jGuard / News: Recent posts

jGuard v0.70 alpha 1 released!

the jGuard team is pleased to announce a new 'experimental' release(v0.70 alpha 1) of the java security library called jGuard(http://jguard.sourceforge.net).

this library is build on top of jaas, for J2EE web applications.
his goal is to provide for webapp developers, an easy way to manage authentication and authorizations.

enhancements since the last 'stable' release (v0.65):... read more

jGuard v0.65.4 released!
the jGuard team is pleased to announce a new stable release(v0.65.4)
of the java security library called jGuard(http://jguard.sourceforge.net).

this is a bug fix release which resolve a bug raised when we the user logout,
but is not logged.
this library is build on top of jaas, for J2EE web applications.
his goal is to provide for webapp developers, an easy way to manage authentication and authorizations.... read more

jGuard v0.65.2 released!
the jGuard team is pleased to announce a new stable release(v0.65.2)
of the java security library called jGuard(http://jguard.sourceforge.net).

this is a bug fix release which remove a bug on unix/linux systems, raised by
the XML-based implementations on the authentication and the authorization areas.
=> all jGuard users are encouraged to upgrade.

this library is build on top of jaas, for J2EE web applications.
his goal is to provide for webapp developers, an easy way to manage authentication and authorizations.... read more

jGuard v0.65.1 released!
the jGuard team is pleased to announce a new stable release(v0.65.1)
of the java security library called jGuard(http://jguard.sourceforge.net).

this is a bug fix release which remove a security hole on authentication with database backend.
=> thanks to 'j0lea' to highlight this bug and provide the fix!

all jGuard users are encouraged to upgrade as soon as possible.... read more

jGuard v0.65 final released!

the jGuard team is pleased to announce a new stable release(v0.65 final) of the java security library called jGuard(http://jguard.sourceforge.net).

this library is build on top of jaas, for J2EE web applications.
his goal is to provide for webapp developers, an easy way to manage authentication and authorizations.

enhancements since the last 'stable' release:
- fix a bug on 'update role name' feature
- enhance the documentation
- add the Oracle based authorization backend
- add a convenient logging system based on jakarta commons-logging
- correct a bug on the applicationName discovery mechanism present in the beta2 release
- remove the need to specify the webapp name => a discovery mechanism has been implemented
- easy install and test has gone!: there is no more need to install and configure stuff on the jvm side
- enable java configuration (relating to the Configuration class) through the web.xml
with the JGuardCOnfiguration class
- enable authentication configuration through the web.xml
- clean Subject internals when http session expire
- reduce the 'jvm part' classes size (it remains only two classes)
=> avoid classloader issues
- add MS SQLServer and DB2 authentication
- add authorization jGuard API with the XML , MS SQLServer,PostgreSQL, and DB2 implementations
- fix bug #1184015 'Can't configure tables names in JDBC based LoginModules'
- fix bug #1200119 'URLPermission.toString cause StackOverflowError'
- fix bug when the webapp (but not the application server) stops and restarts
- fix bug #1213037 'Changes in domains and permissions dont make effect in roles'
- prevent errors and enhance error message displayed depending
on the XmlAuthorizationManager 'fileLocation'(parameter configured in the web.xml file)
- upgrade dom4j to the 1.6.1 release.
- auto-discover mechanism policy implementation added for an easier use
=> the jguard.policy which set the platform policy is now optional (only for advanced users)
- remove net.sf.jguard.permissionmanager package and move the corresponding classes
into the net.sf.jguard.authorization package
- rename some classes
- update hasRole tag to support multiple role ('roles' attribute replace 'name') associated with another
new attribute('operator') wich support three values ('ANY','ALL','NONE')
- add authorization jGuard API with the PostgreSQL implementation (XML will be provided in the beta2
release, mysql in the beta3, and oracle in the final release)
- add authorization webapp example to manage domains, permissions,roles (CRUD operations on each one),
and associate roles with their domains and permissions. all these operations can be done on the fly.... read more

jGuard v0.65 beta 3 released!

the jGuard team is pleased to announce a new experimental release(v0.65 beta3) of the java security library called jGuard(http://jguard.sourceforge.net).

this library is build on top of jaas, for J2EE web applications.
his goal is to provide for webapp developers, an easy way to manage authentication and authorizations.
this release is experimental, and does not contain all the features wanted for the next stable release (0.65).
it lacks only by the authorization implementations:
- release v0.65 final will at least, add the Oracle based authorization backend
and a complete documentation (the 'current' v0.65 documentation can be reached at http://jguard.sourceforge.net/v0.65/\).... read more

jGuard v0.65 beta 2 released!

the jGuard team is pleased to announce a new experimental release(v0.65 beta2) of the java security library called jGuard(http://sourceforge.net/projects/jguard/).

this library is build on top of jaas, for J2EE web applications.
his goal is to provide for webapp developers, an easy way to manage authentication and authorizations.
this release is experimental, and does not contain all the features wanted for the next stable release (0.65).
it lacks only by the authorization implementations:
- release v0.65 beta3 will at least, add the MySQL based authorization backend
- release v0.65 final will at least, add the Oracle based authorization backend... read more

jGuard v0.65 beta 1 released!

