No login available for security service

[themadhatter]

Windows 2003 SP1 (Popup blocker off), j2sdk1.4.2_11, JRE Std Ed 1.5.0_07-b03, JBoss 4.0.4 GA

I enabled security service for the jmx-console, but I never get prompted for a login. So when I try to access the jmx-console, I get:

--------------------------------------------------------------------------------
"HTTP Status 403 - Access to the requested resource has been denied
type Status report
message Access to the requested resource has been denied
description Access to the specified resource (Access to the requested resource has been denied) has been forbidden."
Apache Tomcat/5.5.17
--------------------------------------------------------------------------------

I followed the "Quick Tour" documentation for securing the jmx-console:
1) deploy\jmx-console.war\WEB-INF\jboss-web.xml
I uncommented: <security-domain>java:/jaas/jmx-console</security-domain>

2) deploy\jmx-console.war\WEB-INF\web.xml
I uncommented the securityconstraint section.

3) deploy\jmx-console.war\WEB-INF\classes\jmx-console-roles.properties
myuser=JBossAdmin,HttpInvoker

4) deploy\jmx-console.war\WEB-INF\classes\jmx-console-roles.properties
myuser=password

What do I need to do to get the login?

Thanks!

[tanguy_belot]

I have the same issue ... if you find something
let me know

[jaikiran]

Have a look at:

http://wiki.jboss.org/wiki/Wiki.jsp?page=SecureTheJmxConsole

[hebol]

In the Wiki I found the reference:

vi $JBOSS_HOME/server/default/deploy/jmx-console.war/WEB-INF/web.xml
uncomment the security-constraint block
and add a <login-config> block after the end of the <security-constraint> block:

<login-config>
<auth-method>BASIC</auth-method>
<realm-name>jmx-console</realm-name>
</login-config>

Note! It should be after the <security-constraint> block.
And FINALLY I managed to get a simple BASIC authentication login from my browser.

/Martin