Jaas.config is a typo should be jaas.conf has the same contents as auth.conf on the dev server.
-----Original Message----- From: Caldarale, Charles R [mailto:[EMAIL PROTECTED] Sent: Wednesday, July 23, 2008 4:32 PM To: Tomcat Users List Subject: RE: context.xml and custom realm > From: Jeff Powell [mailto:[EMAIL PROTECTED] > Subject: RE: context.xml and custom realm > > <?xml version="1.0" encoding="UTF-8"?> > <Context path="/dropInv"> Remove the path attribute - it's not allowed. > <Realm className="org.apache.catalina.realm.JAASRealm" > appName="dropInv" > userClassNames="com.ips.security.UdUser" > roleClassNames="com.ips.security.UdRoles" > useContextClassLoader="true" /> > </Context> > > I just added the appName for testing and it didn't help. It's required so JAAS can locate the proper entry in the login config file. > JAVA_OPTS=-DJAVA_OPTS=-Djava.security.auth.login.config== > /opt/tomcat/conf/jaas.config What's in jaas.config? > /usr/local/apache-tomcat-6.0.16/auth.conf: > dropInv { > com.ips.security.UdLoginModule required; > loginFile="VALIDATION"; > loginKey="100!IPS.DROP.AUTH"; > userAttr="3"; > credAttr="4"; > roleAttr="5"; > }; What are the things after the LoginModule line? Only LoginModule class names are allowed here. > java.security: Don't change java.security unless you really, really want what's in there to apply to *every* Java program run on that system. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. --------------------------------------------------------------------- To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] --------------------------------------------------------------------- To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
