about customize SPNegoLoginModule

[Former Member]

Hi, all

i got some issue about customize SPNegoLoginModule.

Firstly, i have completed the configuration following the "[Configuring and troubleshooting SPNego|http://www.sdn.sap.com/irj/scn/weblogs?blog=/pub/wlg/8235] [original link is broken];"

Then i also got some .ear file, src file from NOTES 994791 - SPNego Wizard.

My issue is: i have to change the prefix of user name i got from HTTP like aaa_userid to zzz_userid,

then i can make a successful client authentication.

So how could i get the source code of SPNegoLoginModule to modify, or some other suggestion?

Thanks in advanced!

Fishy

[Former Member · Accepted solution]

Hi,

You can get the source code for SPNegoLoginModule from :

\usr\sap\<SID>\j2ee\cluster\server0\bin\ext\security.class\tc_sec_jaas.jar.

The class is com.sap.security.core.server.jaas.SPNegoLoginModule.

Create a new login module and copy the code from SPNegoLoginModule. I have never tried this for SPNego so not sure but have changed the basic password login module.

Regards,

Vijith

[Former Member]

The standard LoginModule works perfect.

Then i bulid my java project, my library project, bulid SDA file, modified LoginModuleClassLoaders in Configtool,

also add new LoginModule to replace the standard one.

But i failed to login to EP, and get "NoClassDefFoundError: com/sap/security/api/UMException" on the Login screen.

Screenshot here: http://i49.tinypic.com/ohv0r6.jpg

it seems i miss some JAR in my project or something else?

Regards!

Fishy

Edited by: fishy yu on Mar 3, 2010 8:56 AM

[Former Member]

Hi,

Do add a reference in the provider.xml as below:

<reference provider-name="sap.com" strength="weak" type="library">com.sap.security.api.sda</reference>

Regards,

Vijith

[Former Member]

The error caused by some redundancy class file in my SDA file.

i try to remove them and make it through.

Thanks

Fishy

Edited by: fishy yu on Mar 4, 2010 3:28 AM

[Former Member]

Thanks a lot. i've got the class file.

Furethermore, you mean to bulid a new MyLoginModule to replace the StandardLoginModule, not overwrite the old one?

Fishy

[Former Member]

Hi,

Yes do create your own login module and don't make changes to the standard one. Also make sure you thoroughly test it because the change is of high security concern.

All the best.

Regards,

Vijith