all I have to do is to run some shell script
I tried to use your action mechanism and it worked great
so I just System.setProperty
("authkit.action","<path_to_the_temporary_file_that_contains_my_script>"
)
and after that I even don't need to run anything like subject.doAs....
but after few thoughts I choose to use plain Greg's approach, because
in that case I don't have to deal with various
java's configurations files and therefore to use 2-3 -D parameters
in the java command line
especially it's useful for java web start (it's so fragile :-( )
thanks for the great job
On Mar 20, 2006, at 7:25 AM, Michael Hall wrote:
On Mar 20, 2006, at 1:20 AM, Dmitry Markman wrote:
Michael Hall (mikehall at spacestar dot net) had a suggestion to
make implementation of the jaas LoginModule
based on Greg's AuthKit
(his modification of the Greg's AuthKit could be found at http://
www.spacestar.net/users/mikehall/authkit.dmg)
but Michael's AuthKitLoginModule does only half a job:
it does authenticate
but it can not run any external unix process in privileged mode
(at least I wasn't able to do so)
If you got it working directly with Greg's the point is moot.
But to clarify it anyhow.
The login module does not allow you to do anything anything
privileged on return as was explained by Greg. You need to work
with a separate privileged process using the execPrivileged method
of his API. I assume you did something similar although I haven't
looked at how you are using it yet.
I allowed instead for a action to be performed at the same time you
login/authenticate,this...
System.setProperty("authkit.action","/usr/bin/id");
just before this...
lc.login();
To clarify, safely ignored as you are already complete.
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Java-dev mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/java-dev/email@hidden
