Authentication Files

giscard_aioba Sep 7, 2005 1:24 PM

Hi guys, I'm with a little problems when try to use security in JBoss.....

Where I put the realm file with the users, password and roles (xml file) into JBoss?!?!?
I really would like know in which dd I point to this file??!!? web.xml or jboss-web.xml?!?!

ps: If someone can point me an example will be helpful too....

Thanks

1. Re: Authentication Files

brian.stansberry Sep 7, 2005 1:38 PM (in response to giscard_aioba)

They need to be separate files; not part of any dd.

They need to be on the webapp's classpath; I've seen them put in WEB-INF/classes. This allows them to be hot deployed with the webapp. They can also go in the /server/.../conf folder.

Give the files a unique, app-specific name --- don't just call them users.properties and roles.properties.

For an example, see the $JBOSS_HOME/server/default/conf/login-config.xml file, the "web-console" application policy. If you then look in the deploy/management/console-mgr.sar/web-console.war you can see the files in WEB-INF/classes.
Actions