<?xml version="1.0" encoding="UTF-8"?>
<application xmlns="http://geronimo.apache.org/xml/ns/j2ee/application"
configId="com/ibm/j2g/security"
parentId="org/apache/geronimo/Server">
<security xmlns="http://geronimo.apache.org/xml/ns/security">
<default-principal realm-name="j2g">
<principal class="org.apache.geronimo.security.realm.providers.GeronimoUserPrincipal" name="system"/>
</default-principal>
<role-mappings>
<role role-name="authenticated">
<realm realm-name="j2g">
<principal class="org.apache.geronimo.security.realm.providers.GeronimoGroupPrincipal" name="authenticated"/>
</realm>
</role>
<role role-name="uploader">
<realm realm-name="j2g">
<principal class="org.apache.geronimo.security.realm.providers.GeronimoGroupPrincipal" name="uploader"/>
</realm>
</role>
</role-mappings>
</security>
<gb:gbean name="j2g-realm" class="org.apache.geronimo.security.realm.GenericSecurityRealm"
xmlns:gb="http://geronimo.apache.org/xml/ns/deployment-1.0">
<gb:reference name="ServerInfo">
<gb:application>*</gb:application>
<gb:module>org/apache/geronimo/System</gb:module>
<gb:name>ServerInfo</gb:name>
</gb:reference>
<gb:reference name="LoginService">
<gb:application>*</gb:application>
<gb:module>org/apache/geronimo/Security</gb:module>
<gb:name>JaasLoginService</gb:name>
</gb:reference>
<gb:attribute name="realmName">j2g</gb:attribute>
<gb:xml-reference name="LoginModuleConfiguration">
<l:login-config xmlns:l="http://geronimo.apache.org/xml/ns/loginconfig">
<l:login-module control-flag="REQUIRED" server-side="true">
<l:login-domain-name>j2g</l:login-domain-name>
<l:login-module-class>
org.apache.geronimo.security.realm.providers.PropertiesFileLoginModule
</l:login-module-class>
<l:option name="usersURI">
var/security/j2g_users.properties
</l:option>
<l:option name="groupsURI">
var/security/j2g_groups.properties
</l:option>
</l:login-module>
</l:login-config>
</gb:xml-reference>
</gb:gbean>
</application> |