I'am migrating in application from JBoss 4.2.3.GA to JBoss 5.1.0.GA
I have added a security-jboss-bean.xml to my application ear: (this used to be in the login-config.xml)
<?xml version="1.0" encoding="UTF-8"?>
<deployment xmlns="urn:jboss:bean-deployer:2.0">
<application-policy xmlns="urn:jboss:security-beans:1.0"
name="newsgateway-web">
<authentication>
<login-module code="org.jboss.security.auth.spi.DatabaseServerLoginModule"
flag="required">
<module-option name="dsJndiName">java:/DefaultDS</module-option>
<module-option name="principalsQuery">SELECT passwd FROM USERS WHERE
username=?</module-option>
<module-option name="rolesQuery">SELECT userRoles, 'Roles' FROM
ROLES where username=?</module-option>
<module-option name="hashAlgorithm">MD5</module-option>
<module-option name="hashEncoding">rfc2617</module-option>
<module-option name="hashUserPassword">false</module-option>
<module-option name="hashStorePassword">true</module-option>
<module-option name="passwordIsA1Hash">true</module-option>
<module-option name="storeDigestCallback">org.jboss.security.auth.spi.RFC2617Digest
</module-option>
</login-module>
</authentication>
</application-policy>
</deployment>
It is deployed well, the log statements show the DatabaseServerLoginModule is loaded well - it caches the added users & roles. And the bean shows up in the jmx-console
There is a war file in the ear that contains the
security-constraint, using the
newsgateway-web But when I try to login I get the following exception:
2009-10-15 12:56:59,867 TRACE [org.jboss.security.auth.spi.DatabaseServerLoginModule] (http-localhost%2F127.0.0.1-8080-1) Failed to load DigestCallback
java.lang.ClassNotFoundException: org.jboss.security.auth.spi.RFC2617Digest
In JBoss 4.2.3.GA the RFC2617Digest class was contained
JBossSX.jar but it is moved to
jbosssx-server.jar and still in the classpath (at least that shows the
boot.log What am I doing wrong?
