Adding Grid Security

Overview

Changes to Application

• Add CommonsGridLoginModule to JAAS login module (security-config.xml)
  • requires nci-commons-core version 1.2.4 or greater see http://maven.5amsolutions.com/archiva/browse/com.fiveamsolutions/nci-commons-core
  • requires jbosssx.jar as dependency to handle encryption of pre-shared key

    <login-module code="com.fiveamsolutions.nci.commons.authentication.CommonsGridLoginModule" flag="optional">
        <module-option name="gridServicePrincipal">${gridServicePrincipal}</module-option>
        <module-option name="gridServiceCredential">${gridServiceCredential}</module-option>
        <module-option name="gridServicePrincipalSeparator">||</module-option>
    </login-module>
    

  • Define gridServicePrincipal & gridServiceCredential properties within appropriate properties file so that the login module configuration file is properly configured as a part of the build and deployment process for your application

            <gridServicePrincipal>Gr1DU5er</gridServicePrincipal>
            <gridServiceCredential>ltHZmZ1rqYq8j2uyHEABIQ==</gridServiceCredential>
    

Changes to Grid Instance

• Use GridSecurityJNDIServiceLocator instead of standard JNDIServiceLocator, replace existing occurrences with new GridSecurityJNDIServiceLocator
• Add Service Property to PAServices content, gridServicePrincipalSeparator w/ default value ||

Changes to build-pa (bda scripts)