About the security and role in web.xml

[Cainiao Zou]

That's must be a stupid question...
This is my web.xml

  <security-constraint>
		<display-name>TestDisplayName</display-name>
		<web-resource-collection>
			<web-resource-name>TestWebResourceName</web-resource-name>
			<url-pattern>/ServletTest</url-pattern>
			<http-method>GET</http-method>
			<http-method>POST</http-method>
		</web-resource-collection>
		<auth-constraint>
			<role-name>Employee</role-name>
		</auth-constraint>
		<user-data-constraint>
			<transport-guarantee>NONE</transport-guarantee>
		</user-data-constraint>
	</security-constraint>
	<login-config>
		<auth-method>BASIC</auth-method>
		<realm-name>TestRealm</realm-name>
	</login-config>  

That works perfect, i saw the popup window, but where should I set the passwords and roles?
btw, i use JBoss 5.1AS, WindowsXP

thanks

[Lester Burnham]

That's specific to the server you're using; check the JBoss documentation.

[Abimaran Kugathasan]

If you are using production server, you can use LDAP or database, where your real user security info is stored. Then you can use it rather then depending on memory realm of the server!

[Amit ChaudhariC]

As mentioned by Lester, its available in the documentation.
Please check http://community.jboss.org/wiki/SecureAWebApplicationInJBoss.

Regards,
Amit