Configuring authentication using UsersRolesLoginModule

[randahl]

I am trying to get authentication to work on JBoss 3.0.2. I would like to use the UsersRolesLoginModule, so I have put a users.properties and roles.properties into my conf folder. I have also configured my web application as shown at the end of this e-mail. However, I keep getting the following error:



11:51:10,003 WARN [jbossweb] WARNING: Mis-configured Authenticator for /restricted



This happens when trying to access /restricted/ of my web app



Any help would be very much appreciated. Thanks.





Randahl









From jboss-web.xml



<?xml version="1.0"?>

<jboss-web>

<!-- All secured web content uses this security manager -->

<security-domain>java:/jaas/myDomain</security-domain>

</jboss-web>



From login-config.xml



<application-policy name = "myDomain">



<login-module code = "org.jboss.security.auth.spi.UsersRolesLoginModule" flag = "required"/>



</application-policy>



From web.xml



<security-constraint>

<web-resource-collection>

<web-resource-name>Secure Content</web-resource-name>

<url-pattern>/restricted/*</url-pattern>

</web-resource-collection>

<auth-constraint>

<role-name>Administrator</role-name>

</auth-constraint>

</security-constraint>



<security-role>

<role-name>Administrator</role-name>

</security-role>

[kiuma]

Post your web.xml jboss-web.xml and auth roles.properties

[kiuma]

Oops only roles.properties

[randahl]

Thanks, but just now I found out about the problem.

I would have liked JBoss to show a more explicit error message - it is always difficult to debug from messages which just state that somewhere something is somehow wrong. Anyway, through experimenting with different configurations it turned out that I had to specify a login-config in web.xml - Added the following:


<login-config>

<auth-method>BASIC</auth-method>

<realm-name>other</realm-name>

</login-config>

Randahl