN {
- org.argeo.cms.auth.DataAdminLoginModule requisite;
+ org.argeo.api.DataAdminLoginModule requisite;
};
NODE {
keyTab="${osgi.instance.area}node/krb5.keytab"
useKeyTab=true
storeKey=true;
- org.argeo.cms.auth.DataAdminLoginModule requisite;
+ org.argeo.api.DataAdminLoginModule requisite;
+};
+
+KEYRING {
+ org.argeo.cms.auth.KeyringLoginModule required;
};
SINGLE_USER {
com.sun.security.auth.module.Krb5LoginModule optional
+ principal="${user.name}"
storeKey=true
+ useTicketCache=true
debug=true;
org.argeo.cms.auth.SingleUserLoginModule requisite;
};
-KEYRING {
- org.argeo.cms.auth.KeyringLoginModule required;
-};
-
Jackrabbit {
org.argeo.security.jackrabbit.SystemJackrabbitLoginModule requisite;
};
-