Authentication Example (.war, .ear, .jar) - JBoss 3.0/Catali

[jmejia424]

Please HELP!

I am so lost and need some direction. I can't even get Catalina to force authentication on my Web App.

I have a SQL Server Database where my users are being held with password. I would love to have the browser prompt for authentication and then pass that authentication all the way through to JBoss.

Can anyone please give me steps on what files I need to modify and how in order to accomplish this?

I know this is a very common request among web-apps and ejb servers. However, I can't find any example that will walk me through the whole process.

Right now, my web.xml looks like this:

<security-constraint>
<web-resource-collection>
<web-resource-name>ApiaTech - RNMS</web-resource-name>
<url-pattern>/rnms/*</url-pattern>
</web-resource-collection>

<auth-constraint>
<role-name>tomcat</role-name>
</auth-constraint>
</security-constraint>

<login-config>
<auth-method>FORM</auth-method>
<form-login-config>
<form-login-page>/logon.jsp</form-login-page>
<form-error-page>/failed.jsp</form-error-page>
</form-login-config>
</login-config>

Like I said, it doesn't even go to my logon.jsp page. Where else do I have to do configurations?

[dudoes]

This is my Web.xml, I can activate login.jsp.

-----------------------

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE web-app PUBLIC "-//Sun Microsystems, Inc.//DTD Web Application 2.2//EN" "http://java.sun.com/j2ee/dtds/web-app_2_2.dtd">
<web-app>
<security-constraint>
<web-resource-collection>
<web-resource-name>DG</web-resource-name>
Security Constraint
<url-pattern>index.jsp</url-pattern>
<http-method>GET</http-method>
<http-method>POST</http-method>
</web-resource-collection>
<auth-constraint>
<role-name>Manager</role-name>
</auth-constraint>
<user-data-constraint>
<transport-guarantee>NONE</transport-guarantee>
</user-data-constraint>
</security-constraint>
<login-config>
<auth-method>FORM</auth-method>
<form-login-config>
<form-login-page>/Login.jsp</form-login-page>
<form-error-page>/LoginError.jsp</form-error-page>
</form-login-config>
</login-config>
<security-role>
<role-name>Manager</role-name>
</security-role>
</web-app>
---------------------------



I hope it useful for u.