Hello, First off, I think the way the jboss-web.xml's security-role config works is that it will add role A (where A specified by role-name element) to the principal B (where B specified by principal-name). What this means is that a user must authenticate as principal B then JBoss will add role A to there role set. You still need to authenticate principal B though. If you just want to do some testing you can use the IdentityLoginModule as described in Chapter 8 of the server guide.
Also, usually you do not need to use LoginContext.login(). This code is performed by JBoss's AuthenticationManager. let me know if you need more detail, cgriffith View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3923949#3923949 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3923949 ------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Do you grep through log files for problems? Stop! Download the new AJAX search engine that makes searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! http://sel.as-us.falkag.net/sel?cmd=lnk&kid=103432&bid=230486&dat=121642 _______________________________________________ JBoss-user mailing list JBoss-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/jboss-user
