Clone URL (Committers only):
https://cms.apache.org/redirect?new=anonymous;action=diff;uri=http://tomee.apache.org/tomee-jaas.mdtext
Petras
Index: trunk/content/tomee-jaas.mdtext
===================================================================
--- trunk/content/tomee-jaas.mdtext (revision 1655892)
+++ trunk/content/tomee-jaas.mdtext (working copy)
@@ -31,9 +31,9 @@
<Connector port="8009" protocol="AJP/1.3" redirectPort="8443" />
<Engine name="Catalina" defaultHost="localhost">
<!-- here is the magic -->
- <Realm className="org.apache.catalina.realm.JAASRealm"
appName="PropertiesLoginModule"
-
userClassNames="org.apache.openejb.core.security.AbstractSecurityService$User"
-
roleClassNames="org.apache.openejb.core.security.AbstractSecurityService$Group">
+ <Realm className="org.apache.catalina.realm.JAASRealm"
appName="PropertiesLogin"
+
userClassNames="org.apache.openejb.core.security.jaas.UserPrincipal"
+
roleClassNames="org.apache.openejb.core.security.jaas.GroupPrincipal">
</Realm>
<Host name="localhost" appBase="webapps"
@@ -52,5 +52,18 @@
};
-Configure your login module specifically (users.properties for snippets of
this page for instance)
+Configure your login module specifically (`users.properties` for snippets of
this page for instance).
+Place `users.properties` and `groups.properties` files in
`$CATALINA_BASE/conf/` folder.
+`users.properties` file contains user name and associated password entries,
ex.:
+
+ me=password
+ tomee=tomee
+
+`groups.properties` file specifies groups and their users, ex.:
+
+ my-role=me
+ manager-gui=tomee,me
+ tomee-admin=tomee
+
+**NOTE**: `users.properties` and `groups.properties` file names and file
location are fixed. If other names or location are preferred, their location
should be visible to the Tomcat common classloader (ex. `%CATALINA_BASE/lib/`
or locations defined by the `common.loader` property in
`$CATALINA_BASE/conf/catalina.properties`).
\ No newline at end of file
