I was just able to configure Jboss and JAAS successfully. When I visit a authentication-required page it automatically asks for my userid and password. I fill in the userid and password and I'm now able to access the restricted pages.

However when I go back to the same page, it asks again for the userid and password. I'm just a newbie and I'm not sure how to bypass the reauthentication.

Thanks.
PS. I'm pasting my web.xml config just in case


<security-constraint>
<web-resource-collection>
<web-resource-name>Secure Content</web-resource-name>
<url-pattern>/pages/secured/*</url-pattern>
</web-resource-collection>
<auth-constraint>
<role-name>*</role-name>
</auth-constraint>
</security-constraint>

<login-config>
<auth-method>FORM</auth-method>
<form-login-config>
<form-login-page>/pages/test2.jsp</form-login-page>
<form-error-page>/logoff.do</form-error-page>
</form-login-config>
</login-config>