Thanks for your reply Scott.

Had tried to explicity specify the user and roles file in the application 
policy. however it didn't make a difference.   

The problem ended up being the ClientLoginModule that was included in my 
application policy.   i.e.

Before:

<application-policy name = "esubmit">
  
    <login-module code="org.jboss.security.ClientLoginModule" flag="required"> 
    </login-module> 
    <login-module code = "org.jboss.security.auth.spi.UsersRolesLoginModule" 
flag = "required">
      <module-option name="unauthenticatedIdentity">nobody</module-option> 
      <module-option name="usersProperties">users.properties</module-option>
      <module-option name="rolesProperties">roles.properties</module-option>
    </login-module>
  
</application-policy>

After:

<application-policy name = "esubmit">
  
    <login-module code = "org.jboss.security.auth.spi.UsersRolesLoginModule" 
flag = "required">
      <module-option name="unauthenticatedIdentity">nobody</module-option> 
      <module-option name="usersProperties">users.properties</module-option>
      <module-option name="rolesProperties">roles.properties</module-option>
    </login-module>
  
</application-policy>

This rectified the problem in both jboss 4.0 and jboss 4.0.1RC1.



View the original post : 
http://www.jboss.org/index.html?module=bb&op=viewtopic&p=3854368#3854368

Reply to the post : 
http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=3854368


-------------------------------------------------------
This SF.Net email is sponsored by:
Sybase ASE Linux Express Edition - download now for FREE
LinuxWorld Reader's Choice Award Winner for best database on Linux.
http://ads.osdn.com/?ad_id=5588&alloc_id=12065&op=click
_______________________________________________
JBoss-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/jboss-user

Reply via email to