JAAS

...

• org.mortbay.jetty.plus.jaas.spi.JDBCLoginModule
• org.mortbay.jetty.plus.jaas.spi.PropertyFileLoginModule
• org.mortbay.jetty.plus.jaas.spi.DataSourceLoginModule
• org.mortbay.jetty.plus.jaas.ldap.LdapLoginModule

We'll take a look at all of these, but first, a word about password handling in jetty6, as it applies to all LoginModules.

...

The contents of the file are fully read in and cached in memory the first time a user requests authentication.

LdapLoginModule

Note that the LdapLoginModule ships in a separate jar, in $JETTY-HOME/lib/ext/jetty-ldap-jaas.jar. It requires JDK1.5 or above.

ldaploginmodule {
   org.mortbay.jetty.plus.jaas.spi.LdapLoginModule required
   debug="true"
   contextFactory="com.sun.jndi.ldap.LdapCtxFactory"
   hostname="ldap.example.com"
   port="389"
   bindDn="cn=Directory Manager"
   bindPassword="directory"
   authenticationMethod="simple"
   forceBindingLogin="false"
   userBaseDn="ou=people,dc=alcatel"
   userRdnAttribute="uid"
   userIdAttribute="uid"
   userPasswordAttribute="userPassword"
   userObjectClass="inetOrgPerson"
   roleBaseDn="ou=groups,dc=example,dc=com"
   roleNameAttribute="cn"
   roleMemberAttribute="uniqueMember"
   roleObjectClass="groupOfUniqueNames";
   };

Writing Your Own

If you want to implement your own custom LoginModule, there are two classes to be familiar with:

...