Hi,

I have a Custom LoginModule that works fine with authentication in EJBs with Remote Communication in JBoss 6.

But it doesn't work when I use it in a web application.

I can see the following in the logfile:

08:54:18,206 DEBUG [org.apache.catalina.authenticator.AuthenticatorBase] @ Security checking request POST /proshop/admin/j_security_check 08:54:18,206 DEBUG [org.apache.catalina.authenticator.FormAuthenticator] @ Authenticating username 'mabe' 08:54:18,222 DEBUG [org.apache.catalina.core.ContainerBase.[jboss.web].[localhost].[/proshop].[FacesServlet]] @  Disabling the response for futher output 08:54:18,222 DEBUG [org.apache.catalina.core.ContainerBase.[jboss.web].[localhost].[/proshop].[FacesServlet]] @  The Response is vehiculed using a wrapper: org.apache.catalina.connector.Response 08:54:18,222 DEBUG [org.apache.catalina.authenticator.AuthenticatorBase] @  Failed authenticate() test ??/proshop/admin/j_security_check 08:54:18,242 DEBUG [org.apache.catalina.authenticator.AuthenticatorBase] @ Security checking request GET /proshop/javax.faces.resource/theme.css.jsf 08:54:18,242 DEBUG [org.apache.catalina.realm.RealmBase] @   Checking constraint 'SecurityConstraint[proshop]' against GET /javax.faces.resource/theme.css.jsf --> false 08:54:18,242 DEBUG [org.apache.catalina.realm.RealmBase] @   Checking constraint 'SecurityConstraint[proshop]' against GET /javax.faces.resource/theme.css.jsf --> false 08:54:18,242 DEBUG [org.apache.catalina.realm.RealmBase] @   Checking constraint 'SecurityConstraint[proshop]' against GET /javax.faces.resource/theme.css.jsf --> false 08:54:18,242 DEBUG [org.apache.catalina.realm.RealmBase] @   Checking constraint 'SecurityConstraint[proshop]' against GET /javax.faces.resource/theme.css.jsf --> false 08:54:18,242 DEBUG [org.apache.catalina.realm.RealmBase] @   No applicable constraint located 08:54:18,242 DEBUG [org.apache.catalina.authenticator.AuthenticatorBase] @  Not subject to any constraint

Whe I use the jmx-console Loginmodule it works. So it must be a problem with the custom LoginModule.

Ist there a way to have more trace output from the security mechanism in JBoss?

Thanks Simon