We're having problems securing a webapp. When accessing a secure page,
we get the following log message:

18:19:42,894 WARN  [Jetty] WARNING: Mis-configured Authenticator for
[...]

Earlier during the deployment we are getting:

18:15:29,978 WARN  [Jetty] WARNING: No Realm set for
JBossWebApplicationContext$JBossSXSecurityHandler in
WebApplicationContext[/,Lecando Server WebApp]

which is confusing since realms should only be set för BASIC
authentication.

We are using FORM based authentication. These are our config files:

----
jboss-web.xml

?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE jboss-web PUBLIC "-//JBoss//DTD Web Application 2.3//EN"
"http://www.jboss.org/j2ee/dtds/jboss-web_3_0.dtd";>
<jboss-web>
   <security-domain>java:/jaas/lecando-realm</security-domain>
</jboss-web>

----
login-config.xml:

?xml version="1.0" encoding="UTF-8"?>
<policy>

    [Default realms removed for brevity]

    <application-policy name = "lecando-realm">
        <authentication>
            <login-module code =
"org.jboss.security.auth.spi.UsersRolesLoginModule" flag = "requisite"/>
        </authentication>
    </application-policy>
</policy>


----
users.properties:

marcus=aaa


----
oles.properties:

marcus=LecandoServerUser


Any help greatly appreciated, we've been at this for quite some time
now. /Marcus

-- 
Marcus Ahnve                          email: [EMAIL PROTECTED]
Lecando AB                            Office: +46-(0)8-634 94 18
Sweden                                Mobile: +46-(0)70-462 19 18
www.lecando.com                       ICQ#: 4564879

PGP: 891C 2F84 7CA2 F9F7 9B87 EC2F D93B 961B 4441 9BA2
 B941 DB1A




-------------------------------------------------------
Sponsored by:
ThinkGeek at http://www.ThinkGeek.com/
_______________________________________________
JBoss-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/jboss-user

Reply via email to