auth.conf is not a standard file. If you use it, some component must read it 
and make a JAAS configuration object out of it. JBoss' DynamicLoginConfig can 
do that for example. So for the moment do it in login-config.xml.

Oh and the correct use of the multi-threaded option is:

  | <application-policy name="http">
  |        <authentication>
  |           <login-module code = "org.jboss.security.ClientLoginModule"
  |                                 flag = "required">
  |               <module-option name="multi-threaded">true</module-option>
  |           </login-module>
  |        </authentication>
  | </application-policy>
  | 

Instead of disabling it, you can also include both login modules as required in 
the http policy:


  | <application-policy name="http">
  |        <authentication>
  |         <login-module 
code="org.jboss.security.auth.spi.DatabaseServerLoginModule" flag="required">
  |                         <module-option 
name="dsJndiName">java:/MySqlDS</module-option>
  |                             <module-option name="principalsQuery">SELECT 
wachtwoord FROM gebruiker WHERE gebruikersnaam=?</module-option>
  |                             <module-option name="rolesQuery">SELECT 
gebruiker_type,'Roles' FROM gebruiker WHERE gebruikersnaam=?</module-option>
  |                             <module-option 
name="hashAlgorithm">MD5</module-option>
  |                     <module-option 
name="hashEncoding">BASE64</module-option>
  |           </login-module>
  |           <login-module code = "org.jboss.security.ClientLoginModule"
  |                                 flag = "required">
  |               <module-option name="multi-threaded">true</module-option>
  |           </login-module>
  |        </authentication>
  | </application-policy>
  | 

View the original post : 
http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3908398#3908398

Reply to the post : 
http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3908398


-------------------------------------------------------
This SF.Net email is sponsored by the JBoss Inc.  Get Certified Today
Register for a JBoss Training Course.  Free Certification Exam
for All Training Attendees Through End of 2005. For more info visit:
http://ads.osdn.com/?ad_id=7628&alloc_id=16845&op=click
_______________________________________________
JBoss-user mailing list
JBoss-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/jboss-user

Reply via email to