Hi Christopher, This is no an issue with locating jaas.config. I've set it in java options as -Djava.security.auth.login.config=C:\Program Files\Apache Software Foundation\Tomcat 9.0\conf\jaas.config I also tested changing a file that do not exist and I got the FileNotFound exception so it is not the issue with jaas.config.
>From the code what I read is that JAASMemoryLoginModule pathname still using the default value (conf/tomcat-users.xml), Tomcat is running on Windows so not sure why pathname is conf/tomcat-users.xml). See the line below in the code that log this warning message. https://github.com/apache/tomcat/blob/trunk/java/org/apache/catalina/realm/JAASMemoryLoginModule.java#L384 see attached log file. All the JVM arguments in the log are correct. Thanks, PJ On Thu, Jan 3, 2019 at 6:55 AM Christopher Schultz < ch...@christopherschultz.net> wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA256 > > PJ, > > On 1/2/19 22:15, PJ Pillai wrote: > > Here is additional information. 1. Tomcat is running on Windows > > 2016 server. 2. Tomcat is started as windows service. > > > > I tried Tomcat 8.5 as well and still get the same warning message > > and user is not authenticated. > > Did you copy all your system properties from your Tomcat 6 service to > your Tomcat 9 service? Look in thew "JVM Parameters" (or whatever) > section of the Tomcat service manager (tomcat9w.exe). > > Tomcat needs to know where the JAAS config file is, and that's done > through a system property. If that property wasn't copied from the old > service, it probably won't work. > > - -chris > > > On Wed, Jan 2, 2019 at 5:00 PM PJ Pillai <pjpil...@gmail.com> > > wrote: > > > >> Hi, > >> > >> > >> I'm using JAASMemoryLoginModule to authenticate users stored in > >> tomcat-users.xml. The authentication fails on Tomcat 9 with > >> following warning message in catalina.xx.log. > >> > >> org.apache.catalina.realm.JAASMemoryLoginModule.load Unable to > >> determine Catalina base to load file [conf/tomcat-users.xml] > >> > >> > >> Here is a stack trace from the web application: > >> > >> javax.security.auth.login.FailedLoginException: User name or > >> password is incorrect at > >> org.apache.catalina.realm.JAASMemoryLoginModule.login(JAASMemoryLogin > Module.java:350) > >> > >> > at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) > >> at > >> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl. > java:62) > >> > >> > at > >> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAcces > sorImpl.java:43) > >> > >> > at java.lang.reflect.Method.invoke(Method.java:483) > >> at > >> javax.security.auth.login.LoginContext.invoke(LoginContext.java:755) > >> > >> > at javax.security.auth.login.LoginContext.access$000(LoginContext.java:1 > 95) > >> at > >> javax.security.auth.login.LoginContext$4.run(LoginContext.java:682) > >> > >> > at javax.security.auth.login.LoginContext$4.run(LoginContext.java:680) > >> at java.security.AccessController.doPrivileged(Native Method) at > >> javax.security.auth.login.LoginContext.invokePriv(LoginContext.java:6 > 80) > >> > >> > at javax.security.auth.login.LoginContext.login(LoginContext.java:587) > >> > >> > >> Now the same jaas config and same JVM args, it works fine on > >> Tomcat 6. > >> > >> -Djava.security.auth.login.config=C:\Program Files\Apache > >> Software Foundation\Tomcat 9.0\conf\jaas.config > >> > >> > >> > >> > >> Please help. > >> > >> Thanks, PJ > >> > >> > >> > > > -----BEGIN PGP SIGNATURE----- > Comment: Using GnuPG with Thunderbird - https://www.enigmail.net/ > > iQIzBAEBCAAdFiEEMmKgYcQvxMe7tcJcHPApP6U8pFgFAlwuInYACgkQHPApP6U8 > pFj1xRAAnkku03ko/9R3nWALAJm+AF1ULywHtH9qGz2TEvLA71mOfUT/pzGokoNq > z+7YHrbFoD4k5TlGctwkDYlxftzYWd6YLLSLIycUphaaMSSul2r+kXpkWnxZ/DBS > yS4pGVIaleaqXf4OFxucKVAomb56QfCSUX/UJg2sd+VcKxHZGG/gsaRkj5P6aFFj > aTDrMzVUDFnzW+1ShBxcbDs2Zl36JixvoyUXKDQJJRr+qRY6KwkuK1fH0tw2pCQO > b6wygha0r7AbRvlQiomVCxGZRHBbIctB3n9pNlLutbUsqS70kQeS0fR7UOGsLdFu > 4/8oEynxjk22wPmrb4GaakGXlwY1JmMNCFYPMrWrK2z3uTV2VmKspV/xvei6nz0W > fXuo4HoOr6pQ4DihlQHaUwvI1SvkKHJdMjTJQcMuv0fl6AdCMXTW81aR3C69p8uE > IiTpoSs/WChY13JI5BzDYebQom+aEj4bYjtKdwoFq9zLW9tH/8896j/PgXKHnMim > 4qJaRg4sN13Lxkh9WOXnZDeAc8gD4XEO7u4gtOt30hEVzuqvzksYJeA1dx9+Efiw > 7o4V+db6KcHPwklNCgXKQC6GIPofjb0cp89LqVNsh3gWAIz5uN7NecBEIMJCqli+ > CcmVgkL/Bf+4acqT1FD2g3ACYg2/4ekV4ty6HZz9aL8bJ+5N7UU= > =DkDj > -----END PGP SIGNATURE----- > > --------------------------------------------------------------------- > To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org > For additional commands, e-mail: users-h...@tomcat.apache.org > >
--------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
