After rebooting(*), the server behaved as it should.
(*) This is on Win2k. I only rebooted, because Explorer was crashing and the task bar disapeared completely along with the icons on the desktop.
Placing the properties files in the conf directory will work. However, if there are multiple users of the UsersRolesLoginModule and they are all using the same properties file names, you can end up looking at another set of properties files if the deployment containing these files is not scoped. Its best to ensure unique names using the usersProperties and rolesProperties options:
<application-policy name = "jmx-console"> <authentication> <login-module code="org.jboss.security.auth.spi.UsersRolesLoginModule" flag = "required"> <module-option name="usersProperties">jmx-console-users.properties</module-option> <module-option name="rolesProperties">jmx-console-roles.properties</module-option> </login-module> </authentication> </application-policy>
Just a side issue. I just installed 3.2.5 and found that server\default\deploy\http-invoker.sar\invoker.war\WEB-INF\classes contains users.properties and roles.properties files so that just putting then into conf no longer works!