Karianne Berg wrote:
I could still login successfully. Why does it behave like this?
the default configuration uses the class SimpleLoginModule, which gives any user access to the repository.
And what is the easiest way to setup "real" authentication?
see: http://jackrabbit.apache.org/faq.html#access-authentication regards marcel
