Hello jaikiran, Thnx for helping me with the debugging.....I managed to get the logs...Wat i fail to understand is why is the user role not assigned to the principal ??
| | 20:01:05,265 TRACE [jaastest] Begin isValid, principal:admin, cache info: null | 20:01:05,265 TRACE [jaastest] defaultLogin, principal=admin | 20:01:05,265 TRACE [XMLLoginConfigImpl] Begin getAppConfigurationEntry(jaastest), size=10 | 20:01:05,265 TRACE [XMLLoginConfigImpl] End getAppConfigurationEntry(jaastest), authInfo=AppConfigurationEntry[]: | [0] | LoginModule Class: org.jboss.security.auth.spi.DatabaseServerLoginModule | ControlFlag: LoginModuleControlFlag: required | Options:name=rolesProperties, value=SELECT role from roles where principalId=? | name=usersProperties, value=SELECT password for principals WHERE principalId=? | name=dsJndiName, value=java:/jaastestDatasource | | 20:01:05,265 DEBUG [WebappClassLoader] loadClass(org.jboss.security.auth.spi.DatabaseServerLoginModule, false) | 20:01:05,265 DEBUG [WebappClassLoader] Searching local repositories | 20:01:05,265 DEBUG [WebappClassLoader] findClass(org.jboss.security.auth.spi.DatabaseServerLoginModule) | 20:01:05,265 DEBUG [WebappClassLoader] Delegating to parent classloader at end: [EMAIL PROTECTED] | 20:01:05,265 DEBUG [WebappClassLoader] Loading class from parent | 20:01:05,265 DEBUG [WebappClassLoader] loadClass(org.jboss.util.naming.NonSerializableFactory, false) | 20:01:05,265 DEBUG [WebappClassLoader] Searching local repositories | 20:01:05,265 DEBUG [WebappClassLoader] findClass(org.jboss.util.naming.NonSerializableFactory) | 20:01:05,265 DEBUG [WebappClassLoader] Delegating to parent classloader at end: [EMAIL PROTECTED] | 20:01:05,265 DEBUG [WebappClassLoader] Loading class from parent | 20:01:05,281 TRACE [jaastest] defaultLogin, [EMAIL PROTECTED], subject=Subject(18693899)[EMAIL PROTECTED](admin)[EMAIL PROTECTED](Admin(members:Admin)) | 20:01:05,281 TRACE [jaastest] updateCache, inputSubject=Subject(18693899)[EMAIL PROTECTED](admin)[EMAIL PROTECTED](Admin(members:Admin)), cacheSubject=Subject(18223014)[EMAIL PROTECTED](admin)[EMAIL PROTECTED](Admin(members:Admin)) | 20:01:05,281 TRACE [jaastest] Inserted cache info: [EMAIL PROTECTED](18223014)[EMAIL PROTECTED](admin)[EMAIL PROTECTED](Admin(members:Admin)),[EMAIL PROTECTED],expirationTime=1162571435218] | 20:01:05,281 TRACE [jaastest] End isValid, true | 20:01:05,281 TRACE [JBossSecurityMgrRealm] User: admin is authenticated | 20:01:05,281 TRACE [SecurityAssociation] pushSubjectContext, subject=Subject: | Principal: admin | Principal: Admin(members:Admin) | , [EMAIL PROTECTED],subject=19247740} | 20:01:05,281 TRACE [jaastest] getPrincipal, cache info: [EMAIL PROTECTED](18223014)[EMAIL PROTECTED](admin)[EMAIL PROTECTED](Admin(members:Admin)),[EMAIL PROTECTED],expirationTime=1162571435218] | 20:01:05,281 TRACE [JBossSecurityMgrRealm] Mapped from input principal: adminto: admin | 20:01:05,281 TRACE [SecurityAssociation] getSubject, [EMAIL PROTECTED],subject=19247740} | 20:01:05,281 TRACE [jaastest] getUserRoles, subject: Subject: | Principal: admin | Principal: Admin(members:Admin) | | 20:01:05,281 TRACE [JBossSecurityMgrRealm] End authenticate, principal=GenericPrincipal[admin()] | 20:01:05,281 DEBUG [AuthenticatorBase] Authenticated 'admin' with type 'BASIC' | 20:01:05,281 DEBUG [AuthenticatorBase] Calling accessControl() | 20:01:05,281 TRACE [JBossSecurityMgrRealm] Checking roles GenericPrincipal[admin()] | 20:01:05,281 DEBUG [RealmBase] Username admin does NOT have role user | 20:01:05,281 TRACE [JBossSecurityMgrRealm] No role found: user | 20:01:05,281 TRACE [JBossSecurityMgrRealm] Checking for all roles mode: authOnly | 20:01:05,281 DEBUG [AuthenticatorBase] Failed accessControl() test | 20:01:05,281 TRACE [SecurityAssociation] clear, server=true | | Is something missing in my configs, bcoz the correct user seams to be authenticated .....its only the user role which is not being found ?? Thnx in advance. Regards, Jankee Yogesh http://www.m-itc.net View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3983009#3983009 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3983009 _______________________________________________ jboss-user mailing list jboss-user@lists.jboss.org https://lists.jboss.org/mailman/listinfo/jboss-user