2 Replies Latest reply on May 30, 2007 12:14 PM by Seet Nick

    HTTP Status 403 - Configuration error: Cannot perform access

    Seet Nick Newbie

      Hi all,

      Just started with JBoss Userguide, as i follow closely up to chapter 2 Security Service and i modified all the required file as follows

      jboss-web
      -----------
      <jboss-web>
      <security-domain>java:/jaas/jmx-console</security-domain>
      </jboss-web>

      web.xml
      ---------
      <security-constraint>
      <web-resource-collection>
      <web-resource-name>HtmlAdaptor</web-resource-name>
      An example security config that only allows users with the
      role JBossAdmin to access the HTML JMX console web application

      <url-pattern>/*</url-pattern>
      <http-method>GET</http-method>
      <http-method>POST</http-method>
      </web-resource-collection>
      <auth-constraint>
      <role-name>JBossAdmin</role-name>
      </auth-constraint>
      </security-constraint>

      <!-- <security-constraint>
      <web-resource-collection>
      <web-resource-name>Public</web-resource-name>
      <url-pattern>/public/*</url-pattern>
      <http-method>GET</http-method>
      <http-method>POST</http-method>
      </web-resource-collection>
      </security-constraint> -->

      <security-role>
      <role-name>JBossAdmin</role-name>
      </security-role>

      login-config.xml
      ------------------
      <application-policy name = "jmx-console">

      <login-module code="org.jboss.security.auth.spi.UsersRolesLoginModule"
      flag = "required">
      <module-option name="usersProperties">props/jmx-console-users.properties</module-option>
      <module-option name="rolesProperties">props/jmx-console-roles.properties</module-option>
      </login-module>

      </application-policy>


      jmx-console-users.properties
      ----------------------------------
      testuser=admin2

      jmx-console-roles.properties
      ---------------------------------
      testuser=JBossAdmin

      But i still getting the error shown above.

      Please help... Thanks in advance.

      Regards,
      Nick