JBoss LdapLoginModule always connects to localhost

[Stefan Müller]

Hello,

I'm trying to setup security for ejbs based on LDAP. I created a demo-EJB "SecuirtyTest" and setup all configuration. When I try to login with the client, the LDAPLoginModule tries to connect to localhost although I configured a different server. It seems that it doesn't use the LDAPLoginModule configuration. But the xml-File is definitly parsed by the server.
Any ideas why this is not working?

The the META-INF/jboss.xml contains:

<jboss>
<security-domain>java:/jaas/my-security-domain
</security-domain>
</jboss>

The login-config.xml contains:

<application-policy name = "my-security-domain">
        <authentication>
            <login-module code="org.jboss.security.auth.spi.LdapLoginModule"
                          flag="required">
                <module-option name="java.naming.factory.initial"> 
                    com.sun.jndi.ldap.LdapCtxFactory
                    </module-option>
                <module-option name="java.naming.provider.url">
                    ldap://ldapServer/
                </module-option>
                <module-option name="java.naming.security.authentication">
                    simple
                </module-option>
                <module-option name="principalDNPrefix">uid=</module-option>                    
                <module-option name="principalDNSuffix">,ou=People,dc=jboss,dc=org</module-option>
                <module-option name="rolesCtxDN">ou=Roles,dc=jboss,dc=org</module-option>
                <module-option name="uidAttributeID">member</module-option>
                <module-option name="matchOnUserDN">true</module-option>
                <module-option name="roleAttributeID">cn</module-option>
                <module-option name="roleAttributeIsDN">false</module-option>
                <module-option name="searchTimeLimit">5000</module-option>
                <module-option name="searchScope">ONELEVEL_SCOPE</module-option>
            </login-module>
        </authentication>
    </application-policy>

The client application looks like

...
System.setProperty("java.security.auth.login.config", "login.conf");
loginContext = new LoginContext("my-security-domain",callback );
loginContext.login();
...

and the login.conf contains

my-security-domain {
   org.jboss.security.auth.spi.LdapLoginModule required debug=true;
};