JAAS - No LoginModules configured

[Dana Malach]

I am trying to get a basic authenication sample working. In my servlet, I have the following code:

LoginContext lc = null;
try {
    lc = new LoginContext("Verify", new VerifyUserCallbackHandler());
} catch (LoginException le) {
System.out.println("Cannot create LoginContext. 1");
System.err.println("  " + le.getMessage());
} catch (SecurityException se) {
System.out.println("Cannot create LoginContext. 2");
System.err.println("  " + se.getMessage());
} 
try{
lc.login();
} catch (LoginException le) {
System.err.println("Authentication failed:");
 System.err.println("  " + le.getMessage());
}    

However, I keep getting the following error when I start my server (WSAD 5.1):
No LoginModules configured for Verify

I've done some searching on this and all came up with pretty much the same answer. I needed to update my java.security file to point to my jaas.config file - so I entered the following to my java.security file:
login.config.url.1=file:${java.home}/lib/security/jaas.config

That didn't work - does anyone have any ideas what else I am missing?

Thanks.

[Ulf Dittmer]

Welcome to JavaRanch.

We have a Security forum, where this question is a better fit, so I'm going to move this thread there.

[Dana Malach]

thanks for moving this thread - I didn't see the security forum when I first posted.

[Dana Malach]

ok, a little more information - when running in debug mode, the app fails at this line:

 lc = new LoginContext("jaasEAR");   

(I removed the callbackhandler to troubleshoot)
My LoginContext never gets created. I was reading that the name - 'jaasEAR' should be the name of the app. I checked in the admin console and 'jaasEAR' is the name of the app, but obviously this is wrong. Anyone have any advice on how to properly set up this LoginContext?

Thanks