Jonathan.O'[EMAIL PROTECTED] wrote:

Folks,
I'm attempting to add seurity to our application. When I use BASIC authentication it works fine.
However, when I used FORM based authentication, I get sent to the error page. The strange thing is that the session contains UserPrincipal attribute "org.mortbay.jetty.Auth containing the name of the person who logged in.

I've set the login-config.xml in conf to use two login modules, the first is ClientLoginModule, and the next is DatabaseServerLoginModule.
I've added a jboss-web.xml to my war's WEB-INF directory.
The web.xml has a <security-constraint> and <login-config> etc...

Is there something else I have to do over and above what I do for BASIC authentication for FORM based authentication to work?

Since apparently the user is accepted, perhaps you have not given the user the role needed to get access?

--
Thorbjørn Ravn Andersen Scandiatransplant
Skejby Sygehus, indgang 3
+45 89 49 53 01 DK-8200 Århus N
http://biobase.dk/~tra



-------------------------------------------------------
This sf.net email is sponsored by: Influence the future of Java(TM) technology. Join the Java Community Process(SM) (JCP(SM)) program now. http://ad.doubleclick.net/clk;4729346;7592162;s?http://www.sun.com/javavote
_______________________________________________
JBoss-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/jboss-user


Reply via email to