Jboss is always using UserRolesLoginModule instead of Client

[ssiebel]

Hi,

i'm currently trying to use the ClientLoginModule in Jboss 4.2.1 in a JSF based WebApp.

I'm passing -Djava.security.auth.login.config==C:/auth.conf to the VM when starting the jboss app server.

auth.conf looks like this:

mylogin {
 org.jboss.security.ClientLoginModule required;
};

In my login Bean i'm creating a new login context like this:

final CallbackHandler cbHandler = new MyCallBackHandler(username, password.toCharArray(), clientId);
LoginContext loginContext = new LoginContext("mylogin", cbHandler);
loginContext.login();

The last line produces this error output on the console:

10:04:18,466 ERROR [UsersRolesLoginModule] Failed to load users/passwords/role files
java.io.IOException: No properties file: users.properties or defaults: defaultUsers.properties found
 at org.jboss.security.auth.spi.Util.loadProperties(Util.java:315)
 at org.jboss.security.auth.spi.UsersRolesLoginModule.loadUsers(UsersRolesLoginModule.java:186)
 at org.jboss.security.auth.spi.UsersRolesLoginModule.createUsers(UsersRolesLoginModule.java:200)
 at org.jboss.security.auth.spi.UsersRolesLoginModule.initialize(UsersRolesLoginModule.java:127)
 at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
 at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
 at java.lang.reflect.Method.invoke(Unknown Source)
 at javax.security.auth.login.LoginContext.invoke(Unknown Source)
 at javax.security.auth.login.LoginContext.access$000(Unknown Source)
 at javax.security.auth.login.LoginContext$4.run(Unknown Source)
 at java.security.AccessController.doPrivileged(Native Method)
 at javax.security.auth.login.LoginContext.invokePriv(Unknown Source)
 at javax.security.auth.login.LoginContext.login(Unknown Source)

(...)

Can somebody help me with this? I read quite a lot of documentation and tutorials about that topic since yesterday but somehow don't get the point...

br,
Stefan

[ssiebel]

ok, i solved it. the solution is quite project specific, so that it is not useful to post here...

br,
Stefan.

[saleem.khan]

Hi,

You put the users.properties and roles.properties file in your web application classes folder.

users.properties will contain entries like
<user name>=

and roles.properties will look like
<user name>=Authenticated

The same user entry must be in users_en.propertries file which is in the entity management jar file.

This will solve your problem.

Saleem

[bensonfungjava]

Hi, ssiebel,

I got the same problem as you have. Could you tell me how to fix it?

My email is [e-mail]. It really makes me crazy.


Thanks
Benson

[ssiebel]

Hello bensonfungjava,

sorry for the late answer. As i mentioned above the solution is quite project specific and might not help you much.
Our application is deployed as an EAR. the jsf project is part of that ear as well as the auth-module. so the only thing i had to do is to reference this auth-module when creating the logincontext.

a very good article about integrating JSF with JAAS you can find here:
http://weblogs.java.net/blog/edburns/archive/2006/03/repost_using_ja.html

hope that helps! good luck!