3 Replies Latest reply on Mar 21, 2004 7:20 AM by adrian.brock

    Configure basic security. SecurityException.

    anandkasi

      Hi All,
      I am a jboss newbie and need to a simple username/password challenge to pop up when someone accesses my web app deployed on jboss. I was looking at UsersRolesLoginModule. I am using jboss-3.2.3 with jetty-4.2.14.
      All I did was the following 3 things.

      1) server/MyServer/conf/login-conf.xml

      Code:

      <?xml version='1.0'?>
      <!DOCTYPE policy PUBLIC
      "-//JBoss//DTD JBOSS Security Config 3.0//EN"
      "http://www.jboss.org/j2ee/dtd/security_config.dtd">

      <application-policy name = "myUsersRolesModule">

      <login-module code="org.jboss.security.auth.spi.UsersRolesLoginModule"
      flag = "true" >
      <module-option name="hashAlgorithm">MD5</module-option>
      </login-module>

      </application-policy>





      2) Create a users.properties file in the conf folder with the following entry.
      anand=kasi.

      3) Create a roles.properties file in the conf folder with the following entry
      anand=admin

      When Jboss starts up, I get the following exception.


      22:15:35,255 ERROR [PersistenceManager] Starting failed
      java.lang.SecurityException: Invalid authentication attempt, principal=null
      at org.jboss.resource.connectionmanager.BaseConnectionManager2.getSubjec
      t(BaseConnectionManager2.java:647)
      at org.jboss.resource.connectionmanager.BaseConnectionManager2.allocateC
      onnection(BaseConnectionManager2.java:476)

      Where do I set the principal. Is that the same as username????
      What am I not doing or doing wrong?? Any suggestions/pointers are highly appreciated. Any alternate solutions?? The simpler the better.

      Regards.
      Andy.