Chapter 7. Configuring User Accounts
7.1. User Accounts Copy linkLink copied to clipboard!
soa-users.properties and soa-roles.properties) to check a user's password and determine their level of access. SOA uses the Java Authentication and Authorization Service (JAAS) to authenticate user accounts.
Warning
7.2. Create User Accounts Copy linkLink copied to clipboard!
Procedure 7.1. Add a New User
- Open the
soa-users.propertiesfile in a text editor:vi SOA_ROOT/jboss-as/server/PROFILE/conf/props/soa-users.properties. Add the user's name and password on a new line, using this syntax:username=password.Here is an example for a user with the login name "Harold":harold=@dm1nU53rNote
Any line in this file that begins with a hash (#) is ignored. (You can use this convention to temporarily disable a user account.) - Save the changes to the file and exit the text editor.
- Open the
soa-roles.propertiesfile in a text editor:vi SOA_ROOT/jboss-as/server/PROFILE/conf/props/soa-roles.properties. Add the user and the roles you wish to assign to them on a new line, using this syntax:username=role1,role2,role3.harold=JBossAdmin,HttpInvoker,user,adminNote
You can assign any number of roles. Note that a user must be assigned theJBossAdmin,HttpInvoker,userandadminroles in order to be able to log into the server consoles.Any line in this file that begins with a hash (#) is ignored. You can use this convention to temporarily disable user roles. - Save the changes to the file and exit the text editor.
The user will now be able to log in to the server console at http://localhost:8080. You do not have to restart the server.
7.3. Security Roles Copy linkLink copied to clipboard!
| Role | Description |
|---|---|
| JBossAdmin | The JBossAdmin role is required to log into the various management components of SOA. It is the primary role so all system administrators should be assigned this role. |
| HttpInvoker | The HttpInvoker role is used by the Http Invoker to access JNDIs and EJBs from remote locations. |
| user | This is used to grant user access to services deployed in SOA if they are configured to utilize the JAAS security domains. The jBPM Console relies on this one role only. |
| admin | This is used to grant administrative access to services deployed in SOA if they are configured to utilize the JAAS security domains. |
7.4. Java Authentication and Authorization Service (JAAS) Copy linkLink copied to clipboard!
7.5. Disable a User's Account Copy linkLink copied to clipboard!
Procedure 7.2. Disable a User's Account
- Open the
soa-users.propertiesfile in a text editor:vi SOA_ROOT/jboss-as/server/PROFILE/conf/props/soa-users.properties. Either delete the entire line containing the user's name and password or simply put a hash (#) in front of it to "comment it out."Here is an example for a user with the login name "Harold":#harold=@dm1nU53r - Save the changes to the file and exit the text editor.
The user will no longer be able to log in to the server console. You do not have to restart the server.