[jboss-user] [Security & JAAS/JBoss] - Re: JavaServer Faces and container-managed authorization not

Can you do a quick test ? Can you replace your jsf with plain jsp ? Also can you post your jsp/html code of the login page ? Does it have anonymous wrote : form action="j_security_check" and anonymous wrote : j_username and j_password I presume it does & If it does, then WebContainer does the authentication & all this code below anonymous wrote : LoginContext loginContext = new LoginContext(LOGIN_APP_POLICY, this); | loginContext.login(); | // If there is no exception, login succeeded. | returnString = SUCCESS; | // Remove the password from memory and Faces display. | password = null; | // Put the loginContext object into the user's session. | request.getSession().setAttribute(LOGIN_CONTEXT_ATTR, loginContext); | is not neccessary. So lets try to replace jsf with a plain jsp. If that works, we have isolated the problem to jsf managed bean. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4171609#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...