Custom Module is not called on User Login

[gtmbanerjee]

We have a custom login module configured for JAAS on JBoss AS 7.1.1.Final. When the user login the custom module is not called at all.

Do we need to add something to web.xml ?

The following configuration is done in standalone.xml

<security-realm name="ApplicationRealm">

                <authentication>

                    <jaas name="chorus-login-security"/>

                </authentication>

</security-realm>

<security-domain name="chorus-login-security" cache-type="default">

                    <authentication>

                        <login-module code="com.ca.mfui.chorusR2.common.security.ChorusLoginModule" flag="required"/>

                        <login-module code="org.jboss.security.auth.spi.UsersRolesLoginModule" flag="required">

                            <module-option name="usersProperties" value="${jboss.server.config.dir}/teiid-security-users.properties"/>

                            <module-option name="rolesProperties" value="${jboss.server.config.dir}/teiid-security-roles.properties"/>

                        </login-module>

                    </authentication>

</security-domain>

jboss-web.xml

<jboss-web>

     <security-domain>chorus-login-security</security-domain>

</jboss-web>

[robby.cornelissen]

If memory serves, you need to add a security-constraint element to your web.xml. Something like the following:

<security-constraint>

     <display-name>Security Constraint</display-name>

          <web-resource-collection>

                    <web-resource-name>Web Application</web-resource-name>

                    <url-pattern>/*</url-pattern>

          </web-resource-collection>

</security-constraint>

[gtmbanerjee]

I have added in web.xml, but the custom module ChorusLoginModule is not called. Please suggest a solution.

[gtmbanerjee]

We are still waiting for a solution. Can someone please suggest it.

[dlofthouse]

Can you post your full web.xml?

You say the login module is not getting called but is the user getting prompted for a username and password?

[ctomc]

Try enabling trace logging for

org.jboss.security and

org.jboss.as.security

it will show you more in detail what is going on.