Erm … something seems wrong here.
<?xml version="1.0" encoding="UTF-8"?>
<core:init transaction-management-enabled="false" />
<transaction:no-transaction />
<component name="repositoryConfiguration">
<!-- JackRabbit -->
<property name="properties">
<key>org.drools.repository.configurator</key><value>org.drools.repository.jackrabbit.JackrabbitRepositoryConfigurator</value>
<!-- the root directory for the repo storage the directory must exist. -->
<!-- <key>repository.root.directory</key><value>/opt/yourpath</value> -->
</property>
<!-- ModeShape
passwords for the background users (admin and mailman), these need to match the setting
you provided for JAAS (used by ModeShape only).
<property name="properties">
<key>org.drools.repository.configurator</key> <value>org.drools.repository.modeshape.ModeShapeRepositoryConfigurator</value>
<key>org.modeshape.jcr.URL</key> <value>jndi:jcr/local?repositoryName=brms</value>
<key>org.drools.repository.secure.passwords</key><value>false</value>
<key>org.drools.repository.admin.password</key> <value>admin</value>
<key>org.drools.repository.mailman.password</key><value>mailman</value>
</property>
-->
</component>
<!-- SECURITY IDENTITY CONFIGURATION -->
<!--
default (will take any username, useful if you want to keep track of
users but not authenticate
<security:identity authenticate-method="#{defaultAuthenticator.authenticate}" />
-->
<!--
NO authentication. This will bypass the login screen when you hit the
app. Everyone is "guest"
-->
<security:identity
authenticate-method="#{nilAuthenticator.authenticate}"/>
<!--
FOR EXAMPLE: the following one will use the jaas configuration called
"other" - which in jboss AS means you can use properties files for
users:
<security:identity authenticate-method="#{authenticator.authenticate}"
jaas-config-name="other"/>
-->
<!--
as JAAS is used you can use container specific ones to link up to your
login services, eg LDAP/AD etc
-->
<!-- SECURITY AUTHORIZATION CONFIGURATION -->
<!--
This is used to enable or disable role-based authorization. By default
it is disabled.
-->
<component name="org.jboss.seam.security.roleBasedPermissionResolver">
<property name="enableRoleBasedAuthorization">false</property>
</component>
</components>