Hi,
I'm using JAASMemoryLoginModule to authenticate users stored in tomcat-users.xml. The authentication fails on Tomcat 9 with following warning message in catalina.xx.log. org.apache.catalina.realm.JAASMemoryLoginModule.load Unable to determine Catalina base to load file [conf/tomcat-users.xml] Here is a stack trace from the web application: javax.security.auth.login.FailedLoginException: User name or password is incorrect at org.apache.catalina.realm.JAASMemoryLoginModule.login(JAASMemoryLoginModule.java:350) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) at java.lang.reflect.Method.invoke(Method.java:483) at javax.security.auth.login.LoginContext.invoke(LoginContext.java:755) at javax.security.auth.login.LoginContext.access$000(LoginContext.java:195) at javax.security.auth.login.LoginContext$4.run(LoginContext.java:682) at javax.security.auth.login.LoginContext$4.run(LoginContext.java:680) at java.security.AccessController.doPrivileged(Native Method) at javax.security.auth.login.LoginContext.invokePriv(LoginContext.java:680) at javax.security.auth.login.LoginContext.login(LoginContext.java:587) Now the same jaas config and same JVM args, it works fine on Tomcat 6. -Djava.security.auth.login.config=C:\Program Files\Apache Software Foundation\Tomcat 9.0\conf\jaas.config Please help. Thanks, PJ
