auth.conf vs. login-config.xml?

[ebdr]

Hi,

I am trying to understand the JAAS mechanism in JBoss and am confused about the use of the 2 files: auth.conf and login-config.xml. I gather that the auth.conf is used by the client while login-config.xml by the server. Do I need to specify my login mechanism in both places, or only when my client is not in the same JVM?

Could someone explain this or point me to some good doc.

Thank you very much,

Eric

[wdrai]

"wdrai" wrote:
login-config.xml is used for all JAAS logins inside the Jboss VM, even in servlets.
If you need to use JAAS outside of the JBoss VM, it will use the default JAAS configuration mechanism, which relies on the auth.conf file (which should be on the client classpath).
So you don't need to modify the auth.conf if you just use servlets/EJB in the same VM.

[ebdr]

thank you!