jaas – Tarik Billa

Kafka “Login module not specified in JAAS config”

April 7, 2024 by Tarik

There are 2 ways to provide the JAAS configuration to the Kafka clients. Via the client property: sasl.jaas.config. In that case you set it to the actual JAAS configuration entry. For example, your configuration file becomes: bootstrap.servers=(address) zookeeper.connect=127.0.0.1:2181 zookeeper.connection.timeout.ms=6000 sasl.jaas.config=org.apache.kafka.common.security.plain.PlainLoginModule required username=”(username)” password=”(password)”; security.protocol=SASL_PLAINTEXT sasl.mechanism=PLAIN group.id=(group) As you’ve already figured out, you can use –command-config … Read more

Using Mockito, how do I intercept a callback object on a void method?

September 22, 2023 by Tarik

For functions returning void, use doAnswer() doAnswer(…).when(mockedObject).handle(any(Callback[].class)); And an Answer that performs the interception must go in as the parameter to doAnswer, e.g. as an anonymous class: new Answer() { public Object answer(InvocationOnMock invocation) { Object[] args = invocation.getArguments(); Mock mock = invocation.getMock(); return null; }} In this case args will be the array Callback[]!

How can I delegate JAAS authorization checks to Shiro?

March 18, 2023 by Tarik

Note: The answer addresses the general case where an external authorization system is to be integrated with the JVM, by means of the standard security framework. It is not Shiro- or JMX-specific, as I am familiar with neither. Conceptually, it appears that you are after the policy decision point (PDP) — the facility where authorization … Read more

JAAS for human beings

January 28, 2023 by Tarik

Other users have provide some very useful links above so I am not going to bother with links. I have done a similar research in JAAS for web application and has ran into a “mind roadblock” until I finally realize JAAS is a framework tackling security at a different “layer” then web applications in the … Read more

Performing user authentication in Java EE / JSF using j_security_check

November 16, 2022 by Tarik

I suppose you want form based authentication using deployment descriptors and j_security_check. You can also do this in JSF by just using the same predefinied field names j_username and j_password as demonstrated in the tutorial. E.g. <form action=”j_security_check” method=”post”> <h:outputLabel for=”j_username” value=”Username” /> <h:inputText id=”j_username” /> <br /> <h:outputLabel for=”j_password” value=”Password” /> <h:inputSecret id=”j_password” /> … Read more