3 Replies Latest reply on Aug 3, 2002 1:03 PM by Dmitry

    Tomcat4.0 + JBoss3.0 : Authentication not working

    Peter Luttrell Newbie

      I'm using the JBoss 3.0.0 + Tomcat 4.0.2 release that was posted to the sourceforge download page on 2002-02-22.

      I have a small webapp that uses form based authenication. The problem is that no matter what user name/password I put in (even undefinded ones), authentication allways succeeds! Furthermore it is as though the logged in user has all roles.

      I have tested the app with just the Tomcat 4.0.3 distribution (seperate download) and it works perfectly - that is only valid users get through. It's a test app, and thus I'm just using the MemoryRealm and setup a couple of users in the conf/tomcat-users.xml file.

      Does anyone have any ideas as to why it doesn't work with the JBoss + Tomcat distribution? I have not changed anything in either configuration, other then to add the users I want to the tomcat-users.xml file.