Problem login on jbpr JBoss 5.1.0

[fancoli]

Hello,

I have setup the web.xml

 <security-constraint>
 <web-resource-collection>
 <web-resource-name>HtmlAdaptor</web-resource-name>
 <description>An example security config that only allows users with the
 role JBossAdmin to access the HTML JMX console web application
 </description>
 <url-pattern>/*</url-pattern>
 <http-method>GET</http-method>
 <http-method>POST</http-method>
 </web-resource-collection>
 <auth-constraint>
 <role-name>MyJBossrole</role-name>
 </auth-constraint>
 </security-constraint>

 <login-config>
 <auth-method>BASIC</auth-method>
 <realm-name>JBoss JMX Console</realm-name>
 </login-config>

 <security-role>
 <role-name>MyJBossrole</role-name>
 </security-role>

and jboss-web.xml

<security-domain>java:/jaas/my-activedirectory</security-domain>

This works well for jmx-console, but in admin-console after the first login another login window appear with the specific jopr login...

Could you point me in the right direction ?

Thanks,
max

[ips]

Hi,

Did you make these updates to the jmx-console's web.xml/jboss-web.xml or to the admin-console's web.xml/jboss-web.xml?

[fancoli]

I made these updates to the admin-console's web.xml/jboss-web.xml

max

[ips]

The reason you're being authenticated twice is that the security constraints in the admin console war are defined via Seam, rather than in web.xml. Specifically, you'll see:

#{s:hasRole('JBossAdmin')}

twice in WEB-INF/pages.xml and once in include/resourceNavigation.xhtml. You should just need to remove the security constraint you added from web.xml and change these three references to:

#{s:hasRole('MyJBossrole')}

[fancoli]

Thanks,

I am going to try it.