Security

[none noone]

Hi,

one short question. I'm using FORM-Authentication in my frontend webapp like that:

...
<security-constraint>
		<web-resource-collection>
			<web-resource-name>Security</web-resource-name>
			<url-pattern>/index.jsp</url-pattern>
			<url-pattern>/pages/*</url-pattern>
			<http-method>GET</http-method>
			<http-method>POST</http-method>
		</web-resource-collection>
		<auth-constraint>
			<role-name>*</role-name>
		</auth-constraint>
		<user-data-constraint>
			<transport-guarantee>NONE</transport-guarantee>
		</user-data-constraint>
	</security-constraint>
	<login-config>
		<auth-method>FORM</auth-method>
		<form-login-config>
			<form-login-page>/pages/login.jsf</form-login-page>
			<form-error-page>/pages/failed-login.jsf</form-error-page>
		</form-login-config>
	</login-config>
...

I'm using the JBoss AS and also configured an login-Module in $JBOSS_HOME/server/default/conf/login-config.xml for LDAP-Security. That all works fine but unfortunately I don't know exactly why....
I can't see any connection between the login-Module and the JSF-Frontend configuration. How does the webserver knows witch login-module to choose?

Jonny

[Tim Holloway]

"none noone",

We'd like to welcome you to the JavaRanch, but you're in blatant violation of our naming rules: http://www.javaranch.com/name.jsp

Technically, this is a JBoss question and you should have asked it in the forum where the JBoss experts hang out, but in any event, you'll get an answer a lot faster if you change your display name to conform to our requirements.