Chapter 11. Deploying Security Domains

Procedure 11.1. Modular Security Domain configuration

1. Create deployment descriptor

   You must create a deployment descriptor file to contain the security domain configuration.
   If you have already created a deployment descriptor for your application, you can skip this step and proceed to step 2.
   The filename takes the format [domain_name]-jboss-beans.xml. While the domain_name is arbitrary, you should choose a name that is meaningful to the application ensure the name of the deployment descriptor is unique across the server profile.
   The file must contain the standard XML declaration, and a correctly configured <deployment> element.

   <?xml version="1.0" encoding="UTF-8"?>
   
   <deployment xmlns="urn:jboss:bean-deployer:2.0">
   
   
   </deployment>

2. Define application policies

   Individual security domains are defined within the <deployment> element.
   In the example below, two security domains are specified. Each authentication policy uses the same login module, and module parameters.

   Note

   Other login modules are available for use with the Enterprise Application Platform. For more information about the available login modules, refer to Section 12.1, “Using Modules”

   <?xml version="1.0" encoding="UTF-8"?>
   
   <deployment xmlns="urn:jboss:bean-deployer:2.0">
   
     <application-policy xmlns="urn:jboss:security-beans:1.0" name="web-test">
       <authentication>
         <login-module code="org.jboss.security.auth.spi.UsersRolesLoginModule" flag="required">
           <module-option name="unauthenticatedIdentity">anonymous</module-option>
           <module-option name="usersProperties">u.properties</module-option>
           <module-option name="rolesProperties">r.properties</module-option>
         </login-module>
       </authentication>
     </application-policy>
   
     <application-policy xmlns="urn:jboss:security-beans:1.0" name="ejb-test">
       <authentication>
         <login-module code="org.jboss.security.auth.spi.UsersRolesLoginModule" flag="required">
           <module-option name="unauthenticatedIdentity">anonymous</module-option>
           <module-option name="usersProperties">u.properties</module-option>
           <module-option name="rolesProperties">r.properties</module-option>
         </login-module>
       </authentication>
     </application-policy>
   
   </deployment>
   

3. Deploy or package the deployment descriptor

   Move the deployment descriptor file to the jboss-as/server/$PROFILE/deploy directory of the required server profile in your installation.
   If you are distributing your application to a wider audience, package the deployment descriptor in the META-INF directory of the EJB Jar, or the WEB-INF directory of your web application (WAR).