I have found a guide on a Scottish University site. They confirm that classes is the right directory in my war file. I have also tried using the conf directory for the users.properties and roles.properties, tried specifying my properties file names in login-config as well but no joy. I have tried using BASIC but again it doesn't recognise my password. Two and a half days of zero productivity and starting to give up hope - has anyone ever got org.jboss.security.auth.spi.UsersRolesLoginModule to work?!
A resource means visible to the thread context class loader of the UsersRolesLoginModule user. Use unique properties names to avoid finding the wrong properties file as is illustrated by the jmx-console config:
<application-policy name = "jmx-console"> <authentication> <login-module code="org.jboss.security.auth.spi.UsersRolesLoginModule" flag = "required"> <module-option name="usersProperties">jmx-console-users.properties</module-option> <module-option name="rolesProperties">jmx-console-roles.properties</module-option> </login-module> </authentication> </application-policy>
Excellent Scott - yes, that's what it was, works fine now - phew!