How can I configure multiple EJBs to use different security-domains in JBoss EAP 6?

Solution Verified - Updated -

Issue

How can I configure multiple EJBs to use different security-domains in JBoss EAP 6?

The multiple EJBs need to use different security-domains and the EJBs will be invoked by remote standalone clients. For example, ejbX needs to be in the sec-domain-X security-domain, while ejbY needs to be in the sec-domain-Y security-domain.

In this situation, the authentication checks are going to be handled by the security-realm that is associated with the remote connector that is configured to be used by the EJB subsystem.

It looks like the security-realm can either handle the authentication checks directly (properties file, ldap, etc) or it can defer to the jaas security-domain. In both of those situations, it seems that the EJBs are limited to a single authentication point. The EJB authentication is either going to be handled by a single security-realm or the security-realm will defer to a single security-domain.

I could configure the security-domain to have multiple login modules. I assume the same thing could be done with the security-realm.

Basically the problem that I am trying to solve boils down to this: the authentication checks for remote EJBs appear to be checked by either a single security-realm or a single security-domain. Is there a way to change this?

One idea I had was to add another remote connector to the EJB subsystem. Unfortunately, this does not appear to be possible.

Environment

  • JBoss Enterprise Application Platform (EAP)
    • 6.x

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content