Context: A webapp in Tomcat accessing session beans. The web and the EJB container are defined to be under the same security domain.
Conclusion: In this environment, we don't need to specify a JAAS login configuration file e.g. auth.conf because the security interceptor will catch unauthenticated access to web assets and forward authentication to the JAAS. Correct ? Within JBoss, the login-config.xml in each server context serves as a replacement for the auth.conf file. Please correct me if there's anything wrong with my perception above. Regards, Roonaldo Euroo 2004 View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=3839585#3839585 Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=3839585 ------------------------------------------------------- This SF.Net email sponsored by Black Hat Briefings & Training. Attend Black Hat Briefings & Training, Las Vegas July 24-29 - digital self defense, top technical experts, no vendor pitches, unmatched networking opportunities. Visit www.blackhat.com _______________________________________________ JBoss-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/jboss-user
