help with JAAS auth.conf

[ericl]

Hi,

I'm trying to get into JBoss security but am having trouble getting started.

I've written an 'auth.conf' file that looks like this:
client {
org.jboss.security.ClientLoginModule required
multi-threaded=false;
};

After an initial 'no conf found' exception, I've started launching my java app with -Djava.security.auth.login.config=auth.conf. This seems to make the system find my file, but results in the following exception:

java.lang.SecurityException: no protocol: auth.conf
at com.sun.security.auth.login.ConfigFile.getAppConfigurationEntry(ConfigFile.java:221)
at javax.security.auth.login.LoginContext.init(LoginContext.java:176)
at javax.security.auth.login.LoginContext.(LoginContext.java:393)
at com.hcm.vpm.tradeViewer.LoginModel.login(LoginModel.java:62)
at com.hcm.vpm.tradeViewer.LoginModel.handleActionEvent(LoginModel.java:107)
at com.hcm.formElement.model.AbstractModel$1.runImpl(AbstractModel.java:53)
at com.hcm.tools.thread.HcmThread.run(HcmThread.java:196)


I've checked the javadoc for the ConfigFile class, and (purchased and) read the JBoss security docs, but can't find anything that would help me get past this. Has anyone seen this exception before? Is there something wrong with my .conf file?

Thanks,
Eric

[linw88]

If you are using tomcat4/jboss3, it's not in suth.conf. Instead it's in login-config.xml.

Lin

[ericl]

Thanks for the help. It turns out that the problem is I'm using Java 1.3, and apparently needed to upgrade to Java 1.4. Your point about the JBoss config setup is helpful though as it gets at my next step, getting JAAS working on the server-side.


Thanks,
Eric