Macromedia live cycle 7.2 매뉴얼

Installing and Configuring LiveCycle Security Products for JBoss

 Configuring JAAS authentication     56

For both turnkey and manual installations of LiveCycle Policy Server on JBoss, you need to configure JAAS 
authentication. 

To configure JAAS authentication, you must add an application policy element in the login-config.xml file 
that JBoss uses so that LiveCycle Policy Server can communicate with your LDAP server. 
LiveCycle Policy Server provides a default login-config.xml file that includes the sample application policy 
element 

<application-policy name="UsernamePwd_Auth_Search">

.

For information about the sample application policy element, see 

. 

For information about configuring LiveCycle Policy Server to use the application policy for authentication, 
see 

.

➤

1. Open the login-config.xml file from the [LiveCycle root]/jboss-3.2.5/server/all/conf directory.

2. Add and modify the application policy node with the properties of your LDAP directory. 

3. Save the file. 

4. Restart the application server.

➤

1. Open the login-config.xml file from the [appserver root]/server/all/conf directory:

●

If you are deploying LiveCycle Policy Server to an existing instance of JBoss that is already running 
other LiveCycle applications, you can copy the sample application policy element from the default 
login-config.xml file, insert it into the login-config.xml file that is in the [appserver root]/conf 
directory, and then modify the application policy element appropriately. 

●

If you are deploying LiveCycle Policy Server to a new instance of JBoss that is not running other 
LiveCycle applications, replace the login-config.xml file located in the [appserver root]/conf 
directory with the default login-config.xml file that LiveCycle Policy Server provides, and then 
modify the application policy element appropriately. 

2. Add and modify the application policy node with the properties of your LDAP directory.

3. Save the file.

4. Restart the application server.

LiveCycle Policy Server provides a sample application policy to use as a template for setting up JAAS 
authentication on JBoss. The sample application policy is appropriate when the DN of the user records in 
your LDAP does not include the user’s login identification. 

To locate a user record, you configure a search filter that searches the object classes that include the user’s 
login identification. For the search filter, you specify the prefix and the suffix to the user identification.