i am pleased to announce a new experimental release(v0.65 beta1) of the java security library called jGuard(http://sourceforge.net/projects/jguard/).

this library is build on top of jaas, for J2EE web applications.
his goal is to provide for webapp developers, an easy way to manage authentication and authorizations.
this release is experimental, and does not contain all the features wanted for the next stable release (0.65).
it lacks only by the authorization implementations:
- release v0.65 beta2 will at least, add the XML based authorization backend
- release v0.65 beta3 will at least, add the MySQL based authorization backend
- release v0.65 final will at least, add the Oracle based authorization backend... read more

jGuard v0.64 released!

i am pleased to announce a new release(v0.64) of the java security library called jGuard(http://sourceforge.net/projects/jguard/).

this library is build on top of jaas, for J2EE web applications.
his goal is to provide for webapp developers, an easy way to manage authentication and authorizations.

enhancements of this release:
- JGuardPrincipalsPermissions.dtd has been updated
- refactor loginModule implementations code to suppress duplicate code
- refactor permissionmanager implementations code to suppress duplicate code
- enhance XmlPermissionManager and Xml principals and permissions configuration
- create a specific permissionmanagers package (update your configuration in the web.xml !)
- add database support for PermissionManager with PostgreSQL, MySQL, and Oracle implementations
- add a css on the jGuard web site dedicated to print... read more

jGuard v0.63 released!

i am pleased to announce a new release(v0.63) of the java security library called jGuard(http://sourceforge.net/projects/jguard/).

this library is build on top of jaas, for J2EE web applications.
his goal is to provide for webapp developers, an easy way to manage authentication and authorizations.

enhancements of this release:

- put documentation on the jGuard web site (http://jguard.sourceforge.net)
- add AccessFilter parameter to set the 'loginField' name
- add AccessFilter parameter to set the 'passwordField' name
- permit driverManager settings (driverName,url,login,pwd)
- handle specific database connections to each webapps
- add MySQL's loginModule with encryption option
- add Oracle's LoginModule with encryption option
- add PostgreSQL's LoginModule with encryption option
- add encryption in XmlLoginModule
- upgrade the dom4j library to the 1.5.1 bug fix release
- fix bug 1058710 "File jGuardUsersRoles.xml not found in jGuardExample" (include debug option bug in XmlLoginModule)
=> thanxs to Damien Tomezzoli... read more

jGuard v0.62 released!

i am pleased to announce a new release(v0.62) of the java security library called jGuard(http://sourceforge.net/projects/jguard/).

this library is build on top of jaas, for J2EE web applications.
his goal is to provide for webapp developers, an easy way to manage authentication and authorizations.

enhancements of this release:

- remove UserInterface and UserImpl classes, and replace them by right JAAS classes (the complete JAAS integration has gone).
- support securityManager
- remove tagish.jar dependancy
- add <jguard:pubCredential> tag with EL support
- add <jguard:privCredential> tag with EL support... read more

jGuard v0.61 released!

i am pleased to announce a new release(v0.61) of the java security library called jGuard(http://sourceforge.net/projects/jguard/).

this library is build on top of jaas, for J2EE web applications.
his goal is to provide for webapp developers, an easy way to manage authentication and authorizations.

enhancements of this release:
- replace xstream by dom4j library
- enhance XML configuration for authentications
- enhance XML configuration for authorizations
- enhance logging messages in debug mode
- french translation of installation notice
- add the <jguard:hasRole> tag to the jGuard taglib, with EL support... read more

jGuard v0.60 released!

i am pleased to announce a new major release(v0.60) of the java security library called jGuard(http://sourceforge.net/projects/jguard/).

this library is build on top of jaas, for J2EE web applications.
his goal is to provide for webapp developers, an easy way to manage authentication and authorizations.

the main features are :

- relies only on java 1.4 and j2ee 1.3 or higher
- can be adapted on any webapp, on any application server
- does not depend on a web framework, or an AOP framework
- build on top of the very secure and flexible JAAS(http://java.sun.com/products/jaas/)
- permit management of users, roles, web permissions for each webapp independantly
- authentications and authorizations are handled by pluggable mechanisms:
jdbc database or xml way now, for both authentications and authorizations part
- changes take effects 'on the fly' (dynamic configuration)
- each webapp has its own authentications and authorizations configuration... read more

this is a minor jGuard release.
changelog:
- enhance javadoc
- fix a regexp bug on URLPermission:
before this fix, only a permission with the same name was granted.
now, the URLPermission 'implies' other URLPermission with 'similar' uris
by example:
now, 'http://foo/bar/' implies 'http://foo/bar/postAComment/stuff'

have fun,
charles.

this is a minor jGuard release.
changelog:
-add licence header to some files
-change jGuard.properties in jGuard.policy (better name for this file responsability)
-add debug option to the DBViaJNDILogin login module
-refactor some code in a cleaner way
-enhance exception messages
-add an applicationName parameter to the AccessFilter (previous release was tight to the 'jboard' name ......)

have fun!... read more