[jboss-user] [Security & JAAS/JBoss] - Re: Error 403 when using DatabaseServerLoginModule

[jaikiran]

You mentioned, your web.xml contains:

<security-constraint>
  | 		<web-resource-collection>
  | 			<web-resource-name>All resources</web-resource-name>
  | 			<description>Protects all resources</description>
  | 			<url-pattern>/*</url-pattern>
  | 		</web-resource-collection>
  | 		<auth-constraint>
  | 			<role-name>Admin</role-name>
  | 		</auth-constraint>
  | 	</security-constraint>
  |    
  | 	<security-role>
  | 		<role-name>Admin</role-name>
  | 	</security-role>
  | 	
  | 	<security-role>
  | 		<role-name>User</role-name>
  | 	</security-role>
  |       
  | 	<login-config>
  | 		<auth-method>BASIC</auth-method>
  | 		<realm-name>JaasTestRealm</realm-name>
  | 	</login-config>    

Is this exactly what your web.xml contains? The security-role elements should be after the login-config element in the web.xml  as per the dtd.


View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3983209#3983209

Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3983209