Folks,
I'm attempting to add security to our application. We are using Jetty and 
JBoss 3.0.3 When I use BASIC authentication it works fine. DIGEST 
authentication doesn't work either.
However, when I used FORM based authentication, after I enter the username 
and password, I get sent to the error page. However, when I give the 
correct name and password, the session contains a UserPrincipal attribute 
"org.mortbay.jetty.Auth" containing the name of the person who logged in.

I've set the login-config.xml in conf to use two login modules, the first 
is ClientLoginModule, and the next is DatabaseServerLoginModule.
I've added a jboss-web.xml to my war's WEB-INF directory.
The web.xml has a <security-constraint> and <login-config> etc...

Is there something else I have to do over and above what I do for BASIC 
authentication for FORM based authentication to work?
Ciao,
Jonathan O'Connor
Ph: +353 1 872 3305
Mob: +353 86 824 9736
Fax: +353 1 873 3612


-------------------------------------------------------
This sf.net emial is sponsored by: Influence the future 
of Java(TM) technology. Join the Java Community 
Process(SM) (JCP(SM)) program now. 
http://ads.sourceforge.net/cgi-bin/redirect.pl?sunm0002en
_______________________________________________
JBoss-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/jboss-user

Reply via email to