I'm new to Geronimo (second build); so sorry if I'm missing something obvious. But, I think the build was broken yesterday with revision 157260. The signature changed in o.a.g.security.ConfigurationUtil.java, which broke ContainerSecurityBuilder.
It doesn't appear that ContainerSecurityBuilder is working correctly anyway (don't provide the correct login domain name). -Robert
