...
Unconfirmed entries cannot be used for authentication.
Use:
- User goes to /selfreg/index.html and receives a form
- Fills in the form receives an email.
- Follows the link to confirm.
Configuration
Selfreg requires a database to hold data about users. If ldap authentication is desired the ldap parameters need to be set in the configuration. In both cases ensure an appropriate database has been created and there is a datasource present. There are sample data sources in the bedework/config/datasources directory. The datasource is used both by the selfreg module and by the DatabaseServerLoginModule if db authentication is desired.
...
- Message Digest - set exactly to the value in the hashAlgorithm element below, SHA, MD5 are acceptable
- Account prefix - the accounts created may be the only accounts for your system in which case leave this empty. If you have multiple sets of accounts you need to ensure they will not overlap. Set this to a value that ensures that. For example, if all your accounts are 2 letters + 4 digits then prefixing with any letter will work. Selfreg generates acounts of that form in the absence of a prefix.
- ConfirmUrl - this is what prefixes the url to confirm the creation. Something of the form http://localhost:8080/selfreg - the host, port and context.
DatabaseServerLoginModule
This is the standard jboss module. For jboss 5 add the following to the login-config.xml file
...