Why is auth.conf-other always called

[jochenriekhof]

I now continued trying to activate DatabaseServerLoginModule authentication. Only after I built my own LoginModule based on the above with additional debug output I figured out that the "other"-config-section is performed in ADDITION to my own one. This means, of course, that authentication always fails. I removed some old users/roles.properties from my deploy.jar and - JBoss UsersRolesLoginModule even crashed with "file not found". Now I brute-force replaced the other entry content with my login-config and it works (my module is called twice this way, though). Can anybody explain this? Or is this a bug?

[kashpaw]

U probably have a typ0 somewhere. R u specifying the security domain string properly in the LoginContext constructor? Does that string match what you specified in the security-domain tag in the jboss.xml?

[starksm64]

The other configuration is not performed in addition, it is performed when the name passed to the LoginContext does not match any other configuration entry.

[jochenriekhof]

Hmmm, the tag in the config "myentry" is identical to the one in jboss.xml (<security-domain>java:/jaas/myentry</security-domain>). The Client-side name "myentry" passed to LoginContext should not matter, but it is the same, too. Also, as I described, the DatabaseServerLoginModule (which is configured ONLY in my config) IS called, (so the name is found) as I get the debug info in jboss-console. But after this the "other"-Config with it's UsersRolesLoginModule is called IN ADDITION, this one fails and so the overall authentication fails. Weird?!

[starksm64]

Then post your auth.conf

[jochenriekhof]

Here is my auth.conf: (removed comments)
simple {
org.jboss.security.auth.spi.SimpleServerLoginModule required;
};

client-login {
org.jboss.security.ClientLoginModule required;
};

myentry {
org.jboss.security.auth.spi.DatabaseServerLoginModule required
dsJndiName="java:/OraConn"
principalsQuery="select Password from Principals where PrincipalID=?"
rolesQuery="select Role, RoleGroup from Roles where PrincipalID=?"
;
};

other {
org.jboss.security.auth.spi.UsersRolesLoginModule required;
};