Hi Florian --
This is covered by the UPGRADING document in the source tarball's root
directory. Please let me know if the docs in that file are not clear
enough (or even better, edit it).
The short answer is that JSPWiki 2.8 wires up its own JAAS login
configuration, and the old jspwiki.jaas file is not ever needed or
loaded. The same is true for the java.security.auth.login.config
property. It is NOT needed any more.
Andrew
On Jul 28, 2008, at 9:43 AM, Florian Holeczek wrote:
Hi developers, especially Andrew,
I think some clarification is needed on configuring JSPWiki security.
In particular I'm thinking of when specifying
-Djava.security.auth.login.config==.../conf/jspwiki.jaas is needed and
when not. I know that it was needed in the past, but then Andrew did
some changes to the AAA subsystem and now it is only needed in some
cases (AFAIK).
Regards,
Florian
