http://www.blogjava.net/Jack2007/archive/2008/04/10/191795.html
http://java.e800.com.cn/articles/2008/74/1215158762697_4.html JBoss下的单点登陆(SSO)技术实现分析
http://www.blogjava.net/security/archive/2006/10/09/73199.html
自我实践:
1)根据官方文档配置josso,如下:
gateway install --target D:/apache-tomcat-6.0.26 --platform tc60
agent install --target D:/apache-tomcat-6.0.26 --platform tc60
samples install --target D:/apache-tomcat-6.0.26 --platform tc60
2)修改D:\jdk1.6.0_13\jre\lib\security\java.security,如下:
login.config.url.1=file:D:/apache-tomcat-6.0.26/conf/jaas.conf
3)根据josso-credentials.xml中的用户名和密码登录